[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: MS mail bombs



on Tue, Sep 23, 2003 at 05:44:57AM +0800, csj (csj@zapo.net) wrote:
> At Mon, 22 Sep 2003 06:26:05 +0100,
> Karsten M. Self wrote:
> 
> > If Swen is the shape of things to come, it's the end of dial-up
> > POP3 mail accounts.
> 
> There's a simple solution.  Have the list munge the email
> addresses before it appears in any publicly viewable form (e.g.
> in the form of a web page).  

That's wrong any number of ways.

My email address is useful.  It's a benefit to me, and to third parties
I'd like to contact / have contact me, to be able to close a
communications loop in a matter of minutes or seconds.  Which means
reaching me based on published accounts with my mail attached to it.
Hiding your email means the spammers have won.

Secondly, viral mail *isn't* harvesting from archives (or not
significantly).  My understanding of Swen is that it's grabbing
addresses from MSFT address books (standard), but also from mailbox and
Usenet local cache.  Meaning that th act of posting to mailing list with
*NO* archive puts you at risk.

One of the addresses getting a significant amount of Swen is used
_only_ on one list.

> My only addresses that are receiving the mail bombs are the ones I'm
> using to post to lists.  I know this for a fact because I'm using a
> different address to retrieve my Debian-User mail and that address is
> clean (though it does get its dose of the usual spam).  

Likely the mix of noncorporate legacy MS Windows subscribers to d-u is
low.

I've seen, literally, gigabytes of Swen from broadband residental
acounts.  I've seen very little if any from named corporate domains.
I've seen ***NONE*** from AOL or MSN, suggesting that filters on
outbound traffic are in place, and work.

Peace.

-- 
Karsten M. Self <kmself@ix.netcom.com>        http://kmself.home.netcom.com/
 What Part of "Gestalt" don't you understand?
    Defeat EU Software Patents!                         http://swpat.ffii.org/

Attachment: signature.asc
Description: Digital signature


Reply to: