Printable View
A threat against me was recently posted online. I have the IP address of the computer as well as the time of the posting. I also have physical access to the computer, however the computer does not require a login in order to use it. Does anyone have any advice on how I could go about identifying the person that made the post? My thought was simply to try to find other activity with the same orginiating IP address at around the same time, but other/better ideas are welcome.
So someone posted about you and you tracked the IP to a computer you have physical access to? lmfao, well why dont you just wait around and see if he/she comes back to the machine then jump out of your hidding spot and yell "BUSTED!!!!!" that might get them. or take finger prints off the machine and have them matched to someone you know, or even better get DNA, that will get them for sure.
ok seriously, if it has no login, then it could be anyone. Who else has access to the machine? if its just you and a few other people then ask them, if its ALOT of other pople go with one of my first suggestions or give up, your choice. I guess another option would be to look in the history for places visited around the same time. =/
I have access to the computer because I'm a teacher and the computer is on the school's network. So, do I need any special software to check the history of the machine at a particular time and/or is there a way to check the network activity through a network administrator (they've been only moderately cooperative so far, which is why I'm doing the legwork)?
nope, to check the history you click on the pretty little button that says history.
and the network admins can view network activity if they have the software, and are willing to do so. but becasue its a school computer chances are youre not going to catch them becasue you cant prove it was them. even if you think you know which one it was you couldnt prove it. unless of course you have a video camera or something watching them.
Why not run the IP address through a WHOIS server? Then you should be able to get the contact information you need. (Considering the system isnt using winsocks, proxy severs, anonymous proxy servers, foregin proxy servers, wingates, spoofing software or any other techniques to spoof there IP address). Threats are a violation of the acceptable use policys for most ISPs.Quote:
A threat against me was recently posted online. I have the IP address of the computer as well as the time of the posting. I also have physical access to the computer, however the computer does not require a login in order to use it. Does anyone have any advice on how I could go about identifying the person that made the post? My thought was simply to try to find other activity with the same orginiating IP address at around the same time, but other/better ideas are welcome.
Thanks XTC and Computernerd.
Computernerd: I did the WHOIS query and that was how I determined that it was a computer that belonged to the school. And, of course, you're right that it violates the acceptable use policy (not to mention a few other policies of the school). The problem is it's a computer running in a computer lab.
XTC: The room to the lab has a swipecard reader to get access (security is checking whether its logs can be read) and I don't have too many students. In other words, reasonable evidence (such as checking an email account around the time of the posting, or logging in to another site using an identifiable user name) is all I need to have the student brought before the Dean and, hopefully, talked out of their nefarious ways. Can you tell me what software the admins would need to have. Ours is a pretty good sized university, so I would think they have something - I just need to tell them what to do, apparently.
Hi. What did this person exactly do to warrant action involving a Dean? Also, what subject do you teach?
nekenieh/Heineken ( personally, I prefer Molsons ),
You need to tell your network administrator's what tools to use ? Are they doorknobs ? Please tell me what university so I can make sure my kids don't go there.
Hmmmmmmmmmmm,
My instinctive feeling is that you have no chance whatsoever as you are not using accounts and logons.
Only two slim possibilities that I can see:
1. Any records kept by wherever "online" the threat was posted...............do they have accounts and logons?
2. Students are creatures of habit.................if the activity took place during a supervised session then the supervisor should know who sits at that workstation.............but they could have gone to the restroom?
Remember, that still does not "prove" anything so be very careful, or you and your employers could find yourselves on the wrong end of a very expensive and embarassing lawsuit. I am sure you are aware that you would find such an eventuality very "career limiting" as they say :eek:
I think that the lack of enthusiasm from your administrators speaks volumes? Basically most security is designed to prevent unauthorised access, or people going where they should not. The "enemy within" is actually very difficult to deal with.
cheers
Ok. So the PCs in the computer lab do not have any form of authentication to login into the PCs. Does these systems keeps any type of log(s) files? Also, if you have the IP address of the computer as well as the time of the posting why not break out the sheet that has everyone whos in your class at that specific time of the posting. This should narrow it down some.Quote:
however the computer does not require a login in order to use it.
Sure. What OS are on the systems in the computer lab?Quote:
Can you tell me what software the admins would need to have.
