Re: Look at these update from M$ Corporation.
On Fri, 1 Aug 2003 11:18:23 -0700, Alan Connor <alanconnor@earthlink.net> said:
>> From cjwatson@debian.org Fri Aug 1 11:15:16 2003
>>
>>
>> On Fri, Aug 01, 2003 at 02:38:10AM -0700, Alan Connor wrote:
>> > I should have added that debian.org is on my pass list. The
>> > domain name.
>> >
>> > Anyone mailing me from any address there wouldn't even know I was
>> > running a C-R system.
>>
>> A fair proportion of my spam comes from debian.org addresses;
>> spammers are becoming more adept at forging sender addresses,
>> frequently by pulling addresses from e.g. web pages and using one
>> address as the source and the others as the target, so the
>> recipients are likely to know the alleged sender.
>>
>> I predict that challenge-response systems will become increasingly
>> less useful as time goes on due to this trend.
>>
> Once again you demonstrate your ignorance of, or prejudice against
> C-R systems
Seems to me that you are displaying _your_ ignorance of
address spoofing. Once someones address has entered your good people
list, it is only a matter of time that you start getting spam that
purportedly comes from that address.
> Please QUIT mis-informing people.
The same, I am afraid, can be said of your stance: Any
mechanism that only looks at addresses, and not content, to determine
whether the email is acceptable is obsolescent.
> Mail from debian.org to me must COME from debian.org...
Then if you ever ask me any questions about my packages, you
have a 33% change of seeing my reply (depending on which locale I am
in when responding to my email).
manoj
--
You can't run away forever, But there's nothing wrong with getting a
good head start. Jim Steinman, "Rock and Roll Dreams Come Through"
Manoj Srivastava <srivasta@debian.org> <http://www.debian.org/%7Esrivasta/>
1024R/C7261095 print CB D9 F4 12 68 07 E4 05 CC 2D 27 12 1D F5 E8 6E
1024D/BF24424C print 4966 F272 D093 B493 410B 924B 21BA DABB BF24 424C
Reply to: