Re[2]: Someone spamming us

2000-09-01 Thread Gerd Ewald

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Hello Marck D. Pearlstone !


On Thu, 31 Aug 2000 19:28:17 +0100 GMT your local time,
which was 31.08.2000, 20:28 (GMT+0200) where I live, you wrote:

MDP Strike  that  theory  then.  We're  back  to  someone joining the list
MDP long-hand just to harvest. There's nothing we can do to prevent that.

Was just an idea. :-(

We now know that this could be done. Shouldn't our signatures be stripped off
when msg is transferred to the archive ?

- --
Best regards,
 Gerd


 ==
  01.09.2000 at 15:09
   Using The Bat! Version 1.46 Beta/3

- 
On Tesco's Tiramisu dessert (printed on bottom of box):
'Do not turn upside down'.  (Oops, too late!)
- 

-BEGIN PGP SIGNATURE-
Version: PGP 6.5i
Comment: Digitally signed for authentication purposes ! Gerd Ewald

iQA/AwUBOa+dhky/sHrVbGGHEQImDQCfaJZIZcqzU2ne/gmr8LyJiy96KWgAoIQW
74LoLgXXHoXMcYqbZhdjIU1X
=/y2d
-END PGP SIGNATURE-

-- 
--
View the TBUDL archive at http://tbudl.thebat.dutaint.com
To send a message to the list moderation team double click here:
   mailto:[EMAIL PROTECTED]
To Unsubscribe from TBUDL, double click here and send the message:
   mailto:[EMAIL PROTECTED]
--

You are subscribed as : archive@jab.org





Re: Someone spamming us

2000-09-01 Thread Marck D. Pearlstone

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Hi Gerd,

On 01 September 2000 at 15:13:44 GMT +0200 (which was 14:13 where I
live) Gerd Ewald wrote and made these points on the subject
of "Someone spamming us":

MDP Strike  that theory then. We're back to someone joining the list
MDP long-hand  just to harvest. There's nothing we can do to prevent
MDP that.

GE Was just an idea. :-(

GE We now know that this could be done. Shouldn't our signatures be
GE stripped off when msg is transferred to the archive ?

Can't  be  done.  The archive is just another member of the list which
receives  traffic like any other member of the list. If you don't want
your  signature  going to the archive the only way is to not sign your
messages.

While  harvesting  from PGP signatures is possible, I don't think it's
being done - probably too complicated.

- --
Cheers,
.\\arck

Marck D. Pearlstone | Moderator TBUDL / TBBETA  
 PGP Key ID: 0x929DCDA0 | www: http://www.silverstones.com  
 PGP Key: mailto:[EMAIL PROTECTED]?Body=GET%20MARCKKEY 

 If man evolved from monkeys and apes,
why do we still have monkeys and apes?

TB! v1.46 Beta/3 S/N 14F4B4B2 on Windows 98 4.10 Build 1998

-BEGIN PGP SIGNATURE-
Version: PGP 6.5.8 Secured
Comment: PGP Sealed for freshness!

iQA/AwUBOa/VNjnkJKuSnc2gEQJIkQCgmVUnFlgClPVvQoXeTUEGwkufPyEAnREh
2Irk2kw+YjP7oyPgv/OclTJ0
=/lTr
-END PGP SIGNATURE-

-- 
--
View the TBUDL archive at http://tbudl.thebat.dutaint.com
To send a message to the list moderation team double click here:
   mailto:[EMAIL PROTECTED]
To Unsubscribe from TBUDL, double click here and send the message:
   mailto:[EMAIL PROTECTED]
--

You are subscribed as : archive@jab.org





Re[2]: Someone spamming us

2000-09-01 Thread Gerd Ewald

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Hello Marck D. Pearlstone !


On Fri, 1 Sep 2000 17:11:23 +0100 GMT your local time,
which was 01.09.2000, 18:11 (GMT+0200) where I live, you wrote:

GE We now know that this could be done. Shouldn't our signatures be
GE stripped off when msg is transferred to the archive ?

MDP Can't  be  done.  The archive is just another member of the list which
MDP receives  traffic like any other member of the list.

I see :-(

MDP If you don't want
MDP your  signature  going to the archive the only way is to not sign your
MDP messages.

No, I think I won't stop signing my msgs for the same reason I use the
"TheBat"-info at the end of my mails: to tell people about the existence and to
encourage them to use these pgms.

MDP While  harvesting  from PGP signatures is possible, I don't think it's
MDP being done - probably too complicated.

Yep, you may be right and it would be too late anyway: our msgs are already in
the archive. Anyone harvesting the adress could have done this already or will
subscribe to the list where it is easier to harvest the adresses from the PGP-
or S/MIME-sigs.

- --
Best regards,
 Gerd


 ==
  02.09.2000 at 00:41
   Using The Bat! Version 1.46 Beta/3

- 
IBM: Its Better Manually
- 

-BEGIN PGP SIGNATURE-
Version: PGP 6.5i
Comment: Digitally signed for authentication purposes ! Gerd Ewald

iQA/AwUBObAj4ky/sHrVbGGHEQLiUwCeO3CXWf+RiF4NkfS8NU2gn+mAm7QAniq3
D0uir/z357qZ063ko7kf7qwg
=2fuj
-END PGP SIGNATURE-

-- 
--
View the TBUDL archive at http://tbudl.thebat.dutaint.com
To send a message to the list moderation team double click here:
   mailto:[EMAIL PROTECTED]
To Unsubscribe from TBUDL, double click here and send the message:
   mailto:[EMAIL PROTECTED]
--

You are subscribed as : archive@jab.org





Re: Re[2]: Someone spamming us

2000-08-31 Thread Gerd Ewald

[EMAIL PROTECTED] schrieb am 31.08.00:
snip

 
 MDP I  *have*  received  this spam. Only one copy, and I am active on both
 MDP lists.
 
 Hmmm... another beta lister that got the spam. The plot thickens. Did
 anyone NOT on the beta list get it?

Yep ! I'm only in TBUDL ! The mail adress I use for TBUDL is /only/ used for 
TB-discussion. I usually publish my first account which is not located at web.de. BUT 
the web.de adress is an additional adress to my PGP-key which is published on several 
key-servers. Did anyone get the spam who has no PGP-key or whose adress is not linked 
to a PGP-key ?


snip

Cheers 
Gerd
___
1.000.000 DM gewinnen - kostenlos tippen - http://millionenklick.web.de
[EMAIL PROTECTED], 8MB Speicher, Verschluesselung - http://freemail.web.de


-- 
--
View the TBUDL archive at http://tbudl.thebat.dutaint.com
To send a message to the list moderation team double click here:
   mailto:[EMAIL PROTECTED]
To Unsubscribe from TBUDL, double click here and send the message:
   mailto:[EMAIL PROTECTED]
--

You are subscribed as : archive@jab.org





Re: Someone spamming us

2000-08-31 Thread Peter Steiner

On Thu, 31 Aug 2000 08:00:01 +0200, Gerd Ewald wrote:

 MDP I  *have*  received  this spam. Only one copy, and I am active on both
 MDP lists.
 
 Hmmm... another beta lister that got the spam. The plot thickens. Did
 anyone NOT on the beta list get it?

GE Yep ! I'm only in TBUDL ! The mail adress I use for TBUDL is
GE /only/ used for TB-discussion. I usually publish my first account
GE which is not located at web.de. BUT the web.de adress is an
GE additional adress to my PGP-key which is published on several
GE key-servers. Did anyone get the spam who has no PGP-key or whose
GE adress is not linked to a PGP-key ?

I did not get the spam and am subscribed to all three lists (including
tbot). And yes, my address for these three lists is not (yet?) linked
to my PGP key. I don't remember though having seen this spam message
on any other address, but then I don't even look at spam messages
there...

Peter
-- 
Peter Steiner [EMAIL PROTECTED]

-- 
--
View the TBUDL archive at http://tbudl.thebat.dutaint.com
To send a message to the list moderation team double click here:
   mailto:[EMAIL PROTECTED]
To Unsubscribe from TBUDL, double click here and send the message:
   mailto:[EMAIL PROTECTED]
--

You are subscribed as : archive@jab.org





Re[2]: Someone spamming us

2000-08-31 Thread Gerd Ewald

Hello Marck D. Pearlstone !


On Thu, 31 Aug 2000 01:27:51 +0100 GMT your local time,
which was 31.08.2000, 02:27 (GMT+0200) where I live, you wrote:

snip

MDP Messages  in the archive show the address of the archive itself - that
MDP to which the archive (which is actually a normal list member) messages
MDP are sent.

This means: someone who is not member of the list can't harvest the e-mail
adresses by just looking into the archive because the "you are subscribed as..."
is changed !?

But what, if that person just harvests our adress out of our PGP-sigantures ?
This would explain why some received this message twice (both lists, signed
msgs), some only once (only one list, signed msgs) and some didn't get any
spam-message at all although member in both lists (no sigs or no key on server).

I don't know whether this is possible. I couldn't manage to verify a message in
the archive ("Found no PGP information in the clipboard") in the browsers
window. I switched to the source code view, highlighted the PGP-signed area and
tried it again: et voilá !

*** PGP Signature Status: bad
*** Signer: Marck D. Pearlstone [EMAIL PROTECTED] (Disabled)
*** Signed: 30.08.00 16:37:33
*** Verified: 31.08.00 18:36:53
*** BEGIN PGP VERIFIED MESSAGE ***

Hi ztrader,

On 30 August 2000 at 06:21:47 GMT -0700 (which was 14:21 where I
live) [EMAIL PROTECTED] wrote and made these points on the subject
of "RE checkbox in 'options'?":

JAgt;gt; One  has  to  check Regular Expressions when one is using regular
JAgt;gt; expressions.  Check  out the help file, it does deal with regular
JAgt;gt; expressions fairly well.

zgt; It has a nice summary of RE's, I agree. The confusion, for me, comes
zgt; from mixing RE chrs with other concepts. For example, the [ ] and |

I admit, this is not very convenient to harvest e-mail adresses, but I'm
no computer specialist ;-). Maybe someone with more experience than me could
check that ??




-- 
Best regards,
 Gerd 


 ==
  31.08.2000 at 18:22
   Using The Bat! Version 1.46 Beta/3


On a bag of Fritos: 'You could be a winner!
No purchase necessary. Details inside'.
(Evidently, the shoplifter special)


-- 
--
View the TBUDL archive at http://tbudl.thebat.dutaint.com
To send a message to the list moderation team double click here:
   mailto:[EMAIL PROTECTED]
To Unsubscribe from TBUDL, double click here and send the message:
   mailto:[EMAIL PROTECTED]
--

You are subscribed as : archive@jab.org





Re: Someone spamming us

2000-08-31 Thread Marck D. Pearlstone

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Hi Gerd,

On 31 August 2000 at 18:39:01 GMT +0200 (which was 17:39 where I live)
Gerd  Ewald  wrote  and  made  these points on the subject of "Someone
spamming us":

MDP Messages in the archive show the address of the archive itself -
MDP that  to  which  the  archive  (which  is actually a normal list
MDP member) messages are sent.

GE This means: someone who is not member of the list can't harvest
GE the e-mail adresses by just looking into the archive because the
GE "you are subscribed as..." is changed !?

Correct - it is unique for each message sent to each subscriber. It is
appended to the message at point of dispatch by the list server.

GE But what, if that person just harvests our adress out of our
GE PGP-sigantures ?

snip

*** Signer: Marck D. Pearlstone [EMAIL PROTECTED] (Disabled)

snip

GE I admit, this is not very convenient to harvest e-mail adresses,
GE but I'm no computer specialist ;-). Maybe someone with more
GE experience than me could check that ??

I'm not going to do the research myself but I must say that this seems
to be the most likely source for the harvest that was done. With a PGP
SDK  a  harvester  can easily adapt a spider-bot to to a PGP-sig trawl
IMHO.

- --
Cheers,
.\\arck

Marck D. Pearlstone | Moderator TBUDL / TBBETA  
 PGP Key ID: 0x929DCDA0 | www: http://www.silverstones.com  
 PGP Key: mailto:[EMAIL PROTECTED]?Body=GET%20MARCKKEY 

 Scientists Door: Gone Fission

TB! v1.46 Beta/3 S/N 14F4B4B2 on Windows 98 4.10 Build 1998

-BEGIN PGP SIGNATURE-
Version: PGP 6.5.8 Secured
Comment: PGP Sealed for freshness!

iQA/AwUBOa6UXTnkJKuSnc2gEQIGaACePGJrRWAC8x32AYIdRiQu+w7l96kAoOXi
2gSKIgTZTk2Zox0VAZo9EivU
=zuAV
-END PGP SIGNATURE-

-- 
--
View the TBUDL archive at http://tbudl.thebat.dutaint.com
To send a message to the list moderation team double click here:
   mailto:[EMAIL PROTECTED]
To Unsubscribe from TBUDL, double click here and send the message:
   mailto:[EMAIL PROTECTED]
--

You are subscribed as : archive@jab.org





Re: Someone spamming us

2000-08-31 Thread Tom Plunket


GE But what, if that person just harvests our adress out of our PGP-sigantures ?