I’ve been too depressed lately to get drunk, but I’m getting there now and saw this ..
I also find it interesting that at thie time of this writing nekenieh is not subscribed to this thread! The ONLY thread he/she has ever posted to up to this point. Makes you wonder?
Anyway,
*** Anyone reading this, if you know me and feel you want to skip over this feel free, but PLEASE, read the EPILOG ****
In order to do what you want you should have been here two years ago and read and questioned EVERYTHING !
Well, can you tell me, .....Quote:
The room to the lab has a swipecard reader to get access ...
Now remember, your are under oath at a jury trial because the appeals and civil suits went that far ..... So tell me that NO ONE has ever entered that room behind someone who swiped for entry, or stood by someone entering just to place tape over the lock, or that the door was never propped open? So how do you know exactly who did and did not enter?
Have all the boxes in the lab been examined? What is the possibility that some dumb-ass student ( or faculty member ) at some other time ( maybe last semester ) put some file-sharing program on it ( or others ) which was compromised by them or someone else from the outside? What about someone downloading a virus or worm at some other time which was now lead to the box being compromised from outside?
LMFAO !!! I think Egaladeist said it grand!Quote:
Can you tell me what software the admins would need to have. Ours is a pretty good sized university, so I would think they have something - I just need to tell them what to do, apparently.
ROFLMFAO !!!!Quote:
You need to tell your network administrator's what tools to use ? Are they doorknobs ?
Anybody, see if I missed something, I’m sure I did:
1) check the ... wait a minute, you said the threat was “ posted online” .. what EXACTLY does that mean? Posted on a forum, in an e-mail, web-page hijacked?
2) You said you found the computer where threat was made from. How? How good is your evidence?
3) check who logged into the computer ( oh, forgot, no login required ... that’s ok with the admins ? )
OK, now to your question:
4) Check with the IT Admins.
a)Do they have and retain firewall logs?
b) How about IDS Logs ?
c) are the IDS placed properly and appropriately?
d) Do they know how to read the logs?
e) Do they know how to retain evidence?
f) In the event that the IP address that you identified had been taken over, when was the last time they checked the integrity of the network?
The list goes on, but my point here is that if the network was properly secured this may or may not have been prevented, but could definitely be tracked down. But if you have to tell your admins how to do it then it was not properly secured ( unless the powers that be fired the only ones who knew what they were doing ... do you work for a private or government entity ? )
Epilog:
You did not say nor did you include where you are. I will assume then you will fall under similar laws to where I am. That being said:
1) If you feel these threats have no merit, won’t ever be carried out, ( and you did not say what the threats were, ) that they are mere harassment, you may or may not be REQUIRED to notify authorities.
2) If you feel that these threats are such that you believe that you are in physical danger and that you reasonably believe that they would be carried out you are OBLIGATED to notify authorities, weather or not you work for a public or private entity.
Although I initially found it amusing and typical it probably is a serious situation on many fronts. But I have been around too long and seen incompetence too often in all the above alluded to arenas to assume the right thing was done to properly prosecute the offender(s).
Remember, any hacker worth a damn will be able to cover most if not all their tracks, depending on how good the Admins are. If you have to tell them what to do, after asking here, the game is lost.
I at least hope this shed some light on the situation.
Good point, we call that "tailgating", also if the door is a fire door it should have an inspection panel.............just bang on the door and someone who recognises you will let you in.Quote:
Now remember, your are under oath at a jury trial because the appeals and civil suits went that far ..... So tell me that NO ONE has ever entered that room behind someone who swiped for entry, or stood by someone entering just to place tape over the lock, or that the door was never propped open? So how do you know exactly who did and did not enter?
I would have thought that fairly unsophisticated remote support capabilities would allow someone elsewhere to us the machine as a proxy? Another possibility perhaps? Naturally they would disable them afterwards.Quote:
Have all the boxes in the lab been examined? What is the possibility that some dumb-ass student ( or faculty member ) at some other time ( maybe last semester ) put some file-sharing program on it ( or others ) which was compromised by them or someone else from the outside? What about someone downloading a virus or worm at some other time which was now lead to the box being compromised from outside?
