The sourceforge mailing lists authenticate messages based on their 'From:' address. If the 'From:' address is a registered user, the e-mail goes through without human intervention. Its no more of an exploit than any other piece of SPAM. It is more likely to pass SPAM filters, but the content of the sourceforge lists compared to the tiny amount of SPAM of this type. I think I get less than one of these per quarter.
On Sunday 25 March 2012 15:10:20 Ted Clayton wrote: > <html> > <head> > <meta content="text/html; charset=ISO-8859-1" > http-equiv="Content-Type"> > </head> > <body bgcolor="#FFFFFF" text="#333333"> > <font face="Verdana">Ron Jensen,<br> > <br> > The message I received contains no links. It has no visible > content at all. <br> > <br> > It does have 2 attachments, both small. I have not tried to > evaluate them.<br> > <br> > Although I am not prone to panic, I am inclined to "act" when the > situation indicates that action will improve my position.<br> > <br> > Your apparent acceptance of the occasional exploit of the > Flightgear list suggests to me that it is unlikely that > improvements to it can be expected. <br> > <br> > I will "Unsubscribe", but often this does not remove contact > information from a List that is repeatedly being compromised ... > so unsubscribing does not prevent my information from being > accessed by future exploits.<br> > <br> > Therefore, I ask that the Administrator for the List actually > remove my entry from it.<br> > <br> > Panicked, no, but unwilling to 'make myself available' this way, > yes.<br> > <br> > Thanks,<br> > <br> > Ted Clayton<br> > <br> > </font><br> > On 3/25/2012 1:50 PM, Ron Jensen wrote: > <blockquote cite="mid:201203251450.24268.w...@jentronics.com" > type="cite"> > <pre wrap="">On Sunday 25 March 2012 12:54:56 Ted Clayton wrote: > </pre> > <blockquote type="cite"> > <pre wrap=""><html> > <head> > > <meta http-equiv="content-type" content="text/html; > charset=ISO-8859-1"> </head> > <body bgcolor="#FFFFFF" text="#333333"> > <font face="Verdana">Hi Flightgear folks,<br> > <br> > I just got an email seemingly from the List, but has 2 attachments > and no content.&nbsp; It looks potentially bad.&nbsp; I will > retain it briefly in case you guys want any info from it.<br> > <br> > I have to assume that the List has been compromised, and am > preparing to take appropriate steps.<br> > <br> > Ted Clayton<br> > <a class="moz-txt-link-abbreviated" > href=<a class="moz-txt-link-rfc2396E" > href="mailto:tclay...@olypen.com";>"mailto:tclay...@olypen.com";</a>><a > class="moz-txt-link-abbreviated" > href="mailto:tclay...@olypen.com";>tclay...@olypen.com</a></a><br&g >t; </font> </body> > </html> > </pre> > </blockquote> > <pre wrap=""> > Someone hacked/spoofed an account of someone who is registered as a list > user. No need to panic. It happens from time to time, delete the e-mail and > don't click the link(s) it contained. > > Ron > > --------------------------------------------------------------------------- >--- This SF email is sponsosred by: > Try Windows Azure free for 90 days Click Here > <a class="moz-txt-link-freetext" > href="http://p.sf.net/sfu/sfd2d-msazure";>http://p.sf.net/sfu/sfd2d-msazure< >/a> _______________________________________________ > Flightgear-users mailing list > <a class="moz-txt-link-abbreviated" > href="mailto:Flightgear-users@lists.sourceforge.net";>Flightgear-users@lists >.sourceforge.net</a> <a class="moz-txt-link-freetext" > href="https://lists.sourceforge.net/lists/listinfo/flightgear-users";>https: >//lists.sourceforge.net/lists/listinfo/flightgear-users</a> > > </pre> > </blockquote> > </body> > </html> ------------------------------------------------------------------------------ This SF email is sponsosred by: Try Windows Azure free for 90 days Click Here http://p.sf.net/sfu/sfd2d-msazure _______________________________________________ Flightgear-users mailing list Flightgear-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/flightgear-users
