The Gavel is in Your Hands

You Be the Judge.
Exhibit A: the original mass list.	Exhibit B: the email in question.	Exhibit D: the AIM log file.
As confirmed by a reliable source, this list did not originally belong to the perpetrator. He merely reused it from a mass email. The remaining numbers of the email accounts have been left out to protect the privacy of each individual chhu____@umn.edu, leex____@umn.edu, kaox____@umn.edu, jons____@umn.edu, kwan____@umn.edu, chia____@umn.edu, chia____@umn.edu, ngxx____@umn.edu, warn____@umn.edu, shyu____@umn.edu, bw____@hotmail.com, chie____@umn.edu, huan____@umn.edu, huan____@umn.edu, b____@bigfoot.com, chen____@umn.edu, k____@hotmail.com, khot____@umn.edu, wong____@umn.edu, anthony@iamanthony.com, flan____@umn.edu, kwan____@umn.edu	Below is the original email sent by the perpetrator. I've included the header file, the portion of an email that Network Administrators, FBI, NSA, and other authorities use to trace emails to its source. Received: from [64.4.15.7] by mail.activewebhosting.com (ArGoSoft Mail Server Pro for WinNT/2000/XP, Version 1.8 (1.8.4.1)); Wed, 17 Sep 2003 21:21:00 -0700 Received: from mail pickup service by hotmail.com with Microsoft SMTPSVC; Wed, 17 Sep 2003 21:20:48 -0700 Received: from 24.118.122.173 by lw10fd.law10.hotmail.msn.com with HTTP; Thu, 18 Sep 2003 04:20:44 GMT X-Originating-IP: [24.118.122.173] X-Originating-Email: [iamanthonymn@hotmail.com] From: "A C" <iamanthonymn@hotmail.com> To: << see Exhibit A >> Cc: casa@umn.edu Bcc: Subject: Hey Look at these Pics! Date: Thu, 18 Sep 2003 04:20:44 +0000 Mime-Version: 1.0 Content-Type: multipart/mixed; boundary="----=_NextPart_000_16e_4416_7f74" Message-ID: <Law10-F7C0Yjzp4ITnE0000ea82@hotmail.com> X-OriginalArrivalTime: 18 Sep 2003 04:20:48.0500 (UTC) FILETIME=[3CCDDB40:01C37D9C] X-ArGoMail-Read: Yes This is a multi-part message in MIME format. ------=_NextPart_000_16e_4416_7f74 Content-Type: text/plain; format=flowed Hey guys check out these pics I took at the AvenPitch Concert @ the Kitty Kat Club! I hate this person that is in this photo so much that I decided to make a few modifications. Ha ha, look at the crying face that I put over his head. I am so clever, I hate this guy so much I want you all to send this photo to everyone you know. Let me give you a hint his name starts with an A and ends with a S. I seriously want to kick his ass, he thinks he's so much better than me but he isn't. I will make more money than he will, and I also get more girls because i"m better looking. What a fuckface, just because he works he thinks he's better than me? Hell no. Check out my website that I made its so cool - http://www.iamanthony.com Anthony	This conversation took place at Friday, Sept. 19 at 4:11pm. Prior to this day "ShyutanSan" did not have my screenname, nor does he know when I'm usually online. ShyutanSan (4:11:09 PM): hey is this tony? BianDang (4:11:33 PM): is there something you want to tell me? ShyutanSan (4:11:39 PM): yeah that is so not cool man ShyutanSan (4:11:43 PM): sending those emails like that BianDang (4:12:04 PM): i did a trace and it's coming from someone in akira group ShyutanSan (4:12:12 PM): akira group? BianDang (4:12:18 PM): dont worry the authorites will get to the bottom of this ShyutanSan (4:12:27 PM): good! BianDang (4:12:35 PM): someone is impersonating me, but I think you're well aware of this. ShyutanSan (4:12:51 PM): yeah thats what i thought too ShyutanSan (4:13:00 PM): i was about to say ShyutanSan (4:13:05 PM): you wouldn't do anything like that BianDang (4:13:09 PM): so you dont know who this person might be? ShyutanSan (4:13:21 PM): well did you say it came from work? ShyutanSan (4:13:25 PM): the building server? ShyutanSan (4:13:37 PM): give me the IP BianDang (4:13:39 PM): what's your cell, we should talk about this ShyutanSan (4:13:48 PM): i'm at the law school BianDang (4:13:52 PM): mondale? ShyutanSan (4:13:53 PM): let me get a number ShyutanSan (4:13:54 PM): yeah ShyutanSan (4:13:56 PM): brb ShyutanSan (4:14:04 PM): extention 55807 ShyutanSan (4:14:11 PM): 6255807
	Exhibit C: the response in question (the response was almost immediately after the email in question.)
	Received: from [160.94.128.45] by mail.activewebhosting.com (ArGoSoft Mail Server Pro for WinNT/2000/XP, Version 1.8 (1.8.4.1)); Thu, 18 Sep 2003 06:17:59 -0700 Return-Path: <shyu0001@umn.edu> Received: from dingo.software.umn.edu (dingo.software.umn.edu [128.101.103.113]) by mhub-c2.tc.umn.edu with ESMTP; Thu, 18 Sep 2003 08:17:50 -0500 (CDT) X-Umn-Remote-Mta: [N] dingo.software.umn.edu #+LO Received: (from nobody@localhost) by dingo.software.umn.edu (8.12.8/8.12.8) id h8IDHoM4014568; Thu, 18 Sep 2003 08:17:50 -0500 Message-Id: <200309181317.h8IDHoM4014568@dingo.software.umn.edu> Date: Thu, 18 Sep 2003 08:17:50 CDT From: Andrew Shyu <shyu0001@umn.edu> Subject: Re: Hey Look at these Pics! To: A C <iamanthonymn@hotmail.com>, << see Exhibit A >> cc: casa@umn.edu MIME-Version: 1.0 Content-Type: TEXT/plain; CHARSET=US-ASCII X-Tick-Nemesis: American Maid X-remote-user-ip: 160.94.55.69 X-ArGoMail-Read: Yes you want to kick my ass? how old are we now? you choose the time and place man... seriously, i don't even remember talking to you for more than one minute in my whole entire life. just because i choose not to talk to you and i think you're freakin' shadey, doesn't mean you have to act like a bitch. - - Andrew Shyu Oh yeah btw, my name doesn't end with a "S" einstein...
The Gavel is in Your Hands.