I do hope that it was a threat, rather than a promise made by one who keeps their word :eek:Quote:
A threat against me was recently posted online
Indeed it does :D Perhaps we are advising the defence rather than the prosecution? ..........hmmm.......... I guess I would go for $250,000 compensation and free tuition for the rest of my life............seems like a reasonable plea bargain to me :DQuote:
I also find it interesting that at thie time of this writing nekenieh is not subscribed to this thread! The ONLY thread he/she has ever posted to up to this point. Makes you wonder?
If the person has to sig a log sheet to use the computer check it and match it up with the history
Ahh nothing like good old paper
I wanted to thank everyone for the help. I'm going to go back to the IT people today and get some more specifics, check on the swipecard reader, etc.
To answer a couple of the questions posted: the lab PCs run Windows XP (I'm pretty sure w/SP2), the threat was made to an online bulletin board (they are the ones who provided me with the time and IP address) but the board does not require a login, and, finally, I don't need "beyond a reasonable doubt" evidence, I just need enough to get the student to admit what they did was wrong, etc. (i.e. scare them into an admission - generally not too hard).
Finally, for the poster who asked what warranted the attention of a Dean: any threat made by one member of the university to another.
Hmmm
How did you find out about it then? I am certain that it was not a random action or random choice on the part of the perpertrator.Quote:
the threat was made to an online bulletin board
Oh really, and which of the World's glorious fascist dictatorships do you happen to live in? If I were you I would get down off that ivory tower high horse before some hot shot lawyer blows you off it :eek: . I don't care what "rules" you think your insignificant little institution has (yes even Yale, Harvard, Stanford, Berkley).............it is answerable to the LAW, both civil and criminal...........that is a fact. Similarly, so are you ;)Quote:
I don't need "beyond a reasonable doubt" evidence, I just need enough to get the student to admit what they did was wrong, etc. (i.e. scare them into an admission - generally not too hard).
So, lets look at what you have got?
1. A computer lab with equipment that does not require a User ID or login, yet allows internet connectivity, and a bulletin board that does not require logins etc.
2. You have a set of IT administrators who, from your description, make the local supermarket vegetable shelves seem "gifted" (they would be the first witnesses I would call)
3. An access control system using a swipe card.............not sure what it logs, but no "turnstile" single person entry control I will bet. This would allow "tailgating", as I mentioned. Also, I will bet that you just have to push a button to get out (you DO comply with fire regulations at your institution, I take it?) This means that someone on the inside can let people in, and you have no idea when people left.
4. No surveillance or keylogging to prove who may have done it, and which computer was actually used.
5. You have no way of telling who used the computer, or even if it really was that computer that was used. If you don't have to log in, why bother logging out?
6. Previous and subsequent usage proves nothing in an environment such as you describe.
I suspect that if someone is out to get you, they are doing it by playing to your intellectual and personality shortcomings ( I base that assessment on your statement: "scare them into an admission - generally not too hard") and are setting you up for a nice little lawsuit. You can bet that they are not on their own, and have probably got reasonably expert advice.
I would strongly recommend that you discuss your proposed actions with your Dean, and a competent legal authority. Remember your actions commit your institution as well as yourself.
Heineken,
It's really hard for the people here to access your situation without certain information that you have excluded from your profile and have avoided answering here in this thread...
Why the secrecy? What institution are we talking about? What do you teach? Where are you located? What bulletin board, and where can we find it to correctly assess your damages?
Wait a second, what kind of university has all external IP addresses? I mean really. You say it’s a good sized university, so unless the kid was on a server that has an external IP address than every computer on the network will have the same IP according to the message board. Any lab computer that I have ever seen will have internal IP addresses; I could be wrong because I have only worked on about a dozen school networks. That means that the IP you got from the message board is the external IP for the school (atleast one of them) and it could have been posted from ANY computer on the network and you couldnt tell. So tell us, how exactly did you track down a single computer in the lab, with only an external IP address to work with?
after this realization, in combination with the supposedly good for nothing admins who don’t promote logons to terminals (especially at a university), the fact that you stumbled on this threat randomly, your secrecy, and the fact that you plan on going after a kid with little more than a screen name leads me to believe this is all bullshit. Anyone agree?
AyeQuote:
Anyone agree?
MLF
As someone who works in a post-secondary educational unit I have some suggestions:
First, if it's a threat many jurisdications do consider that a legal issue and can be a crime punishable by law. The problem arises from a lack of authentication and identification. What you may believe as to who it is may not be in fact the case (e.g., ratemyprofessor.com -- perhaps this is the site in question -- has tonnes of students posting and some post well after they have passed/failed the course).
Second, we had a similar issue -- very nasty comments about what a few students wanted to do to certain profs (along with tests and exam questions being passed around by students). We got around this by having the school offer and host it's own BB. This means that they control who logs in and KNOWS who it is since the authenication is tied to their existing school account (they MUST have a school email and the password associated with it to log in -- this isn't foolproof but does make it somewhat easier to track down).
Lastly, if you're not hosting it (as in the university hosting it) I doubt there is much that can be done unless the threat is a serious death threat (I know of written RPGs way back when and a certain "attempted rape" case).
nekenieh,
- I was in the office this afternoon while reading this thread. I was eager to ask some points but I guess observing it would probably minimize my confusions. Nevertheless, the succeeding replies made me write this points:
A)- I am just wondering why a pretty good sized university is more concern on securing the computer lab rather than the workstations itself (not to mention that it is running Win XP [and with SP2 - did the admin ever read about the so called benefits of SP2?] (at least a USER AND PW can be configured)? 'Coz IMHO, universities should have these standard protocols in facilities they use.Quote:
computer is on the school's network... ...The room to the lab has a swipecard reader to get access... ...Ours is a pretty good sized university
B)- I was going to ask this bacause I just had an idea that the "ONLINE" you had mentioned could fall into forum, guestbook or e-mail. Well, close enough. But the question is, how did you know about the threat? Did the BBS guys told you or informed you about it? Or you happened to be a member of the BBS (public?). And about the IP and time, for sure BBS servers have more info to give, you can ask them again.Quote:
the threat was made to an online bulletin board (they are the ones who provided me with the time and IP address)
C) About the University's policy on security, I just can't believe that a pretty good sized university lacks the ADMINISTRATIVE CONTROL OVER THE WORKSTATIONS? Did I miss something here?
D) Lastly,- I could sum-up the advice but it will be effective on the next tracing that you could conduct:Quote:
any advice on how I could go about identifying the person that made the post?
- TO THE ADMIN, DO YOUR JOB AND SECURE THE WORKSTATION (God!)
- TO THE BBS people (if they are part of the ADMIN, do what MsM told,- AND TO YOU,Quote:
they control who logs in and KNOWS who it is since the authenication is tied to their existing school account (they MUST have a school email and the password associated with it to log in -- this isn't foolproof but does make it somewhat easier to track down).
believe me, you'll need it.Quote:
I don't need "beyond a reasonable doubt" evidence
BTW, I am just making a point that what you are trying to trace would be difficult given that the information you have so far, may not help answering your needs. Before AO could give concrete inputs and answers, please answer such question raised by the AO guys.
Goodluck!
Yo!
*most of the points I had mentioned above had been mentioned in somewhat another way or exactly as is by other AO guys (my bad, too much reading... LoLz)
Thanks Msmittens and Scratchonthebox. I agree that, if what I know of the computer security is correct, then it does need to be changed. I'm meeting with the University ombudsman later in the week and this is one of the things we will be discussing.
A couple people have said that more information needs to be given before they can help. That's fine, but be specific. It was a message posted onto an online site that does not require a login, it referenced me specifically, as well as a class that I taught in the recently completed term (and had not taught before), it made a physical threat that was credible to the website admin, myself, the police, and my lawyer. From the website admin I obtained an IP address and a time of the posting. According to WHOIS, the IP address is part of a batch assigned to my University, and according to them the posting was made from a computer lab that does not require you to login to its workstations, that does not have someone physically present watching the room, and that only has a cardswipe to get access (and, yes, I know about tailgating). For what seem obvious reasons, I'm not going to say who I am or where I work.
What I'm looking for are specific requests to take to the IT people at the University (along the lines of "check this log file...") since, at this point, I'm not convinced that they're doing all they can to find out about this posting.