I got one copy of the message, no PGP here.  Only on TBUDL.

-tom!

-- 
Bah, ridiculous thing.

-- 
--
View the TBUDL archive at http://tbudl.thebat.dutaint.com
To send a message to the list moderation team double click here:
   mailto:[EMAIL PROTECTED]
To Unsubscribe from TBUDL, double click here and send the message:
   mailto:[EMAIL PROTECTED]
--

You are subscribed as : archive@jab.org





Re: Someone spamming us

2000-08-31 Thread tracer

Hello ztrader,
On Wed, 30 Aug 2000 17:50:18 -0700 GMT your local time,
which was Thursday, August 31, 2000, 7:50:18 AM (GMT+0700) my local time,
ztrader wrote:

(snip)

MDP I  *have*  received  this spam. Only one copy, and I am active on both
MDP lists.

 Hmmm... another beta lister that got the spam. The plot thickens. Did
 anyone NOT on the beta list get it?

I donot think I did but I could check if I know what the subject was
of the email...
I saw one spam but I thought it was another subscriber sending to the
mail list.

MDP Any other ideas?

 If I was a truly dedicated spammerg,I'd subscribe to lots of lists,
 collect all the replies, and harvest them. Not much one can do about
 that, though :-(((.

 ztrader



Best regards,
 
tracer


-- 

Using theBAT 1.46 Beta/3 with Windows NT
mail to : [EMAIL PROTECTED]
I am using FireTalk: 321338
ICQ: on request 
Website: www.phuketcomputers.com
Our special website hosting/mailservers are now operational



-- 
--
View the TBUDL archive at http://tbudl.thebat.dutaint.com
To send a message to the list moderation team double click here:
   mailto:[EMAIL PROTECTED]
To Unsubscribe from TBUDL, double click here and send the message:
   mailto:[EMAIL PROTECTED]
--

You are subscribed as : archive@jab.org





Re: Someone spamming us

2000-08-31 Thread Marck D. Pearlstone

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Hi Tom,

On 31 August 2000 at 10:48:51 GMT -0700 (which was 18:48 where I
live) Tom Plunket wrote and made these points on the subject
of "Someone spamming us":

GE But  what,  if  that  person  just harvests our adress out of our
GE PGP-sigantures ?

TP I got one copy of the message, no PGP here.  Only on TBUDL.

Strike  that  theory  then.  We're  back  to  someone joining the list
long-hand just to harvest. There's nothing we can do to prevent that.

- --
Cheers,
.\\arck

Marck D. Pearlstone | Moderator TBUDL / TBBETA  
 PGP Key ID: 0x929DCDA0 | www: http://www.silverstones.com  
 PGP Key: mailto:[EMAIL PROTECTED]?Body=GET%20MARCKKEY 

 The early bird may get the worm, but the second mouse gets the cheese.

TB! v1.46 Beta/3 S/N 14F4B4B2 on Windows 98 4.10 Build 1998

-BEGIN PGP SIGNATURE-
Version: PGP 6.5.8 Secured
Comment: PGP Sealed for freshness!

iQA/AwUBOa6jwTnkJKuSnc2gEQId/wCeLKrv4f4v60cNF9pIzvbJfnwCuxwAoMzo
dfj7HzaxNlDUQCe6RG02gau0
=qBPt
-END PGP SIGNATURE-

-- 
--
View the TBUDL archive at http://tbudl.thebat.dutaint.com
To send a message to the list moderation team double click here:
   mailto:[EMAIL PROTECTED]
To Unsubscribe from TBUDL, double click here and send the message:
   mailto:[EMAIL PROTECTED]
--

You are subscribed as : archive@jab.org





Re: Someone spamming us

2000-08-31 Thread John Sullivan

On Thursday 31 August 2000 Marck D. Pearlstone wrote:
GE But what, if that person just harvests our adress out of our
GE PGP-sigantures ?

