NOTE: The publisher of these anonymous articles sometimes poses as “Frank Arthur.” Frank
Arthur is a real person, and is not associated with the publisher in any way.
Once you know what to look for, it is easy to distinguish the real Frank Arthur’s
articles from the forged ones. You simply examine the “Path:” data in the
header. Here is the path from a genuine Frank Arthur posting – notice the
bellsouth servers through which the article was sent:
Path: sn-us!sn-feed-sjc-03!sn-us!sn-feed-sjc-02!sn-xt-sjc-11!sn-xt-sjc-06!
sn-xt-sjc-12!supernews.com!
postnews.google.com!news2.google.com!news.glorb.com!
bigfeed2.bellsouth.net!
bignumber.bellsouth.net!news.bellsouth.net!bignews7.
bellsouth.net.POSTED!092d86c4!not-for-mail
Now examine the path from this forgery:
From [email protected] Sat Feb 2 12:05:27 EST 2008
Article: 162987 of soc.culture.baltics
Xref: sn-us soc.culture.australian:423594 soc.culture.baltics:162987 soc.culture.russian:477348
Path: sn-us!sn-feed-sjc-01!sn-xt-sjc-10!sn-xt-
sjc-01!sn-xt-sjc-14!supernews.com!newsfeed.news2me.com!new
sfeed.icl.net!newsfeed.fjserv.net!newsfeed00.sul.t-online.de!t-online.de!news.karotte.org
!news2.arglkargh.de!news.mixmin.net!aioe.org!not-for-mail
From: Frank Arthur
As you can see, there is no sign of bellsouth.net. The forger’s article passed
through aioe.org, an anonymous remailing system.