Finally, to those who have replied thinking that this is a hoax, or I need to learn more about the law (that's what I teach folks, so please don't lecture me), etc. - that's fine, you're entitled to your opinions, but unless you have something worthwhile to contribute, please stop cluttering up this thread.
Heineken,
Your extremely limited profile and you shurking of the questions is why people, including myself, are suspicious of your motives...excuuuuuuse meeeeeee but we often have people coming here who pretend to be someone they're not, asking questions for the wrong purposes...
our only evidence that you are who you say you are and you're not some game junkie high on mushrooms who got dissed by another game junkie on a bulletin board and is out to get even is your say-so...
excuuuuuuuse meeeeeeeee again but there are some things you've said that just don't add up! This university itself is called what exactly: UFTMI ( University For The Mentally Incompetent ) !
Egaladeist: those game junkies, etc. are precisely why I'm not going to post information about myself unless it is germane to figuring out who sent the post. If I've posted info that doesn't add up, it's probably because I'm not techincally savvy - let me know what's inconsistent and I'll try to clear it up.
Oh, and it's "shirking" not "shurking" (perhaps that helps establish me as a professor).
Then there isn't much you can do to prove who it is really. Unless there was something put in beforehand (a form of forced authentication), you have no way of knowing for sure who it is and I would think (based on what happens here) that if you accuse a student of something they didn't do they may take an even stronger objection (e.g., lawsuit for deframation, slander or something else -- you probably know this better than I).Quote:
It was a message posted onto an online site that does not require a login, it referenced me specifically, as well as a class that I taught in the recently completed term (and had not taught before), it made a physical threat that was credible to the website admin, myself, the police, and my lawyer. From the website admin I obtained an IP address and a time of the posting. According to WHOIS, the IP address is part of a batch assigned to my University, and according to them the posting was made from a computer lab that does not require you to login to its workstations, that does not have someone physically present watching the room, and that only has a cardswipe to get access (and, yes, I know about tailgating).
And as an additional thought, and I'm thinking at random here, if a machine was compromised in the lab (has that been checked yet and not knowing the OS of the systems in question) then it could have been used to post the comment. The actual source (person) could have been off-campus using the compromised machine.
Although, if perhaps you had a "witness" or suggested witness it might make them "confess" but that's only if you know for a fact that there was more than one person in the room at the time (ideally a packed house). Since they won't know who "fingered" them perhaps that might work.
No, that just establishes me as being over-tired ! :rolleyes:Quote:
Oh, and it's "shirking" not "shurking" (perhaps that helps establish me as a professor).
- IF EVER IT IS (workstation) a Win XP Professional (not Win XP Home).Quote:
What I'm looking for are specific requests to take to the IT people at the University (along the lines of "check this log file...") since, at this point, I'm not convinced that they're doing all they can to find out about this posting.
- Since we may not have enough info directly on the server, can you request that the specific workstation (IF SPECIFIC IP IS ASSIGNED TO THAT BOX ONLY) to be isolated and be investigated. You need to have the following info:
A. HISTORY IN THE BOX (IF AVAILABLE)
- Date/Time of POST in the BBS (compare it with the log of the BoX/PC/Workstation)
- Check the history logs of the BoX (for sure the ADMIN knows where to find it, if not, get themselves another JOB/WORK).
- Just like what you are looking for, sites visited during the said Date/Time, even messenger used (you may find the user profile, dig dig dig).
B. NO HISTORY, THEN NARROW THE OPTIONS
- MsM said, maybe there will be witness (s), narrow the options who might use the specific BoX. At least you have the Date/Time and workstation being used, look around and observe any unusual user doing unusual stuff (better have someone spy on them -- for investigatory purposes).
C. IT HAPPENED BEFORE, IT WILL HAPPEN AGAIN
- Like GnR ssaid, have a little patience... Yeah!
- Take the suggestions made, at the right time, the right place, the ADMIN should have setup the LOG SYSTEM already.
BUT BUT BUT... If ever the offender is clever enough to be remotely accessing the network, then go to *A,B,C and loop until the University decides to get a more SECURED-CONCIOUS TECHNICAL SAVVY STAFFS (meaning a more competent ADMIN who will do the REAL ADMIN TASKS).