 I'm not going to do the research myself but I must say that this seems
 to be the most likely source for the harvest that was done. With a PGP
 SDK  a  harvester  can easily adapt a spider-bot to to a PGP-sig trawl
 IMHO.

Possibly, except that i) I don't remember ever sending my PGP key, or
PGP signed messages to any TB list, ii) none of my PGP keys have ever
been associated with anything other than my primary (non-list) email
address, and those spams were sent directly to the addresses with
which I subscibe to TBUDL/TBBETA.

John
-- 
you gave me something that i could touch in a world where i'd had too much
something i could feel with my broken hands full of lost ideals but soon i'm
returning to you my friend and we'll go where the rivers end in the silver sea
and i'll carry you if you carry me

-- 
--
View the TBUDL archive at http://tbudl.thebat.dutaint.com
To send a message to the list moderation team double click here:
   mailto:[EMAIL PROTECTED]
To Unsubscribe from TBUDL, double click here and send the message:
   mailto:[EMAIL PROTECTED]
--

You are subscribed as : archive@jab.org





Someone spamming us

2000-08-30 Thread John Sullivan


Someone with access to the TBUDL and TBBETA membership lists (using
the From: address  [EMAIL PROTECTED], passing through a relay which
claims to be cyberpass.net) seems to believe I might be interested in
buying a CD packed full of what is clearly pirated commercial
software, for $15. Ho hum.

(Because I use separate email addresses for list subscriptions, I know
this came from trawling the TB list membership. It got sent to both my
TBUDL and TBBETA addresses.)

John
-- 
you gave me something that i could touch in a world where i'd had too much
something i could feel with my broken hands full of lost ideals but soon i'm
returning to you my friend and we'll go where the rivers end in the silver sea
and i'll carry you if you carry me

-- 
--
View the TBUDL archive at http://tbudl.thebat.dutaint.com
To send a message to the list moderation team double click here:
   mailto:[EMAIL PROTECTED]
To Unsubscribe from TBUDL, double click here and send the message:
   mailto:[EMAIL PROTECTED]
--

You are subscribed as : archive@jab.org





Re: Someone spamming us

2000-08-30 Thread Leif Gregory

Hello John, 

On Wed, 30 Aug 2000 at 13:34:18 [GMT +0100], you wrote:
JS Someone with access to the TBUDL and TBBETA membership lists
JS (using the From: address  [EMAIL PROTECTED], passing
JS through a relay which claims to be cyberpass.net) seems to believe
JS I might be interested in buying a CD packed full of what is
JS clearly pirated commercial software, for $15. Ho hum.

JS (Because I use separate email addresses for list subscriptions, I
JS know this came from trawling the TB list membership. It got sent
JS to both my TBUDL and TBBETA addresses.)

We'll check the subscribers list, but chances are that they are spider
botting the list archives. If this is the case, then there isn't much
that can be done unfortunately. Other than killing off the list
archives, which we wouldn't want to do, because list archives are
*very* useful.

Another possibility is that the person spamming you is indeed a list
member, but they'd have to be morons to be subscribed to the lists
using the same e-mail address they use in the SPAM. 

We'll let you all know though.


Cheers,
Leif Gregory 

--  
TBUDL/TBBETA List Moderator
ICQ 216395 [EMAIL PROTECTED]
Web Site   http://www.pcwize.com
TBUDL FAQ  http://www.pcwize.com/thebat/faq.shtml
PGP Key ID 0x8604279A
Using The Bat! 1.46 Beta/3 under Windows 98 4.10 Build  A  
on a Pentium III 500 MHz notebook with 128MB.

Tagline of the day:
Where are we going and why am I in this handbasket?



