OT: Is there possible juicy news????

Submitted by UMichMSW07 on
"@mgoblog: Does anyone know if it's possible to confirm the authenticity of an email with a third party source if you have all the header info?" Keep us posted Brian. Here's hoping Harbaugh is jockeying for the HC job! A boy can dream.

Inflames

October 23rd, 2014 at 10:09 AM ^

the flight plan of UofM's plane showing it landing in SF today and a passanger list showing an Ann Arbor realtor on board! If it isnt delete the email instantly.

Magnum P.I.

October 23rd, 2014 at 10:17 AM ^

Is the question whether you can confirm the voracity ... er, veracity of a forwarded email message? Then I think the answer is "no." You can confirm you received an email from me, sure, but I can type whatever I want below the forwarded message line, including the correct email address for a U-M regent and a campus IP address.

MaizeAndBlueWahoo

October 23rd, 2014 at 10:58 AM ^

WD posted an email sent to his aunt (or a friend of his aunt, or something) purportedly from DB saying "we will be fine without you.  have a nice life." in response to .... something, presumably a threat to stop coming to games / sending money / etc.   Authenticity was called into question and the original email sent to DB was missing.  MGoBlog FOIA'ed the email chain to find out the rest of the story.

That said, I doubt this has anything to do with that, because I think Brian would be willing to take anything resulting from that at face value.

Lucky Socks

October 23rd, 2014 at 11:06 AM ^

I don't always agree with Brian's opinions (especially lately), but I continue to value his opinions and visit this blog because I know they are always based on something real.  Thank you for going through lengths to validate whatever information you've acquired instead of rumor mongering.  

If it's good -- I hope we learn soon.

 

Don

October 23rd, 2014 at 11:18 AM ^

Brandon is debuting a mascot for the IU game. Willy the Wolverine will roam the grounds outside the stands selling bottles of AbsoPure's new line of raw juice: SuprJooser High-Colonic Raspberry Purge®. No shit.

Reader71

October 23rd, 2014 at 11:30 AM ^

This has to be about WD's friend's aunt's email, right?

Third party being the friend, who might have the full header.

I really hope the email is true. Not that I think anyone would really care nor that I think the president would fire him over an e-mail exchange, but it would really put me into the anti-Brandon camp. I don't like being so apathetic about it.

BornInA2

October 23rd, 2014 at 12:02 PM ^

Another vote for this:

It's easy to forge the sender/from info in the header.

It's easy to forge the host name of the sending server in the header.

It's difficult to forge the IP address of the sending server in the header.

Using that last bit (no pun intended), it's often possible to determine if the email was sent from a server authorized (through an MX record or SPF record) to send email from that domain (i.e. the "@domain.com" part).

But that's it: There's no way to determine if the email was somehow faked and relayed through a legit email server for the domain; a poorly configured email server can allow this. And there's no way to be certain that the sending account wasn't hacked/compromised and used to send a misleading or untrue email. I see this on a daily basis in my junk folder.

Edit to add: If the email was forwarded from a source, it wouldn't have the header required; the header would only have info on the transmission of the email from the source to Brian. To see/verify the header on the original email, that email would have to be sent as an attachment to another email. Each time an email is forwarded/replied to, the header is entirely rewritten.

lilpenny1316

October 23rd, 2014 at 2:45 PM ^

The deposed king of the 49ers has to wire his acceptance letter for the HC job and $10,000,000,000,000 USD into a bank account.  Please respond quickly and receive "UNIMANGIABLE EARTHY AND HEAVANLY REWARDS"

RoxyMtnHiM

October 23rd, 2014 at 3:10 PM ^

Brian's pretty tech savvy and has probably already found something like this:

https://toolbox.googleapps.com/apps/messageheader/

But in case not.

Using PHP's mail() function or the Pear library, for example, you can construct your headers about anyway you'd wish to make it appear (on the surface) to have originated just about anywhere. Tracking backward through mail gateways to the last trusted one is the technique, I gather. A little bit of reading up on the topic piques my interest, but I haven't any experience sleuthing email origins out, just scripting outbound emails.