Yo!
The germane answer is you will never find out. The whole idea of internal IT security is based on each user having a unique identity and a password to access the system.
Normally you would expect that to be recorded (logged) in the firewall and internet usage monitors, or whatever system you have. All you will find from those is source, destination and time, which you know already.
I very much doubt if those are anything but minimalistic, as there is no point in keeping detail when you don't know who the user is. Anyway who would monitor these logs, and for what? It sounds very much that this lab is outside your main network, and is not paid much attention to by your IT department.
You might be able to trace visits to other sites before and after, but they will be able to tell you less or the same as the bulletin board, and they won't even bother to do that, because they will read it as none of their business. The bulletin board had something nasty on their site so they would help, as their service had been used for an illegal activity.................but as a law professor you should already be aware of that.
It is time to give up and move on...............sorting out your internal security would be a good place to move to.
Scratchonthebox & nihil: Thank you for the suggestions/advice. This is what I was looking for and I think I have enough to get some action out of the IT staff and also, hopefully, get the University to reevaluate some of their computing policies. I'll post again if something new develops.
Nekenieh, understand that people on here are a little precautious spreading information due to the fact that a lot of people try to use social engineering to get information. Noone knows you are who you say you are and thus people are a little cautious.
Since this is a public board that you said was posted on you could private message someone trustworthy here the link and let them check it out and maybe have them vouch for you being legit. I understand your cautiousness in releasing this information, but from this side, it looks like you're standing behind a smokescreen.
For the most part it looks like you're stuck between a rock and a hard place. There is no account tied to the user who did what you say, on the computer or on the message board. The only way to find out who someone is, is to link something they did with their identity. Logging onto a workstation or message board is a very good linking situation.
You said earlier that this threat was credible to the police? If this is true I would expect they are doing an investigation?Quote:
Originally posted here by nekenieh
It was a message posted onto an online site that does not require a login, it referenced me specifically, as well as a class that I taught in the recently completed term (and had not taught before), it made a physical threat that was credible to the website admin, myself, the police, and my lawyer.
The only piece of advice that I have that "might" help locate who it was is to look at the history and cookies on the machine. It is possible that the user was doing something else at the time that might link him/her to his identity. Maybe he/she was on hotmail or something. This is a long shot, but worth a look.
Having recently left university, the above was basic, standard procedure to access the system from anywhere within the university, and one would imagine applies to most organisationsQuote:
Originally posted here by nihil
The germane answer is you will never find out. The whole idea of internal IT security is based on each user having a unique identity and a password to access the system.
I am not sure whether anyone have cover this possibility. But there is also a high chance that someone remotely control the said workstation and does what is seen unacceptable to you.
I realise this thread have turn out to be more flaming than informative. At least that is how i felt as a casual forumer.
Nekenieh, maybe you should consider hiring a info-security expert to look at the overall security issue. You need to implement a complete system rather than piece and pieces of hardware/ policies that have loop holes everywhere. In this case, the access card log and the surveilance camera might be your best bet but it is highly unreliable in this case.
Some of the combination of microsoft security flaws might be putted together to remotely execute something in the said workstation.
According to what you have mention about your environment. There are far too many possibility that could have taken place and none of the consideration factor has any form of "validation" on the user ID. That makes it next to impossible to pinpoint a particular individual for commiting such act.
Hope this very much sum up everything. These is just my two cents worth while trying to help out.
This thread has gone way out of hand. It is either grand social engineering or, perhaps it is legitimate, but still way off base.
No, it means you have a spell checker.Quote:
Oh, and it's "shirking" not "shurking" (perhaps that helps establish me as a professor).
No, I have been here a lot longer and established myself as somewhat creditable ( unlike you ), responded appropriately to the information given, am entitled to freedom of speech ... oh, forgot, I can’t tell you about that! Never mind, I can’t go there!Quote:
... to those who have replied thinking that this is a hoax, or I need to learn more about the law (that's what I teach folks, so please don't lecture me), etc. - that's fine, you're entitled to your opinions, but unless you have something worthwhile to contribute, please stop cluttering up this thread.
Let me understand this.Quote:
it made a physical threat that was credible
The threat is both credible and against you physically?So the authorities are involved ( so you say )Quote:
...that was credible to the website admin, myself, the police, and my lawyer.
You teach law ( so you say )
You post, don’t provide proper information, manipulate your site subscriptions as a first time poster ( then correct it after it is pointed out ) yet say( forgot to spell check that one professor, didn’t you. )Quote:
... I'm not techincally savvy -
Well, hooray for you ... you are more arrogant then me, and anyone more arrogant then me is an ******* !!!!!!
Now to the nuts and bolts.
But you said the authorities are involved. You can do NOTHING with the Dean until their investigation is concluded! Oh, you teach law, I forgot, so you already know that! That would be interfering with an investigation! And you and the Dean could be criminally charged if you did that!Quote:
... I don't need "beyond a reasonable doubt" evidence, I just need enough to get the student to admit what they did was wrong, etc. (i.e. scare them into an admission - generally not too hard).
And you also know that you must. repeat, must reveal all your inquiries ( these posts most specifically included ) in discovery! should it go that far, but as you said it is credible to the authorities, so I guess you will.
( those familiar with “ Sarbanes-Oxley “ already know what “ legal discovery “ is, but also goes back to my original post as to whether this is a private or government entity subject to “ public records” )
If this is an active investigation you have two choices here, and two choices only ( can anyone say obligation? ).
1) Tell the authorities ( including but not limited to, the prosecutor ) what you have done here and provide them with appropriate links
2) PM me with your name, where you work, your position, the authorities you reported it too: I will contact them and verify the situation, inform them about this thread, and quite possibly direct them in the proper direction if they are clueless.
I would prefer #1, but that is up to you ( you are the Law Professor! ). But it would be up to you ( again, the word obligation comes to mind here ) to verify that I did so!
No one knows what I do, by design, but I know a little bit about the law. ( again, the word “ arrogant “ comes to mind. That said, Gore, I don’t think we want to meet in person! )
You want something specific to go to your ” University ombudsman “ which is “worthwhile to contribute” ?
How about the time stamps? How do each of the systems involved correlate the correct time?
I’ve seen internal systems that were so called “ synced “ to satellite time be off by three ( 3 ) minutes. Obviously, they were not “ synced” properly. To do what you wish you will have to prove the systems were properly “ synced”.
If I were You, and I am not, I would go to the admins, call them *******s to their face, apologize for their and your ignorance, do #1 above and again apologize for your ignorance, and walk away.
Heineken,
First you come here requesting help with discovering who this person is...no reference at all to a dean's involvement, police involvement, or even administrative involvement...but then 5 posts later they are all involved...Quote:
My thought was simply to try to find other activity with the same orginiating IP address at around the same time, but other/better ideas are welcome.
and not just involved but all find the evidence credible...but...at the same time you say they are not cooperating...Quote:
physical threat that was credible to the website admin, myself, the police, and my lawyer
and morons...Quote:
(they've been only moderately cooperative so far, which is why I'm doing the legwork)?
and not only do they find this credible...but are uncooperative ( do you see the glaring contradiction )...but you are one of their own...Quote:
Ours is a pretty good sized university, so I would think they have something - I just need to tell them what to do, apparently.
and they are still making you do all the legwork..but to go on...Quote:
I need to learn more about the law (that's what I teach
Thank-you I Know Not for pointing this out...it's: technically, not techincally!Quote:
I'm not techincally savvy
You're a teacher of law and yet you can't get the assistance of the authorities, the police, the Dean, or the the tech staff to help you...but, instead must scour the net for help from strangers to solve your problem. Is the reason why you're not getting help from your uncooperative tech staff, your Dean, the police, and your administrators even after they have, as you said, found your case to be credible, because they can't stand you or are you just lying? If you're not lying...they must not like you very much!
You would think that someone who is a member of the staff, a teacher of law ( OPPS! Sorry...a PROFESSOR of LAW ), with the backing of a University, it's Dean, it's administrators, the police, tech staff, and a lawyer, who have all found your problem credible...would not need to ask the advice of a bunch of strangers on a forum.
And we don't even know what country or laws you are refering to because you neglected to post it in your profile and refuse to tell us in this thread.
Personally, I think you're just trying to jerk our chain!