-- 
--
View the TBUDL archive at http://tbudl.thebat.dutaint.com
To send a message to the list moderation team double click here:
   mailto:[EMAIL PROTECTED]
To Unsubscribe from TBUDL, double click here and send the message:
   mailto:[EMAIL PROTECTED]
--

You are subscribed as : archive@jab.org





Re: Someone spamming us

2000-08-30 Thread Chuck Mattsen

On Wednesday, August 30, 2000 at 4:25 PM or thereabouts, Leif
Gregory wrote the following about Someone spamming us:

JS Someone with access to the TBUDL and TBBETA membership lists
JS (using the From: address  [EMAIL PROTECTED], passing
JS through a relay which claims to be cyberpass.net) seems to
JS believe I might be interested in buying a CD packed full of
JS what is clearly pirated commercial software, for $15. Ho hum.

FWIW, I received two copies of this spam, as well ... presumably one
for each of my subscriptions (TBBETA and TBUDL).

LG We'll check the subscribers list, but chances are that they are
LG spider botting the list archives. If this is the case, then
LG there isn't much that can be done unfortunately. Other than
LG killing off the list archives, which we wouldn't want to do,
LG because list archives are *very* useful.

Just think of the potential spamming that would occur if we were
gated to Usenet, or solely there, as has been suggested.  (Not that
I want to open up *that* discussion again! :-) ... just wanted to
confirm that others on both lists have received the same mailings.)

Chuck
-- 
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
Chuck Mattsen[EMAIL PROTECTED]
http://www.mindspring.com/~mattsen
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
Random Thought/Quote for this Message:
 Humanity prefers comfort over truth.



-- 
--
View the TBUDL archive at http://tbudl.thebat.dutaint.com
To send a message to the list moderation team double click here:
   mailto:[EMAIL PROTECTED]
To Unsubscribe from TBUDL, double click here and send the message:
   mailto:[EMAIL PROTECTED]
--

You are subscribed as : archive@jab.org





Re[2]: Someone spamming us

2000-08-30 Thread ztrader

On Wednesday, August 30, 2000, 2:48:03 PM, you wrote:

CM FWIW, I received two copies of this spam, as well ... presumably one
CM for each of my subscriptions (TBBETA and TBUDL).

I have not received this spam (yet :-). Perhaps it is from the beta
list?

LG We'll check the subscribers list, but chances are that they are
LG spider botting the list archives. If this is the case, then
LG there isn't much that can be done unfortunately.

One suggestion is to remove personal email addresses from the
archives. The *content* is still there, but the spammers would be
foiled. On another list, this was thought to be not too difficult
with a perl script, but I don't use perl, so could not comment on
that.

Just a thought...

ztradermailto:[EMAIL PROTECTED]

-- 
--
View the TBUDL archive at http://tbudl.thebat.dutaint.com
To send a message to the list moderation team double click here:
   mailto:[EMAIL PROTECTED]
To Unsubscribe from TBUDL, double click here and send the message:
   mailto:[EMAIL PROTECTED]
--

You are subscribed as : archive@jab.org





Re: Someone spamming us

2000-08-30 Thread Marck D. Pearlstone

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Hi ztrader,

On 31 August 2000 at 16:09:12 GMT -0700 (which was 00:09 where I live)
ztrader  wrote  and  made  these  points  on  the  subject of "Someone
spamming us":

CM FWIW,  I received two copies of this spam, as well ... presumably
CM one for each of my subscriptions (TBBETA and TBUDL).

z I have not received this spam (yet :-). Perhaps it is from the beta
z list?

LG We'll check the subscribers list, but chances are that they are
LG spider botting the list archives. If this is the case,

... and I don't think it is (see below).

LG then there isn't much that can be done unfortunately.

z One suggestion is to remove personal email addresses from the
z archives.

They are already being removed by the archive except where they appear
in  the body of the message - as yours does. It would be advisable for
all  subscribers  to  modify  your  default  template  to exclude that
"mailto:xxx"  at  the  end  for list posting for that very reason. The
archive  shows  no  headers and only the Real Name field of the "From"
header.  Actually, I have just changed my "reference attribution" line
that  goes at the top of my replies .. that was including the sender's
address :-(. I think, in this case, that's a red herring anyway.

z The *content* is still there, but the spammers would be foiled. On
z another list, this was thought to be not too difficult with a perl
z script, but I don't use perl, so could not comment on that.

Although  the  address of the archive appears to be under our control,
it  is  just  a  forwarding  address  to a free, public access archive
resource "out there" - www.mail-archive.com - and we don't have access
to the server software on that.

z Just a thought...

z ztradermailto:[EMAIL PROTECTED]
  
  See what I mean?

