From: Henry Baker <hbaker1@pipeline.com> Date: 4/19/19, 11:49 AM

I just received a "phishing" email whose header said it came from webwork.maa.org.

From: Tomas Rokicki <rokicki@gmail.com> Date: 4/19/19, 11:57 AM

SMTP is fundamentally insecure. Headers are trivial to spoof.

A recent favorite spam I've received comes "From" my own email address. That's an old one, but the fun thing is that it says "Look at the 'From' address of this email. It is your own address! This way I prove that I have hacked your computer," and that I should take seriously that the sender really has encrypted all my data and will erase it unless I send xxxxx bitcoin to yyyyyyyy. --Steve