Xref: utzoo news.sysadmin:493 news.software.b:1054
Path: utzoo!utgpu!water!watmath!clyde!cbosgd!ihnp4!ihuxv!boberg
From: boberg@ihuxv.ATT.COM (Bruce Oberg)
Newsgroups: news.sysadmin,news.software.b
Subject: Re: Duplicate articles - munged Ids and paths
Keywords: duplicate articles
Message-ID: <2352@ihuxv.ATT.COM>
Date: 13 Jan 88 00:53:15 GMT
References: <2791@killer.UUCP>
Reply-To: boberg@ihuxv.UUCP (Bruce Oberg)
Distribution: na
Organization: AT&T Netnews Police - Indian Hill Street Precinct
Lines: 33

In article <2791@killer.UUCP> root@killer.UUCP (Admin) writes:
>
>    It came to my attention that there seemed to be an unusual number of
>duplicate articles on the system. Some representative headers of these
>are:

...

>Path: killer!codas!mtune!mtgzz!mtuxo!homxb!ihnp4!ihlpe!dpbaudra
>From: dpbaudra@ihlpe.ATT.COM (452is-Braune)
>Newsgroups: comp.periphs
>Subject: Re: Miniscribe 3425 with RLL?
>Message-ID: <2420@ihlpe.ATT.COM>

...

>Path: killer!codas!mtune!rutgers!mit-eddie!uw-beaver!tikal!hplsla!hpubvwa!ihlpe!dpbaudra
>From: dpbaudra@ihlpe
>Newsgroups: comp.periphs
>Subject: Re: Miniscribe 3425 with RLL?
>Message-ID: <2420@ihlpe>


interesting... not only are the "From:" and "Message-ID:" lines
getting crapped up, but the "Path:" line as well!

the first "Path:" appears perfectly reasonable, but the second one
was hacked by someone; ihlpe does not send news to hpubvwa!

i'd suspect tikal, hplsla or hpubvwa...

bruce oberg
..!ihnp4!ihuxv!boberg