Now  -  see this posting from me? My address does *not* appear on this
message  other  than in the headers and in the mailto: link for my PGP
key  ...  and  that's  not  my address, it is the address of my server
itself and will ignore any spam sent to it directly.

I  *have*  received  this spam. Only one copy, and I am active on both
lists.  I have not received any messages from my server complaining of
mail  containing  "Invalid Commands" - which is what would happen if a
spider-bot  sucked  addresses  from  the  archive and found that of my
server from my sig line.

The  server  is  capable  of  divulging  a list of members but only to
someone  armed  with  the  list  password  -  not  a possibility. This
suggests  that  the list is being spammed in some other way than those
suggested  so  far...  and  I  can  only  think  that  a  spammer  has
infiltrated the system to harvest names.

Any other ideas?

- --
Cheers,
.\\arck

Marck D. Pearlstone | Moderator TBUDL / TBBETA  
 PGP Key ID: 0x929DCDA0 | www: http://www.silverstones.com  
 PGP Key: mailto:[EMAIL PROTECTED]?Body=GET%20MARCKKEY 

 Baby's bib: "Spit happens"

TB! v1.46 Beta/3 S/N 14F4B4B2 on Windows 98 4.10 Build 1998

-BEGIN PGP SIGNATURE-
Version: PGP 6.5.8 Secured
Comment: PGP Sealed for freshness!

iQA/AwUBOa2eCTnkJKuSnc2gEQKvYwCdFrFCFcNb8UMiDZQARrwGKkNjw9sAnjJE
cRVigUiNX0AsLOS+u7PnzHq7
=nAgl
-END PGP SIGNATURE-

-- 
--
View the TBUDL archive at http://tbudl.thebat.dutaint.com
To send a message to the list moderation team double click here:
   mailto:[EMAIL PROTECTED]
To Unsubscribe from TBUDL, double click here and send the message:
   mailto:[EMAIL PROTECTED]
--

You are subscribed as : archive@jab.org





Re: Someone spamming us

2000-08-30 Thread Nick Andriash

On August 30, 2000, at 4:51:32 PM, Marck D. Pearlstone Wrote:

 It would be advisable for all subscribers to modify your default
 template to exclude that "mailto:xxx" at the end for list posting for
 that very reason.

Marck, are you referring to a "MailTo:" that some people include in their
signatures, or are you referring to this trailer that the Server includes:

 You are subscribed as : [EMAIL PROTECTED]

I never did understand why that is included in all received messages. Are
they making sure I know who I am? ;o)



Nick


N.J. Andriash [ TB! v1.46 Beta 3 | PGP 6.5.8 | Win 98 v4.10 ]
Vancouver, B.C. Canada  |  PGP Key ID:  0x7BA3FDCE
_
"Daddy, what does FORMATTING DRIVE C mean?" 

-- 
--
View the TBUDL archive at http://tbudl.thebat.dutaint.com
To send a message to the list moderation team double click here:
   mailto:[EMAIL PROTECTED]
To Unsubscribe from TBUDL, double click here and send the message:
   mailto:[EMAIL PROTECTED]
--

You are subscribed as : archive@jab.org





Re: Someone spamming us

2000-08-30 Thread tracer

Hello ztrader,
On Wed, 30 Aug 2000 16:09:12 -0700 GMT your local time,
which was Thursday, August 31, 2000, 6:09:12 AM (GMT+0700) my local time,
ztrader wrote:


 On Wednesday, August 30, 2000, 2:48:03 PM, you wrote:

CM FWIW, I received two copies of this spam, as well ... presumably one
CM for each of my subscriptions (TBBETA and TBUDL).

 I have not received this spam (yet :-). Perhaps it is from the beta
 list?

LG We'll check the subscribers list, but chances are that they are
LG spider botting the list archives. If this is the case, then
LG there isn't much that can be done unfortunately.

 One suggestion is to remove personal email addresses from the
 archives. The *content* is still there, but the spammers would be
 foiled. On another list, this was thought to be not too difficult
 with a perl script, but I don't use perl, so could not comment on
 that.

 Just a thought...

If a commercial email extractor did it, no use, you are already in the
lists..
I didnt get any copies but then maybe there was something in the
messages causing it to end up being tagged as spam.


 ztradermailto:[EMAIL PROTECTED]



Best regards,
 
tracer


-- 

Using theBAT 1.46 Beta/3 with Windows NT
mail to : [EMAIL PROTECTED]
I am using FireTalk: 321338
ICQ: on request 
Website: www.phuketcomputers.com
Our special website hosting/mailservers are now operational



-- 
--
View the TBUDL archive at http://tbudl.thebat.dutaint.com
To send a message to the list moderation team double click here:
   mailto:[EMAIL PROTECTED]
To Unsubscribe from TBUDL, double click here and send the message:
   mailto:[EMAIL PROTECTED]
--

You are subscribed as : archive@jab.org





Re[2]: Someone spamming us

2000-08-30 Thread ztrader

On Wednesday, August 30, 2000, 5:27:51 PM, you wrote:

MDP Strange  as  that may seem, yes. It's supposed to make it clear to the
MDP recipient  which  address  they  have used to subscribe to the list so
MDP that  when  they  want  to  leave  they know which address to send the
MDP .UNSUB command from.

Any way to get rid of this? I just removed my mailto, but forgot to
look at the end :-). A nice idea, but does spread the address.

Idea - include a header line:

X-subscribed-as: [EMAIL PROTECTED]

This would be removed in the archive, and one could look at the
headers to see how one is subscribed. Under 'unsubscribing' on the web
page, it could say to check the header, or replace the footer with
'check the header' :-).

ztrader

-- 
--
View the TBUDL archive at http://tbudl.thebat.dutaint.com
To send a message to the list moderation team double click here:
   mailto:[EMAIL PROTECTED]
To Unsubscribe from TBUDL, double click here and send the message:
   mailto:[EMAIL PROTECTED]
--

You are subscribed as : archive@jab.org





Re[2]: Someone spamming us

2000-08-30 Thread ztrader

On Wednesday, August 30, 2000, 4:51:32 PM, you wrote:

MDP They are already being removed by the archive except where they appear
MDP in  the body of the message - as yours does. It would be advisable for
MDP all  subscribers  to  modify  your  default  template  to exclude that
MDP "mailto:xxx"  at  the  end  for list posting for that very reason.

Done! Good idea.

MDP Although  the  address of the archive appears to be under our control,
MDP it  is  just  a  forwarding  address  to a free, public access archive
MDP resource "out there" - www.mail-archive.com - and we don't have access
MDP to the server software on that.

Would it be possible to save all the list mail to a file, before
forwarding, run a pgm on it to remove names, and then forward that
file to the archive? A bit of trouble, I know, and maybe not necessary
if everyone gets rid of the body reference.

MDP I  *have*  received  this spam. Only one copy, and I am active on both
MDP lists.

Hmmm... another beta lister that got the spam. The plot thickens. Did
anyone NOT on the beta list get it?

MDP Any other ideas?

If I was a truly dedicated spammerg,I'd subscribe to lots of lists,
collect all the replies, and harvest them. Not much one can do about
that, though :-(((.

ztrader

-- 
--
View the TBUDL archive at http://tbudl.thebat.dutaint.com
To send a message to the list moderation team double click here:
   mailto:[EMAIL PROTECTED]
To Unsubscribe from TBUDL, double click here and send the message:
   mailto:[EMAIL PROTECTED]
--

You are subscribed as : archive@jab.org





Re: Someone spamming us

2000-08-30 Thread Ming-Li

On Wednesday, August 30, 2000, 6:31:06 PM, ztrader wrote:

 Any way to get rid of this? I just removed my mailto, but forgot
 to look at the end :-). A nice idea, but does spread the address.

It's not necessary to get rid of it. If you look at messages in the
archive, the line at the bottom is:

You are subscribed as : archive@jab.org

as the archive is a subscriber of both lists. The line showing your
email address is only for messages (sent by anyone) delivered to
you.

-- 
Best regards,
Ming-Li

The Bat! 1.46 Beta/3 | Win2k SP1

-- 
--
View the TBUDL archive at http://tbudl.thebat.dutaint.com
To send a message to the list moderation team double click here:
   mailto:[EMAIL PROTECTED]
To Unsubscribe from TBUDL, double click here and send the message:
   mailto:[EMAIL PROTECTED]
--

You are subscribed as : archive@jab.org