Re: Look at these update from M$ Corporation.
On Fri, Aug 01, 2003 at 11:18:23AM -0700, Alan Connor wrote:
> > From cjwatson@debian.org Fri Aug 1 11:15:16 2003
> >
> >
> > On Fri, Aug 01, 2003 at 02:38:10AM -0700, Alan Connor wrote:
> > > I should have added that debian.org is on my pass list. The domain name.
> > >
> > > Anyone mailing me from any address there wouldn't even know I was running
> > > a C-R system.
> >
> > A fair proportion of my spam comes from debian.org addresses; spammers
> > are becoming more adept at forging sender addresses, frequently by
> > pulling addresses from e.g. web pages and using one address as the
> > source and the others as the target, so the recipients are likely to
> > know the alleged sender.
> >
> > I predict that challenge-response systems will become increasingly less
> > useful as time goes on due to this trend.
> >
>
> Once again you demonstrate your ignorance of, or prejudice against C-R systems
Ignorance? No...
>
> Please QUIT mis-informing people.
He's just making a prediction. Please point me to the particular piece of mis-information.
>
> Mail from debian.org to me must COME from debian.org...
>
> Don't tell me you have never heard of Received: headers? (etc.)
Don't tell me you have never heard of _forged_ Received: headers? (etc.)
Or does your near-newbie bash within an hour script recognize all forms
of forged Received: headers?
By the way, you said you wouldn't respond again on this subject?
David
Reply to: