Re: OOOR?
Your name is the first thing I need to pull a credit/finance report. I'm not going to go into detail, but this stuff is trivial. It has been for 10+ years. Its not just about home invasion. Knowing you are going to be away, I can hack your home phone line and redirect your calls to me (for a multitude of reasons). This doesnt have to be virutal. With you not home, I'll hack the grey box on the outside of your house, or better yet, your neighborhood telco distribution box. Usually neither box is locked. I dont have to redirect either. Plenty of mischief can be played while directly accessing your line. Lots of social engineering starts by inviting (not neccessarily by request) phone calls be initiated to you - trusting that that number they dialed is yours and will be reaching your household. I could call your your credit card co too, and request that a duplicate card be sent to your house (while you are away), with a 1-2 day delivery most likely. Now I can take direct receipt of your physical credit card and go on a shopping spree. Thats just a few ideas off the top of my head. On Fri, Aug 15, 2008 at 4:44 PM, Eric Woodford [EMAIL PROTECTED] wrote: OK, you know where I live. Still what's the point? Unless my home is in some nice zip code, why are you going to take the risk that I actually have something of value? I'll tell you know, except for a truck load of well loved baby toys and a sofa that's been snotted on, you're burglary attempt would be a bust. Or maybe the two large dogs, and alarm system will foil you after the long drive to my house. On Fri, Aug 15, 2008 at 11:10 AM, Kurt Buff [EMAIL PROTECTED] wrote: If you are foolish enough to let folks know you won't be at home, and someone is of a mind to do this, you're screwed. The reason is, the OoO messages are only in response to an email someone sent you. That means they already have your name and the company you work for. If they don't already have your home address, a minor amount of social engineering at your workplace, or even a bit of googling, will reveal where you live. Kurt On Fri, Aug 15, 2008 at 10:25 AM, Eric Woodford [EMAIL PROTECTED] wrote: My point was even if you did say I am traveling to the North Pole for a month. What's to say I'd be able to find your house to sell all your furniture and worldly treasures. Last count, there are at least 9 people with my same name. On Fri, Aug 15, 2008 at 9:07 AM, Don Andrews [EMAIL PROTECTED] wrote: Agreed – not being in the office actually increases the chances of my being at home – no access to email simply says, don't even try to bother me. Now, on the other hand, if it said something really stupid like, I'll be out of (town|state|country) for a week, that would be different. From: Sobey, Richard A [mailto:[EMAIL PROTECTED] Sent: Friday, August 15, 2008 8:14 AM To: MS-Exchange Admin Issues Subject: RE: OOOR? Arrg! This tired old debate. What does not being at work have to do with not being at home?! From: Eric Woodford [mailto:[EMAIL PROTECTED] Sent: 14 August 2008 18:16 To: MS-Exchange Admin Issues Subject: Re: OOOR? Your OOTO says I will be out of the office between Monday and Friday with no access to email. That really says My house will be empty, please come and help yourself. Interesting concept, terribly difficult to implement. Unless I know you personally and have visited your house, finding your specific address, traveling there (especially being that you're across an ocean from me), breaking in and then hoping you have something of value worth the entire endeavor (all before you get back from vacation). That's all assuming you don't put your home address and keys under the mat in your signature. On Mon, Aug 11, 2008 at 12:38 PM, Simon Butler [EMAIL PROTECTED] wrote: If you do allow OOTO to the Internet then watch your queues. As spam is spoofed the OOTOs will stack up. However the social engineering and personal security issue is very important. Your OOTO says I will be out of the office between Monday and Friday with no access to email. That really says My house will be empty, please come and help yourself. The way that I usually counter the OOTO to the internet request is quite simple. How does it look to business partners, either potential or current? To use the example above, what that could be interpreted to say is Your custom is not important enough for me to get someone else to monitor my mailbox for a week, I will read it when I get back. If you do implement OOTO then a template would be the best option. The template wouldn't give much information away, and would tell the sender that the mailbox is being monitored. Someone would then need to monitor the mailbox, even if it is just to ping the sender back to say that the person
RE: OOOR?
Do people still have land lines? -Original Message- From: Micheal Espinola Jr [mailto:[EMAIL PROTECTED] Sent: Saturday, August 16, 2008 12:58 AM To: MS-Exchange Admin Issues Subject: Re: OOOR? Your name is the first thing I need to pull a credit/finance report. I'm not going to go into detail, but this stuff is trivial. It has been for 10+ years. Its not just about home invasion. Knowing you are going to be away, I can hack your home phone line and redirect your calls to me (for a multitude of reasons). This doesnt have to be virutal. With you not home, I'll hack the grey box on the outside of your house, or better yet, your neighborhood telco distribution box. Usually neither box is locked. I dont have to redirect either. Plenty of mischief can be played while directly accessing your line. Lots of social engineering starts by inviting (not neccessarily by request) phone calls be initiated to you - trusting that that number they dialed is yours and will be reaching your household. I could call your your credit card co too, and request that a duplicate card be sent to your house (while you are away), with a 1-2 day delivery most likely. Now I can take direct receipt of your physical credit card and go on a shopping spree. Thats just a few ideas off the top of my head. On Fri, Aug 15, 2008 at 4:44 PM, Eric Woodford [EMAIL PROTECTED] wrote: OK, you know where I live. Still what's the point? Unless my home is in some nice zip code, why are you going to take the risk that I actually have something of value? I'll tell you know, except for a truck load of well loved baby toys and a sofa that's been snotted on, you're burglary attempt would be a bust. Or maybe the two large dogs, and alarm system will foil you after the long drive to my house. On Fri, Aug 15, 2008 at 11:10 AM, Kurt Buff [EMAIL PROTECTED] wrote: If you are foolish enough to let folks know you won't be at home, and someone is of a mind to do this, you're screwed. The reason is, the OoO messages are only in response to an email someone sent you. That means they already have your name and the company you work for. If they don't already have your home address, a minor amount of social engineering at your workplace, or even a bit of googling, will reveal where you live. Kurt On Fri, Aug 15, 2008 at 10:25 AM, Eric Woodford [EMAIL PROTECTED] wrote: My point was even if you did say I am traveling to the North Pole for a month. What's to say I'd be able to find your house to sell all your furniture and worldly treasures. Last count, there are at least 9 people with my same name. On Fri, Aug 15, 2008 at 9:07 AM, Don Andrews [EMAIL PROTECTED] wrote: Agreed - not being in the office actually increases the chances of my being at home - no access to email simply says, don't even try to bother me. Now, on the other hand, if it said something really stupid like, I'll be out of (town|state|country) for a week, that would be different. From: Sobey, Richard A [mailto:[EMAIL PROTECTED] Sent: Friday, August 15, 2008 8:14 AM To: MS-Exchange Admin Issues Subject: RE: OOOR? Arrg! This tired old debate. What does not being at work have to do with not being at home?! From: Eric Woodford [mailto:[EMAIL PROTECTED] Sent: 14 August 2008 18:16 To: MS-Exchange Admin Issues Subject: Re: OOOR? Your OOTO says I will be out of the office between Monday and Friday with no access to email. That really says My house will be empty, please come and help yourself. Interesting concept, terribly difficult to implement. Unless I know you personally and have visited your house, finding your specific address, traveling there (especially being that you're across an ocean from me), breaking in and then hoping you have something of value worth the entire endeavor (all before you get back from vacation). That's all assuming you don't put your home address and keys under the mat in your signature. On Mon, Aug 11, 2008 at 12:38 PM, Simon Butler [EMAIL PROTECTED] wrote: If you do allow OOTO to the Internet then watch your queues. As spam is spoofed the OOTOs will stack up. However the social engineering and personal security issue is very important. Your OOTO says I will be out of the office between Monday and Friday with no access to email. That really says My house will be empty, please come and help yourself. The way that I usually counter the OOTO to the internet request is quite simple. How does it look to business partners, either potential or current? To use the example above, what that could be interpreted to say is Your custom is not important enough for me to get someone else to monitor my mailbox for a week, I will read it when I get back. If you do implement OOTO then a template would be the best option
Re: OOOR?
You're joking right? On Sat, Aug 16, 2008 at 1:08 PM, William Lefkovics [EMAIL PROTECTED] wrote: Do people still have land lines? -Original Message- From: Micheal Espinola Jr [mailto:[EMAIL PROTECTED] Sent: Saturday, August 16, 2008 12:58 AM To: MS-Exchange Admin Issues Subject: Re: OOOR? Your name is the first thing I need to pull a credit/finance report. I'm not going to go into detail, but this stuff is trivial. It has been for 10+ years. Its not just about home invasion. Knowing you are going to be away, I can hack your home phone line and redirect your calls to me (for a multitude of reasons). This doesnt have to be virutal. With you not home, I'll hack the grey box on the outside of your house, or better yet, your neighborhood telco distribution box. Usually neither box is locked. I dont have to redirect either. Plenty of mischief can be played while directly accessing your line. Lots of social engineering starts by inviting (not neccessarily by request) phone calls be initiated to you - trusting that that number they dialed is yours and will be reaching your household. I could call your your credit card co too, and request that a duplicate card be sent to your house (while you are away), with a 1-2 day delivery most likely. Now I can take direct receipt of your physical credit card and go on a shopping spree. Thats just a few ideas off the top of my head. On Fri, Aug 15, 2008 at 4:44 PM, Eric Woodford [EMAIL PROTECTED] wrote: OK, you know where I live. Still what's the point? Unless my home is in some nice zip code, why are you going to take the risk that I actually have something of value? I'll tell you know, except for a truck load of well loved baby toys and a sofa that's been snotted on, you're burglary attempt would be a bust. Or maybe the two large dogs, and alarm system will foil you after the long drive to my house. On Fri, Aug 15, 2008 at 11:10 AM, Kurt Buff [EMAIL PROTECTED] wrote: If you are foolish enough to let folks know you won't be at home, and someone is of a mind to do this, you're screwed. The reason is, the OoO messages are only in response to an email someone sent you. That means they already have your name and the company you work for. If they don't already have your home address, a minor amount of social engineering at your workplace, or even a bit of googling, will reveal where you live. Kurt On Fri, Aug 15, 2008 at 10:25 AM, Eric Woodford [EMAIL PROTECTED] wrote: My point was even if you did say I am traveling to the North Pole for a month. What's to say I'd be able to find your house to sell all your furniture and worldly treasures. Last count, there are at least 9 people with my same name. On Fri, Aug 15, 2008 at 9:07 AM, Don Andrews [EMAIL PROTECTED] wrote: Agreed - not being in the office actually increases the chances of my being at home - no access to email simply says, don't even try to bother me. Now, on the other hand, if it said something really stupid like, I'll be out of (town|state|country) for a week, that would be different. From: Sobey, Richard A [mailto:[EMAIL PROTECTED] Sent: Friday, August 15, 2008 8:14 AM To: MS-Exchange Admin Issues Subject: RE: OOOR? Arrg! This tired old debate. What does not being at work have to do with not being at home?! From: Eric Woodford [mailto:[EMAIL PROTECTED] Sent: 14 August 2008 18:16 To: MS-Exchange Admin Issues Subject: Re: OOOR? Your OOTO says I will be out of the office between Monday and Friday with no access to email. That really says My house will be empty, please come and help yourself. Interesting concept, terribly difficult to implement. Unless I know you personally and have visited your house, finding your specific address, traveling there (especially being that you're across an ocean from me), breaking in and then hoping you have something of value worth the entire endeavor (all before you get back from vacation). That's all assuming you don't put your home address and keys under the mat in your signature. On Mon, Aug 11, 2008 at 12:38 PM, Simon Butler [EMAIL PROTECTED] wrote: If you do allow OOTO to the Internet then watch your queues. As spam is spoofed the OOTOs will stack up. However the social engineering and personal security issue is very important. Your OOTO says I will be out of the office between Monday and Friday with no access to email. That really says My house will be empty, please come and help yourself. The way that I usually counter the OOTO to the internet request is quite simple. How does it look to business partners, either potential or current? To use the example above, what that could be interpreted to say is Your custom is not important enough for me to get someone else to monitor my mailbox for a week, I will read it when I get back
Re: OOOR?
Not really - I gave up my land line years ago. But, lots of folks I know keep theirs, and don't/won't own a cell phone. That's especially true for families with children, I'll bet... On Sat, Aug 16, 2008 at 10:28 AM, Micheal Espinola Jr [EMAIL PROTECTED] wrote: You're joking right? On Sat, Aug 16, 2008 at 1:08 PM, William Lefkovics [EMAIL PROTECTED] wrote: Do people still have land lines? -Original Message- From: Micheal Espinola Jr [mailto:[EMAIL PROTECTED] Sent: Saturday, August 16, 2008 12:58 AM To: MS-Exchange Admin Issues Subject: Re: OOOR? Your name is the first thing I need to pull a credit/finance report. I'm not going to go into detail, but this stuff is trivial. It has been for 10+ years. Its not just about home invasion. Knowing you are going to be away, I can hack your home phone line and redirect your calls to me (for a multitude of reasons). This doesnt have to be virutal. With you not home, I'll hack the grey box on the outside of your house, or better yet, your neighborhood telco distribution box. Usually neither box is locked. I dont have to redirect either. Plenty of mischief can be played while directly accessing your line. Lots of social engineering starts by inviting (not neccessarily by request) phone calls be initiated to you - trusting that that number they dialed is yours and will be reaching your household. I could call your your credit card co too, and request that a duplicate card be sent to your house (while you are away), with a 1-2 day delivery most likely. Now I can take direct receipt of your physical credit card and go on a shopping spree. Thats just a few ideas off the top of my head. On Fri, Aug 15, 2008 at 4:44 PM, Eric Woodford [EMAIL PROTECTED] wrote: OK, you know where I live. Still what's the point? Unless my home is in some nice zip code, why are you going to take the risk that I actually have something of value? I'll tell you know, except for a truck load of well loved baby toys and a sofa that's been snotted on, you're burglary attempt would be a bust. Or maybe the two large dogs, and alarm system will foil you after the long drive to my house. On Fri, Aug 15, 2008 at 11:10 AM, Kurt Buff [EMAIL PROTECTED] wrote: If you are foolish enough to let folks know you won't be at home, and someone is of a mind to do this, you're screwed. The reason is, the OoO messages are only in response to an email someone sent you. That means they already have your name and the company you work for. If they don't already have your home address, a minor amount of social engineering at your workplace, or even a bit of googling, will reveal where you live. Kurt On Fri, Aug 15, 2008 at 10:25 AM, Eric Woodford [EMAIL PROTECTED] wrote: My point was even if you did say I am traveling to the North Pole for a month. What's to say I'd be able to find your house to sell all your furniture and worldly treasures. Last count, there are at least 9 people with my same name. On Fri, Aug 15, 2008 at 9:07 AM, Don Andrews [EMAIL PROTECTED] wrote: Agreed - not being in the office actually increases the chances of my being at home - no access to email simply says, don't even try to bother me. Now, on the other hand, if it said something really stupid like, I'll be out of (town|state|country) for a week, that would be different. From: Sobey, Richard A [mailto:[EMAIL PROTECTED] Sent: Friday, August 15, 2008 8:14 AM To: MS-Exchange Admin Issues Subject: RE: OOOR? Arrg! This tired old debate. What does not being at work have to do with not being at home?! From: Eric Woodford [mailto:[EMAIL PROTECTED] Sent: 14 August 2008 18:16 To: MS-Exchange Admin Issues Subject: Re: OOOR? Your OOTO says I will be out of the office between Monday and Friday with no access to email. That really says My house will be empty, please come and help yourself. Interesting concept, terribly difficult to implement. Unless I know you personally and have visited your house, finding your specific address, traveling there (especially being that you're across an ocean from me), breaking in and then hoping you have something of value worth the entire endeavor (all before you get back from vacation). That's all assuming you don't put your home address and keys under the mat in your signature. On Mon, Aug 11, 2008 at 12:38 PM, Simon Butler [EMAIL PROTECTED] wrote: If you do allow OOTO to the Internet then watch your queues. As spam is spoofed the OOTOs will stack up. However the social engineering and personal security issue is very important. Your OOTO says I will be out of the office between Monday and Friday with no access to email. That really says My house will be empty, please come and help yourself. The way that I usually counter the OOTO to the internet request is quite simple. How
RE: OOOR?
The earthquake we recently had only reinforced my belief in keeping a land line. It wasn't even that large and cell's were down for a short while and then overloaded for some time after. My landline was just fine. No thanks. Land lines are still important. Cell still has not reached utility status. -Original Message- From: William Lefkovics [mailto:[EMAIL PROTECTED] Sent: Saturday, August 16, 2008 10:09 AM To: MS-Exchange Admin Issues Subject: RE: OOOR? Do people still have land lines? -Original Message- From: Micheal Espinola Jr [mailto:[EMAIL PROTECTED] Sent: Saturday, August 16, 2008 12:58 AM To: MS-Exchange Admin Issues Subject: Re: OOOR? Your name is the first thing I need to pull a credit/finance report. I'm not going to go into detail, but this stuff is trivial. It has been for 10+ years. Its not just about home invasion. Knowing you are going to be away, I can hack your home phone line and redirect your calls to me (for a multitude of reasons). This doesnt have to be virutal. With you not home, I'll hack the grey box on the outside of your house, or better yet, your neighborhood telco distribution box. Usually neither box is locked. I dont have to redirect either. Plenty of mischief can be played while directly accessing your line. Lots of social engineering starts by inviting (not neccessarily by request) phone calls be initiated to you - trusting that that number they dialed is yours and will be reaching your household. I could call your your credit card co too, and request that a duplicate card be sent to your house (while you are away), with a 1-2 day delivery most likely. Now I can take direct receipt of your physical credit card and go on a shopping spree. Thats just a few ideas off the top of my head. On Fri, Aug 15, 2008 at 4:44 PM, Eric Woodford [EMAIL PROTECTED] wrote: OK, you know where I live. Still what's the point? Unless my home is in some nice zip code, why are you going to take the risk that I actually have something of value? I'll tell you know, except for a truck load of well loved baby toys and a sofa that's been snotted on, you're burglary attempt would be a bust. Or maybe the two large dogs, and alarm system will foil you after the long drive to my house. On Fri, Aug 15, 2008 at 11:10 AM, Kurt Buff [EMAIL PROTECTED] wrote: If you are foolish enough to let folks know you won't be at home, and someone is of a mind to do this, you're screwed. The reason is, the OoO messages are only in response to an email someone sent you. That means they already have your name and the company you work for. If they don't already have your home address, a minor amount of social engineering at your workplace, or even a bit of googling, will reveal where you live. Kurt On Fri, Aug 15, 2008 at 10:25 AM, Eric Woodford [EMAIL PROTECTED] wrote: My point was even if you did say I am traveling to the North Pole for a month. What's to say I'd be able to find your house to sell all your furniture and worldly treasures. Last count, there are at least 9 people with my same name. On Fri, Aug 15, 2008 at 9:07 AM, Don Andrews [EMAIL PROTECTED] wrote: Agreed - not being in the office actually increases the chances of my being at home - no access to email simply says, don't even try to bother me. Now, on the other hand, if it said something really stupid like, I'll be out of (town|state|country) for a week, that would be different. From: Sobey, Richard A [mailto:[EMAIL PROTECTED] Sent: Friday, August 15, 2008 8:14 AM To: MS-Exchange Admin Issues Subject: RE: OOOR? Arrg! This tired old debate. What does not being at work have to do with not being at home?! From: Eric Woodford [mailto:[EMAIL PROTECTED] Sent: 14 August 2008 18:16 To: MS-Exchange Admin Issues Subject: Re: OOOR? Your OOTO says I will be out of the office between Monday and Friday with no access to email. That really says My house will be empty, please come and help yourself. Interesting concept, terribly difficult to implement. Unless I know you personally and have visited your house, finding your specific address, traveling there (especially being that you're across an ocean from me), breaking in and then hoping you have something of value worth the entire endeavor (all before you get back from vacation). That's all assuming you don't put your home address and keys under the mat in your signature. On Mon, Aug 11, 2008 at 12:38 PM, Simon Butler [EMAIL PROTECTED] wrote: If you do allow OOTO to the Internet then watch your queues. As spam is spoofed the OOTOs will stack up. However the social engineering and personal security issue is very important. Your OOTO says I will be out of the office between Monday and Friday with no access to email. That really says My house will be empty, please come
RE: OOOR?
Copper GOOD! -Original Message- From: Martin Blackstone [mailto:[EMAIL PROTECTED] Sent: Saturday, August 16, 2008 1:10 PM To: MS-Exchange Admin Issues Subject: RE: OOOR? The earthquake we recently had only reinforced my belief in keeping a land line. It wasn't even that large and cell's were down for a short while and then overloaded for some time after. My landline was just fine. No thanks. Land lines are still important. Cell still has not reached utility status. -Original Message- From: William Lefkovics [mailto:[EMAIL PROTECTED] Sent: Saturday, August 16, 2008 10:09 AM To: MS-Exchange Admin Issues Subject: RE: OOOR? Do people still have land lines? -Original Message- From: Micheal Espinola Jr [mailto:[EMAIL PROTECTED] Sent: Saturday, August 16, 2008 12:58 AM To: MS-Exchange Admin Issues Subject: Re: OOOR? Your name is the first thing I need to pull a credit/finance report. I'm not going to go into detail, but this stuff is trivial. It has been for 10+ years. Its not just about home invasion. Knowing you are going to be away, I can hack your home phone line and redirect your calls to me (for a multitude of reasons). This doesnt have to be virutal. With you not home, I'll hack the grey box on the outside of your house, or better yet, your neighborhood telco distribution box. Usually neither box is locked. I dont have to redirect either. Plenty of mischief can be played while directly accessing your line. Lots of social engineering starts by inviting (not neccessarily by request) phone calls be initiated to you - trusting that that number they dialed is yours and will be reaching your household. I could call your your credit card co too, and request that a duplicate card be sent to your house (while you are away), with a 1-2 day delivery most likely. Now I can take direct receipt of your physical credit card and go on a shopping spree. Thats just a few ideas off the top of my head. On Fri, Aug 15, 2008 at 4:44 PM, Eric Woodford [EMAIL PROTECTED] wrote: OK, you know where I live. Still what's the point? Unless my home is in some nice zip code, why are you going to take the risk that I actually have something of value? I'll tell you know, except for a truck load of well loved baby toys and a sofa that's been snotted on, you're burglary attempt would be a bust. Or maybe the two large dogs, and alarm system will foil you after the long drive to my house. On Fri, Aug 15, 2008 at 11:10 AM, Kurt Buff [EMAIL PROTECTED] wrote: If you are foolish enough to let folks know you won't be at home, and someone is of a mind to do this, you're screwed. The reason is, the OoO messages are only in response to an email someone sent you. That means they already have your name and the company you work for. If they don't already have your home address, a minor amount of social engineering at your workplace, or even a bit of googling, will reveal where you live. Kurt On Fri, Aug 15, 2008 at 10:25 AM, Eric Woodford [EMAIL PROTECTED] wrote: My point was even if you did say I am traveling to the North Pole for a month. What's to say I'd be able to find your house to sell all your furniture and worldly treasures. Last count, there are at least 9 people with my same name. On Fri, Aug 15, 2008 at 9:07 AM, Don Andrews [EMAIL PROTECTED] wrote: Agreed - not being in the office actually increases the chances of my being at home - no access to email simply says, don't even try to bother me. Now, on the other hand, if it said something really stupid like, I'll be out of (town|state|country) for a week, that would be different. From: Sobey, Richard A [mailto:[EMAIL PROTECTED] Sent: Friday, August 15, 2008 8:14 AM To: MS-Exchange Admin Issues Subject: RE: OOOR? Arrg! This tired old debate. What does not being at work have to do with not being at home?! From: Eric Woodford [mailto:[EMAIL PROTECTED] Sent: 14 August 2008 18:16 To: MS-Exchange Admin Issues Subject: Re: OOOR? Your OOTO says I will be out of the office between Monday and Friday with no access to email. That really says My house will be empty, please come and help yourself. Interesting concept, terribly difficult to implement. Unless I know you personally and have visited your house, finding your specific address, traveling there (especially being that you're across an ocean from me), breaking in and then hoping you have something of value worth the entire endeavor (all before you get back from vacation). That's all assuming you don't put your home address and keys under the mat in your signature. On Mon, Aug 11, 2008 at 12:38 PM, Simon Butler [EMAIL PROTECTED] wrote: If you do allow OOTO to the Internet then watch your queues. As spam is spoofed the OOTOs will stack up. However the social engineering and personal security
Re: OOOR?
You did, I did, he did... but we are techies. Most ppl that do revealing OOO's and other similarly stupid things aren't. They are not aware of the risks and concepts that we are. On a personal note, most of the techies I know IRL have landlines. So to the point of, Do people still have land lines?, I would say a resounding yes. On Sat, Aug 16, 2008 at 1:47 PM, Kurt Buff [EMAIL PROTECTED] wrote: Not really - I gave up my land line years ago. But, lots of folks I know keep theirs, and don't/won't own a cell phone. That's especially true for families with children, I'll bet... On Sat, Aug 16, 2008 at 10:28 AM, Micheal Espinola Jr [EMAIL PROTECTED] wrote: You're joking right? On Sat, Aug 16, 2008 at 1:08 PM, William Lefkovics [EMAIL PROTECTED] wrote: Do people still have land lines? -Original Message- From: Micheal Espinola Jr [mailto:[EMAIL PROTECTED] Sent: Saturday, August 16, 2008 12:58 AM To: MS-Exchange Admin Issues Subject: Re: OOOR? Your name is the first thing I need to pull a credit/finance report. I'm not going to go into detail, but this stuff is trivial. It has been for 10+ years. Its not just about home invasion. Knowing you are going to be away, I can hack your home phone line and redirect your calls to me (for a multitude of reasons). This doesnt have to be virutal. With you not home, I'll hack the grey box on the outside of your house, or better yet, your neighborhood telco distribution box. Usually neither box is locked. I dont have to redirect either. Plenty of mischief can be played while directly accessing your line. Lots of social engineering starts by inviting (not neccessarily by request) phone calls be initiated to you - trusting that that number they dialed is yours and will be reaching your household. I could call your your credit card co too, and request that a duplicate card be sent to your house (while you are away), with a 1-2 day delivery most likely. Now I can take direct receipt of your physical credit card and go on a shopping spree. Thats just a few ideas off the top of my head. On Fri, Aug 15, 2008 at 4:44 PM, Eric Woodford [EMAIL PROTECTED] wrote: OK, you know where I live. Still what's the point? Unless my home is in some nice zip code, why are you going to take the risk that I actually have something of value? I'll tell you know, except for a truck load of well loved baby toys and a sofa that's been snotted on, you're burglary attempt would be a bust. Or maybe the two large dogs, and alarm system will foil you after the long drive to my house. On Fri, Aug 15, 2008 at 11:10 AM, Kurt Buff [EMAIL PROTECTED] wrote: If you are foolish enough to let folks know you won't be at home, and someone is of a mind to do this, you're screwed. The reason is, the OoO messages are only in response to an email someone sent you. That means they already have your name and the company you work for. If they don't already have your home address, a minor amount of social engineering at your workplace, or even a bit of googling, will reveal where you live. Kurt On Fri, Aug 15, 2008 at 10:25 AM, Eric Woodford [EMAIL PROTECTED] wrote: My point was even if you did say I am traveling to the North Pole for a month. What's to say I'd be able to find your house to sell all your furniture and worldly treasures. Last count, there are at least 9 people with my same name. On Fri, Aug 15, 2008 at 9:07 AM, Don Andrews [EMAIL PROTECTED] wrote: Agreed - not being in the office actually increases the chances of my being at home - no access to email simply says, don't even try to bother me. Now, on the other hand, if it said something really stupid like, I'll be out of (town|state|country) for a week, that would be different. From: Sobey, Richard A [mailto:[EMAIL PROTECTED] Sent: Friday, August 15, 2008 8:14 AM To: MS-Exchange Admin Issues Subject: RE: OOOR? Arrg! This tired old debate. What does not being at work have to do with not being at home?! From: Eric Woodford [mailto:[EMAIL PROTECTED] Sent: 14 August 2008 18:16 To: MS-Exchange Admin Issues Subject: Re: OOOR? Your OOTO says I will be out of the office between Monday and Friday with no access to email. That really says My house will be empty, please come and help yourself. Interesting concept, terribly difficult to implement. Unless I know you personally and have visited your house, finding your specific address, traveling there (especially being that you're across an ocean from me), breaking in and then hoping you have something of value worth the entire endeavor (all before you get back from vacation). That's all assuming you don't put your home address and keys under the mat in your signature. On Mon, Aug 11, 2008 at 12:38 PM, Simon Butler [EMAIL PROTECTED] wrote: If you do allow OOTO to the Internet then watch
RE: OOOR?
Cell? Oh ya... I guess that is an option as well. :) From: Martin Blackstone [EMAIL PROTECTED] Sent: Saturday, August 16, 2008 11:40 AM To: MS-Exchange Admin Issues exchangelist@lyris.sunbelt-software.com Subject: RE: OOOR? The earthquake we recently had only reinforced my belief in keeping a land line. It wasn't even that large and cell's were down for a short while and then overloaded for some time after. My landline was just fine. No thanks. Land lines are still important. Cell still has not reached utility status. -Original Message- From: William Lefkovics [mailto:[EMAIL PROTECTED] Sent: Saturday, August 16, 2008 10:09 AM To: MS-Exchange Admin Issues Subject: RE: OOOR? Do people still have land lines? -Original Message- From: Micheal Espinola Jr [mailto:[EMAIL PROTECTED] Sent: Saturday, August 16, 2008 12:58 AM To: MS-Exchange Admin Issues Subject: Re: OOOR? Your name is the first thing I need to pull a credit/finance report. I'm not going to go into detail, but this stuff is trivial. It has been for 10+ years. ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja~
RE: OOOR?
Arrg! This tired old debate. What does not being at work have to do with not being at home?! From: Eric Woodford [mailto:[EMAIL PROTECTED] Sent: 14 August 2008 18:16 To: MS-Exchange Admin Issues Subject: Re: OOOR? Your OOTO says I will be out of the office between Monday and Friday with no access to email. That really says My house will be empty, please come and help yourself. Interesting concept, terribly difficult to implement. Unless I know you personally and have visited your house, finding your specific address, traveling there (especially being that you're across an ocean from me), breaking in and then hoping you have something of value worth the entire endeavor (all before you get back from vacation). That's all assuming you don't put your home address and keys under the mat in your signature. On Mon, Aug 11, 2008 at 12:38 PM, Simon Butler [EMAIL PROTECTED] wrote: If you do allow OOTO to the Internet then watch your queues. As spam is spoofed the OOTOs will stack up. However the social engineering and personal security issue is very important. Your OOTO says I will be out of the office between Monday and Friday with no access to email. That really says My house will be empty, please come and help yourself. The way that I usually counter the OOTO to the internet request is quite simple. How does it look to business partners, either potential or current? To use the example above, what that could be interpreted to say is Your custom is not important enough for me to get someone else to monitor my mailbox for a week, I will read it when I get back. If you do implement OOTO then a template would be the best option. The template wouldn't give much information away, and would tell the sender that the mailbox is being monitored. Someone would then need to monitor the mailbox, even if it is just to ping the sender back to say that the person was away, is it urgent or can it wait. Simon. -- Simon Butler MVP: Exchange, MCSE Amset IT Solutions Ltd. e: [EMAIL PROTECTED] w: www.amset.co.uk w: www.amset.info Need cheap certificates for Exchange, compatible with Windows Mobile 5.0? http://CertificatesForExchange.com/ for certificates from just $23.99. Need a domain for your certificate? http://DomainsForExchange.net/ -Original Message- From: William Lefkovics [mailto:[EMAIL PROTECTED] Sent: 11 August 2008 20:29 To: MS-Exchange Admin Issues Subject: RE: OOOR? You probably got several in response to that post. Spammers don't care about OOFs. They don't nickel and dime addresses. There is sometimes juicy social engineering information within the OOF though. -Original Message- From: Jim Dandy [mailto:[EMAIL PROTECTED] Sent: Monday, August 11, 2008 10:08 AM To: MS-Exchange Admin Issues Subject: OOOR? I'm curious if others are allowing out of office replies to the internet? I've heard it's a bad idea because spammers use it to harvest valid addresses. Thanks for your comments. Curt ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja~ ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja~ ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja~ ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja~
RE: OOOR?
Agreed - not being in the office actually increases the chances of my being at home - no access to email simply says, don't even try to bother me. Now, on the other hand, if it said something really stupid like, I'll be out of (town|state|country) for a week, that would be different. From: Sobey, Richard A [mailto:[EMAIL PROTECTED] Sent: Friday, August 15, 2008 8:14 AM To: MS-Exchange Admin Issues Subject: RE: OOOR? Arrg! This tired old debate. What does not being at work have to do with not being at home?! From: Eric Woodford [mailto:[EMAIL PROTECTED] Sent: 14 August 2008 18:16 To: MS-Exchange Admin Issues Subject: Re: OOOR? Your OOTO says I will be out of the office between Monday and Friday with no access to email. That really says My house will be empty, please come and help yourself. Interesting concept, terribly difficult to implement. Unless I know you personally and have visited your house, finding your specific address, traveling there (especially being that you're across an ocean from me), breaking in and then hoping you have something of value worth the entire endeavor (all before you get back from vacation). That's all assuming you don't put your home address and keys under the mat in your signature. On Mon, Aug 11, 2008 at 12:38 PM, Simon Butler [EMAIL PROTECTED] wrote: If you do allow OOTO to the Internet then watch your queues. As spam is spoofed the OOTOs will stack up. However the social engineering and personal security issue is very important. Your OOTO says I will be out of the office between Monday and Friday with no access to email. That really says My house will be empty, please come and help yourself. The way that I usually counter the OOTO to the internet request is quite simple. How does it look to business partners, either potential or current? To use the example above, what that could be interpreted to say is Your custom is not important enough for me to get someone else to monitor my mailbox for a week, I will read it when I get back. If you do implement OOTO then a template would be the best option. The template wouldn't give much information away, and would tell the sender that the mailbox is being monitored. Someone would then need to monitor the mailbox, even if it is just to ping the sender back to say that the person was away, is it urgent or can it wait. Simon. -- Simon Butler MVP: Exchange, MCSE Amset IT Solutions Ltd. e: [EMAIL PROTECTED] w: www.amset.co.uk w: www.amset.info Need cheap certificates for Exchange, compatible with Windows Mobile 5.0? http://CertificatesForExchange.com/ for certificates from just $23.99. Need a domain for your certificate? http://DomainsForExchange.net/ -Original Message- From: William Lefkovics [mailto:[EMAIL PROTECTED] Sent: 11 August 2008 20:29 To: MS-Exchange Admin Issues Subject: RE: OOOR? You probably got several in response to that post. Spammers don't care about OOFs. They don't nickel and dime addresses. There is sometimes juicy social engineering information within the OOF though. -Original Message- From: Jim Dandy [mailto:[EMAIL PROTECTED] Sent: Monday, August 11, 2008 10:08 AM To: MS-Exchange Admin Issues Subject: OOOR? I'm curious if others are allowing out of office replies to the internet? I've heard it's a bad idea because spammers use it to harvest valid addresses. Thanks for your comments. Curt ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja~ ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja~ ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja~ ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja~
Re: OOOR?
My point was even if you did say I am traveling to the North Pole for a month. What's to say I'd be able to find your house to sell all your furniture and worldly treasures. Last count, there are at least 9 people with my same name. On Fri, Aug 15, 2008 at 9:07 AM, Don Andrews [EMAIL PROTECTED]wrote: Agreed – not being in the office actually increases the chances of my being at home – no access to email simply says, don't even try to bother me. Now, on the other hand, if it said something really stupid like, I'll be out of (town|state|country) for a week, that would be different. -- *From:* Sobey, Richard A [mailto:[EMAIL PROTECTED] *Sent:* Friday, August 15, 2008 8:14 AM *To:* MS-Exchange Admin Issues *Subject:* RE: OOOR? Arrg! This tired old debate. What does not being at work have to do with not being at home?! *From:* Eric Woodford [mailto:[EMAIL PROTECTED] *Sent:* 14 August 2008 18:16 *To:* MS-Exchange Admin Issues *Subject:* Re: OOOR? Your OOTO says I will be out of the office between Monday and Friday with no access to email. That really says My house will be empty, please come and help yourself. Interesting concept, terribly difficult to implement. Unless I know you personally and have visited your house, finding your specific address, traveling there (especially being that you're across an ocean from me), breaking in and then hoping you have something of value worth the entire endeavor (all before you get back from vacation). That's all assuming you don't put your home address and keys under the mat in your signature. On Mon, Aug 11, 2008 at 12:38 PM, Simon Butler [EMAIL PROTECTED] wrote: If you do allow OOTO to the Internet then watch your queues. As spam is spoofed the OOTOs will stack up. However the social engineering and personal security issue is very important. Your OOTO says I will be out of the office between Monday and Friday with no access to email. That really says My house will be empty, please come and help yourself. The way that I usually counter the OOTO to the internet request is quite simple. How does it look to business partners, either potential or current? To use the example above, what that could be interpreted to say is Your custom is not important enough for me to get someone else to monitor my mailbox for a week, I will read it when I get back. If you do implement OOTO then a template would be the best option. The template wouldn't give much information away, and would tell the sender that the mailbox is being monitored. Someone would then need to monitor the mailbox, even if it is just to ping the sender back to say that the person was away, is it urgent or can it wait. Simon. -- Simon Butler MVP: Exchange, MCSE Amset IT Solutions Ltd. e: [EMAIL PROTECTED] w: www.amset.co.uk w: www.amset.info Need cheap certificates for Exchange, compatible with Windows Mobile 5.0? http://CertificatesForExchange.com/ for certificates from just $23.99. Need a domain for your certificate? http://DomainsForExchange.net/ -Original Message- From: William Lefkovics [mailto:[EMAIL PROTECTED] Sent: 11 August 2008 20:29 To: MS-Exchange Admin Issues Subject: RE: OOOR? You probably got several in response to that post. Spammers don't care about OOFs. They don't nickel and dime addresses. There is sometimes juicy social engineering information within the OOF though. -Original Message- From: Jim Dandy [mailto:[EMAIL PROTECTED] Sent: Monday, August 11, 2008 10:08 AM To: MS-Exchange Admin Issues Subject: OOOR? I'm curious if others are allowing out of office replies to the internet? I've heard it's a bad idea because spammers use it to harvest valid addresses. Thanks for your comments. Curt ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja~ ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja~ ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja~ ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja~
Re: OOOR?
If you are foolish enough to let folks know you won't be at home, and someone is of a mind to do this, you're screwed. The reason is, the OoO messages are only in response to an email someone sent you. That means they already have your name and the company you work for. If they don't already have your home address, a minor amount of social engineering at your workplace, or even a bit of googling, will reveal where you live. Kurt On Fri, Aug 15, 2008 at 10:25 AM, Eric Woodford [EMAIL PROTECTED] wrote: My point was even if you did say I am traveling to the North Pole for a month. What's to say I'd be able to find your house to sell all your furniture and worldly treasures. Last count, there are at least 9 people with my same name. On Fri, Aug 15, 2008 at 9:07 AM, Don Andrews [EMAIL PROTECTED] wrote: Agreed – not being in the office actually increases the chances of my being at home – no access to email simply says, don't even try to bother me. Now, on the other hand, if it said something really stupid like, I'll be out of (town|state|country) for a week, that would be different. From: Sobey, Richard A [mailto:[EMAIL PROTECTED] Sent: Friday, August 15, 2008 8:14 AM To: MS-Exchange Admin Issues Subject: RE: OOOR? Arrg! This tired old debate. What does not being at work have to do with not being at home?! From: Eric Woodford [mailto:[EMAIL PROTECTED] Sent: 14 August 2008 18:16 To: MS-Exchange Admin Issues Subject: Re: OOOR? Your OOTO says I will be out of the office between Monday and Friday with no access to email. That really says My house will be empty, please come and help yourself. Interesting concept, terribly difficult to implement. Unless I know you personally and have visited your house, finding your specific address, traveling there (especially being that you're across an ocean from me), breaking in and then hoping you have something of value worth the entire endeavor (all before you get back from vacation). That's all assuming you don't put your home address and keys under the mat in your signature. On Mon, Aug 11, 2008 at 12:38 PM, Simon Butler [EMAIL PROTECTED] wrote: If you do allow OOTO to the Internet then watch your queues. As spam is spoofed the OOTOs will stack up. However the social engineering and personal security issue is very important. Your OOTO says I will be out of the office between Monday and Friday with no access to email. That really says My house will be empty, please come and help yourself. The way that I usually counter the OOTO to the internet request is quite simple. How does it look to business partners, either potential or current? To use the example above, what that could be interpreted to say is Your custom is not important enough for me to get someone else to monitor my mailbox for a week, I will read it when I get back. If you do implement OOTO then a template would be the best option. The template wouldn't give much information away, and would tell the sender that the mailbox is being monitored. Someone would then need to monitor the mailbox, even if it is just to ping the sender back to say that the person was away, is it urgent or can it wait. Simon. -- Simon Butler MVP: Exchange, MCSE Amset IT Solutions Ltd. e: [EMAIL PROTECTED] w: www.amset.co.uk w: www.amset.info Need cheap certificates for Exchange, compatible with Windows Mobile 5.0? http://CertificatesForExchange.com/ for certificates from just $23.99. Need a domain for your certificate? http://DomainsForExchange.net/ -Original Message- From: William Lefkovics [mailto:[EMAIL PROTECTED] Sent: 11 August 2008 20:29 To: MS-Exchange Admin Issues Subject: RE: OOOR? You probably got several in response to that post. Spammers don't care about OOFs. They don't nickel and dime addresses. There is sometimes juicy social engineering information within the OOF though. -Original Message- From: Jim Dandy [mailto:[EMAIL PROTECTED] Sent: Monday, August 11, 2008 10:08 AM To: MS-Exchange Admin Issues Subject: OOOR? I'm curious if others are allowing out of office replies to the internet? I've heard it's a bad idea because spammers use it to harvest valid addresses. Thanks for your comments. Curt ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja~ ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja~ ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja~ ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja~
Re: OOOR?
Or a lurker on a list you subscribe to. :-) On Fri, Aug 15, 2008 at 2:10 PM, Kurt Buff [EMAIL PROTECTED] wrote: If you are foolish enough to let folks know you won't be at home, and someone is of a mind to do this, you're screwed. The reason is, the OoO messages are only in response to an email someone sent you. That means they already have your name and the company you work for. If they don't already have your home address, a minor amount of social engineering at your workplace, or even a bit of googling, will reveal where you live. Kurt On Fri, Aug 15, 2008 at 10:25 AM, Eric Woodford [EMAIL PROTECTED] wrote: My point was even if you did say I am traveling to the North Pole for a month. What's to say I'd be able to find your house to sell all your furniture and worldly treasures. Last count, there are at least 9 people with my same name. On Fri, Aug 15, 2008 at 9:07 AM, Don Andrews [EMAIL PROTECTED] wrote: Agreed – not being in the office actually increases the chances of my being at home – no access to email simply says, don't even try to bother me. Now, on the other hand, if it said something really stupid like, I'll be out of (town|state|country) for a week, that would be different. From: Sobey, Richard A [mailto:[EMAIL PROTECTED] Sent: Friday, August 15, 2008 8:14 AM To: MS-Exchange Admin Issues Subject: RE: OOOR? Arrg! This tired old debate. What does not being at work have to do with not being at home?! From: Eric Woodford [mailto:[EMAIL PROTECTED] Sent: 14 August 2008 18:16 To: MS-Exchange Admin Issues Subject: Re: OOOR? Your OOTO says I will be out of the office between Monday and Friday with no access to email. That really says My house will be empty, please come and help yourself. Interesting concept, terribly difficult to implement. Unless I know you personally and have visited your house, finding your specific address, traveling there (especially being that you're across an ocean from me), breaking in and then hoping you have something of value worth the entire endeavor (all before you get back from vacation). That's all assuming you don't put your home address and keys under the mat in your signature. On Mon, Aug 11, 2008 at 12:38 PM, Simon Butler [EMAIL PROTECTED] wrote: If you do allow OOTO to the Internet then watch your queues. As spam is spoofed the OOTOs will stack up. However the social engineering and personal security issue is very important. Your OOTO says I will be out of the office between Monday and Friday with no access to email. That really says My house will be empty, please come and help yourself. The way that I usually counter the OOTO to the internet request is quite simple. How does it look to business partners, either potential or current? To use the example above, what that could be interpreted to say is Your custom is not important enough for me to get someone else to monitor my mailbox for a week, I will read it when I get back. If you do implement OOTO then a template would be the best option. The template wouldn't give much information away, and would tell the sender that the mailbox is being monitored. Someone would then need to monitor the mailbox, even if it is just to ping the sender back to say that the person was away, is it urgent or can it wait. Simon. -- Simon Butler MVP: Exchange, MCSE Amset IT Solutions Ltd. e: [EMAIL PROTECTED] w: www.amset.co.uk w: www.amset.info Need cheap certificates for Exchange, compatible with Windows Mobile 5.0? http://CertificatesForExchange.com/ for certificates from just $23.99. Need a domain for your certificate? http://DomainsForExchange.net/ -Original Message- From: William Lefkovics [mailto:[EMAIL PROTECTED] Sent: 11 August 2008 20:29 To: MS-Exchange Admin Issues Subject: RE: OOOR? You probably got several in response to that post. Spammers don't care about OOFs. They don't nickel and dime addresses. There is sometimes juicy social engineering information within the OOF though. -Original Message- From: Jim Dandy [mailto:[EMAIL PROTECTED] Sent: Monday, August 11, 2008 10:08 AM To: MS-Exchange Admin Issues Subject: OOOR? I'm curious if others are allowing out of office replies to the internet? I've heard it's a bad idea because spammers use it to harvest valid addresses. Thanks for your comments. Curt ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja~ ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja~ ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja~ ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com
Re: OOOR?
OK, you know where I live. Still what's the point? Unless my home is in some nice zip code, why are you going to take the risk that I actually have something of value? I'll tell you know, except for a truck load of well loved baby toys and a sofa that's been snotted on, you're burglary attempt would be a bust. Or maybe the two large dogs, and alarm system will foil you after the long drive to my house. On Fri, Aug 15, 2008 at 11:10 AM, Kurt Buff [EMAIL PROTECTED] wrote: If you are foolish enough to let folks know you won't be at home, and someone is of a mind to do this, you're screwed. The reason is, the OoO messages are only in response to an email someone sent you. That means they already have your name and the company you work for. If they don't already have your home address, a minor amount of social engineering at your workplace, or even a bit of googling, will reveal where you live. Kurt On Fri, Aug 15, 2008 at 10:25 AM, Eric Woodford [EMAIL PROTECTED] wrote: My point was even if you did say I am traveling to the North Pole for a month. What's to say I'd be able to find your house to sell all your furniture and worldly treasures. Last count, there are at least 9 people with my same name. On Fri, Aug 15, 2008 at 9:07 AM, Don Andrews [EMAIL PROTECTED] wrote: Agreed – not being in the office actually increases the chances of my being at home – no access to email simply says, don't even try to bother me. Now, on the other hand, if it said something really stupid like, I'll be out of (town|state|country) for a week, that would be different. From: Sobey, Richard A [mailto:[EMAIL PROTECTED] Sent: Friday, August 15, 2008 8:14 AM To: MS-Exchange Admin Issues Subject: RE: OOOR? Arrg! This tired old debate. What does not being at work have to do with not being at home?! From: Eric Woodford [mailto:[EMAIL PROTECTED] Sent: 14 August 2008 18:16 To: MS-Exchange Admin Issues Subject: Re: OOOR? Your OOTO says I will be out of the office between Monday and Friday with no access to email. That really says My house will be empty, please come and help yourself. Interesting concept, terribly difficult to implement. Unless I know you personally and have visited your house, finding your specific address, traveling there (especially being that you're across an ocean from me), breaking in and then hoping you have something of value worth the entire endeavor (all before you get back from vacation). That's all assuming you don't put your home address and keys under the mat in your signature. On Mon, Aug 11, 2008 at 12:38 PM, Simon Butler [EMAIL PROTECTED] wrote: If you do allow OOTO to the Internet then watch your queues. As spam is spoofed the OOTOs will stack up. However the social engineering and personal security issue is very important. Your OOTO says I will be out of the office between Monday and Friday with no access to email. That really says My house will be empty, please come and help yourself. The way that I usually counter the OOTO to the internet request is quite simple. How does it look to business partners, either potential or current? To use the example above, what that could be interpreted to say is Your custom is not important enough for me to get someone else to monitor my mailbox for a week, I will read it when I get back. If you do implement OOTO then a template would be the best option. The template wouldn't give much information away, and would tell the sender that the mailbox is being monitored. Someone would then need to monitor the mailbox, even if it is just to ping the sender back to say that the person was away, is it urgent or can it wait. Simon. -- Simon Butler MVP: Exchange, MCSE Amset IT Solutions Ltd. e: [EMAIL PROTECTED] w: www.amset.co.uk w: www.amset.info Need cheap certificates for Exchange, compatible with Windows Mobile 5.0? http://CertificatesForExchange.com/ for certificates from just $23.99. Need a domain for your certificate? http://DomainsForExchange.net/ -Original Message- From: William Lefkovics [mailto:[EMAIL PROTECTED] Sent: 11 August 2008 20:29 To: MS-Exchange Admin Issues Subject: RE: OOOR? You probably got several in response to that post. Spammers don't care about OOFs. They don't nickel and dime addresses. There is sometimes juicy social engineering information within the OOF though. -Original Message- From: Jim Dandy [mailto:[EMAIL PROTECTED] Sent: Monday, August 11, 2008 10:08 AM To: MS-Exchange Admin Issues Subject: OOOR? I'm curious if others are allowing out of office replies to the internet? I've heard it's a bad idea because spammers use it to harvest valid addresses. Thanks for your comments. Curt ~ Ninja Email Security with Cloudmark Spam
RE: OOOR?
SWEET! Baby toys! NOW I know where to go.X-mas gifts for Shookster... Dave From: Eric Woodford [mailto:[EMAIL PROTECTED] Sent: Friday, August 15, 2008 1:44 PM To: MS-Exchange Admin Issues Subject: Re: OOOR? OK, you know where I live. Still what's the point? Unless my home is in some nice zip code, why are you going to take the risk that I actually have something of value? I'll tell you know, except for a truck load of well loved baby toys and a sofa that's been snotted on, you're burglary attempt would be a bust. Or maybe the two large dogs, and alarm system will foil you after the long drive to my house. On Fri, Aug 15, 2008 at 11:10 AM, Kurt Buff [EMAIL PROTECTED]mailto:[EMAIL PROTECTED] wrote: If you are foolish enough to let folks know you won't be at home, and someone is of a mind to do this, you're screwed. The reason is, the OoO messages are only in response to an email someone sent you. That means they already have your name and the company you work for. If they don't already have your home address, a minor amount of social engineering at your workplace, or even a bit of googling, will reveal where you live. Kurt On Fri, Aug 15, 2008 at 10:25 AM, Eric Woodford [EMAIL PROTECTED]mailto:[EMAIL PROTECTED] wrote: My point was even if you did say I am traveling to the North Pole for a month. What's to say I'd be able to find your house to sell all your furniture and worldly treasures. Last count, there are at least 9 people with my same name. On Fri, Aug 15, 2008 at 9:07 AM, Don Andrews [EMAIL PROTECTED]mailto:[EMAIL PROTECTED] wrote: Agreed - not being in the office actually increases the chances of my being at home - no access to email simply says, don't even try to bother me. Now, on the other hand, if it said something really stupid like, I'll be out of (town|state|country) for a week, that would be different. From: Sobey, Richard A [mailto:[EMAIL PROTECTED]mailto:[EMAIL PROTECTED]] Sent: Friday, August 15, 2008 8:14 AM To: MS-Exchange Admin Issues Subject: RE: OOOR? Arrg! This tired old debate. What does not being at work have to do with not being at home?! From: Eric Woodford [mailto:[EMAIL PROTECTED]mailto:[EMAIL PROTECTED]] Sent: 14 August 2008 18:16 To: MS-Exchange Admin Issues Subject: Re: OOOR? Your OOTO says I will be out of the office between Monday and Friday with no access to email. That really says My house will be empty, please come and help yourself. Interesting concept, terribly difficult to implement. Unless I know you personally and have visited your house, finding your specific address, traveling there (especially being that you're across an ocean from me), breaking in and then hoping you have something of value worth the entire endeavor (all before you get back from vacation). That's all assuming you don't put your home address and keys under the mat in your signature. On Mon, Aug 11, 2008 at 12:38 PM, Simon Butler [EMAIL PROTECTED]mailto:[EMAIL PROTECTED] wrote: If you do allow OOTO to the Internet then watch your queues. As spam is spoofed the OOTOs will stack up. However the social engineering and personal security issue is very important. Your OOTO says I will be out of the office between Monday and Friday with no access to email. That really says My house will be empty, please come and help yourself. The way that I usually counter the OOTO to the internet request is quite simple. How does it look to business partners, either potential or current? To use the example above, what that could be interpreted to say is Your custom is not important enough for me to get someone else to monitor my mailbox for a week, I will read it when I get back. If you do implement OOTO then a template would be the best option. The template wouldn't give much information away, and would tell the sender that the mailbox is being monitored. Someone would then need to monitor the mailbox, even if it is just to ping the sender back to say that the person was away, is it urgent or can it wait. Simon. -- Simon Butler MVP: Exchange, MCSE Amset IT Solutions Ltd. e: [EMAIL PROTECTED]mailto:[EMAIL PROTECTED] w: www.amset.co.ukhttp://www.amset.co.uk w: www.amset.infohttp://www.amset.info Need cheap certificates for Exchange, compatible with Windows Mobile 5.0? http://CertificatesForExchange.com/ for certificates from just $23.99. Need a domain for your certificate? http://DomainsForExchange.net/ -Original Message- From: William Lefkovics [mailto:[EMAIL PROTECTED]mailto:[EMAIL PROTECTED]] Sent: 11 August 2008 20:29 To: MS-Exchange Admin Issues Subject: RE: OOOR? You probably got several in response to that post. Spammers don't care about OOFs. They don't nickel and dime addresses. There is sometimes juicy social engineering information within the OOF though. -Original Message- From: Jim Dandy [mailto:[EMAIL PROTECTED]mailto:[EMAIL
Re: OOOR?
1) A quick driveby will tell me a lot. I'll bet you have some stereo/video equipment, and maybe some computers, too. If I'm desparate enough, I can pawn or sell for cheap anything I find. 2) If your house is too difficult, all I've done is waste a few minutes driving time. Next target, please. Kurt On Fri, Aug 15, 2008 at 1:44 PM, Eric Woodford [EMAIL PROTECTED] wrote: OK, you know where I live. Still what's the point? Unless my home is in some nice zip code, why are you going to take the risk that I actually have something of value? I'll tell you know, except for a truck load of well loved baby toys and a sofa that's been snotted on, you're burglary attempt would be a bust. Or maybe the two large dogs, and alarm system will foil you after the long drive to my house. On Fri, Aug 15, 2008 at 11:10 AM, Kurt Buff [EMAIL PROTECTED] wrote: If you are foolish enough to let folks know you won't be at home, and someone is of a mind to do this, you're screwed. The reason is, the OoO messages are only in response to an email someone sent you. That means they already have your name and the company you work for. If they don't already have your home address, a minor amount of social engineering at your workplace, or even a bit of googling, will reveal where you live. Kurt On Fri, Aug 15, 2008 at 10:25 AM, Eric Woodford [EMAIL PROTECTED] wrote: My point was even if you did say I am traveling to the North Pole for a month. What's to say I'd be able to find your house to sell all your furniture and worldly treasures. Last count, there are at least 9 people with my same name. On Fri, Aug 15, 2008 at 9:07 AM, Don Andrews [EMAIL PROTECTED] wrote: Agreed – not being in the office actually increases the chances of my being at home – no access to email simply says, don't even try to bother me. Now, on the other hand, if it said something really stupid like, I'll be out of (town|state|country) for a week, that would be different. From: Sobey, Richard A [mailto:[EMAIL PROTECTED] Sent: Friday, August 15, 2008 8:14 AM To: MS-Exchange Admin Issues Subject: RE: OOOR? Arrg! This tired old debate. What does not being at work have to do with not being at home?! From: Eric Woodford [mailto:[EMAIL PROTECTED] Sent: 14 August 2008 18:16 To: MS-Exchange Admin Issues Subject: Re: OOOR? Your OOTO says I will be out of the office between Monday and Friday with no access to email. That really says My house will be empty, please come and help yourself. Interesting concept, terribly difficult to implement. Unless I know you personally and have visited your house, finding your specific address, traveling there (especially being that you're across an ocean from me), breaking in and then hoping you have something of value worth the entire endeavor (all before you get back from vacation). That's all assuming you don't put your home address and keys under the mat in your signature. On Mon, Aug 11, 2008 at 12:38 PM, Simon Butler [EMAIL PROTECTED] wrote: If you do allow OOTO to the Internet then watch your queues. As spam is spoofed the OOTOs will stack up. However the social engineering and personal security issue is very important. Your OOTO says I will be out of the office between Monday and Friday with no access to email. That really says My house will be empty, please come and help yourself. The way that I usually counter the OOTO to the internet request is quite simple. How does it look to business partners, either potential or current? To use the example above, what that could be interpreted to say is Your custom is not important enough for me to get someone else to monitor my mailbox for a week, I will read it when I get back. If you do implement OOTO then a template would be the best option. The template wouldn't give much information away, and would tell the sender that the mailbox is being monitored. Someone would then need to monitor the mailbox, even if it is just to ping the sender back to say that the person was away, is it urgent or can it wait. Simon. -- Simon Butler MVP: Exchange, MCSE Amset IT Solutions Ltd. e: [EMAIL PROTECTED] w: www.amset.co.uk w: www.amset.info Need cheap certificates for Exchange, compatible with Windows Mobile 5.0? http://CertificatesForExchange.com/ for certificates from just $23.99. Need a domain for your certificate? http://DomainsForExchange.net/ -Original Message- From: William Lefkovics [mailto:[EMAIL PROTECTED] Sent: 11 August 2008 20:29 To: MS-Exchange Admin Issues Subject: RE: OOOR? You probably got several in response to that post. Spammers don't care about OOFs. They don't nickel and dime addresses. There is sometimes juicy social engineering information within the OOF though
RE: OOOR?
The material things sought are: - Billing statements for credit cards - Utility bill information - Cell phone records The new credit cards opened under your name will more than make up for the 'bust'. But really, just because one person is away does not mean the house is empty. It takes effort to engineer that information as well. The remaining people may have robbed Espinola of his firearms. From: Eric Woodford [mailto:[EMAIL PROTECTED] Sent: Friday, August 15, 2008 1:44 PM To: MS-Exchange Admin Issues Subject: Re: OOOR? OK, you know where I live. Still what's the point? Unless my home is in some nice zip code, why are you going to take the risk that I actually have something of value? I'll tell you know, except for a truck load of well loved baby toys and a sofa that's been snotted on, you're burglary attempt would be a bust. Or maybe the two large dogs, and alarm system will foil you after the long drive to my house. On Fri, Aug 15, 2008 at 11:10 AM, Kurt Buff [EMAIL PROTECTED] wrote: If you are foolish enough to let folks know you won't be at home, and someone is of a mind to do this, you're screwed. The reason is, the OoO messages are only in response to an email someone sent you. That means they already have your name and the company you work for. If they don't already have your home address, a minor amount of social engineering at your workplace, or even a bit of googling, will reveal where you live. Kurt On Fri, Aug 15, 2008 at 10:25 AM, Eric Woodford [EMAIL PROTECTED] wrote: My point was even if you did say I am traveling to the North Pole for a month. What's to say I'd be able to find your house to sell all your furniture and worldly treasures. Last count, there are at least 9 people with my same name. On Fri, Aug 15, 2008 at 9:07 AM, Don Andrews [EMAIL PROTECTED] wrote: Agreed - not being in the office actually increases the chances of my being at home - no access to email simply says, don't even try to bother me. Now, on the other hand, if it said something really stupid like, I'll be out of (town|state|country) for a week, that would be different. From: Sobey, Richard A [mailto:[EMAIL PROTECTED] Sent: Friday, August 15, 2008 8:14 AM To: MS-Exchange Admin Issues Subject: RE: OOOR? Arrg! This tired old debate. What does not being at work have to do with not being at home?! From: Eric Woodford [mailto:[EMAIL PROTECTED] Sent: 14 August 2008 18:16 To: MS-Exchange Admin Issues Subject: Re: OOOR? ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja~
RE: OOOR?
Dave, Just remember no more yellow ones, I've still got some left over from last Christmas... From: David Lum [EMAIL PROTECTED] Sent: Friday, August 15, 2008 4:50 PM To: MS-Exchange Admin Issues Subject: RE: OOOR? SWEET! Baby toys! NOW I know where to go…..X-mas gifts for Shookster… Dave From: Eric Woodford [mailto:[EMAIL PROTECTED] Sent: Friday, August 15, 2008 1:44 PM To: MS-Exchange Admin Issues Subject: Re: OOOR? OK, you know where I live. Still what's the point? Unless my home is in some nice zip code, why are you going to take the risk that I actually have something of value? I'll tell you know, except for a truck load of well loved baby toys and a sofa that's been snotted on, you're burglary attempt would be a bust. Or maybe the two large dogs, and alarm system will foil you after the long drive to my house. On Fri, Aug 15, 2008 at 11:10 AM, Kurt Buff [EMAIL PROTECTED]mailto:[EMAIL PROTECTED] wrote: If you are foolish enough to let folks know you won't be at home, and someone is of a mind to do this, you're screwed. The reason is, the OoO messages are only in response to an email someone sent you. That means they already have your name and the company you work for. If they don't already have your home address, a minor amount of social engineering at your workplace, or even a bit of googling, will reveal where you live. Kurt On Fri, Aug 15, 2008 at 10:25 AM, Eric Woodford [EMAIL PROTECTED]mailto:[EMAIL PROTECTED] wrote: My point was even if you did say I am traveling to the North Pole for a month. What's to say I'd be able to find your house to sell all your furniture and worldly treasures. Last count, there are at least 9 people with my same name. On Fri, Aug 15, 2008 at 9:07 AM, Don Andrews [EMAIL PROTECTED]mailto:[EMAIL PROTECTED] wrote: Agreed – not being in the office actually increases the chances of my being at home – no access to email simply says, don't even try to bother me. Now, on the other hand, if it said something really stupid like, I'll be out of (town|state|country) for a week, that would be different. From: Sobey, Richard A [mailto:[EMAIL PROTECTED]mailto:[EMAIL PROTECTED]] Sent: Friday, August 15, 2008 8:14 AM To: MS-Exchange Admin Issues Subject: RE: OOOR? Arrg! This tired old debate. What does not being at work have to do with not being at home?! From: Eric Woodford [mailto:[EMAIL PROTECTED]mailto:[EMAIL PROTECTED]] Sent: 14 August 2008 18:16 To: MS-Exchange Admin Issues Subject: Re: OOOR? Your OOTO says I will be out of the office between Monday and Friday with no access to email. That really says My house will be empty, please come and help yourself. Interesting concept, terribly difficult to implement. Unless I know you personally and have visited your house, finding your specific address, traveling there (especially being that you're across an ocean from me), breaking in and then hoping you have something of value worth the entire endeavor (all before you get back from vacation). That's all assuming you don't put your home address and keys under the mat in your signature. On Mon, Aug 11, 2008 at 12:38 PM, Simon Butler [EMAIL PROTECTED]mailto:[EMAIL PROTECTED] wrote: If you do allow OOTO to the Internet then watch your queues. As spam is spoofed the OOTOs will stack up. However the social engineering and personal security issue is very important. Your OOTO says I will be out of the office between Monday and Friday with no access to email. That really says My house will be empty, please come and help yourself. The way that I usually counter the OOTO to the internet request is quite simple. How does it look to business partners, either potential or current? To use the example above, what that could be interpreted to say is Your custom is not important enough for me to get someone else to monitor my mailbox for a week, I will read it when I get back. If you do implement OOTO then a template would be the best option. The template wouldn't give much information away, and would tell the sender that the mailbox is being monitored. Someone would then need to monitor the mailbox, even if it is just to ping the sender back to say that the person was away, is it urgent or can it wait. Simon. -- Simon Butler MVP: Exchange, MCSE Amset IT Solutions Ltd. e: [EMAIL PROTECTED]mailto:[EMAIL PROTECTED] w: www.amset.co.ukhttp://www.amset.co.uk w: www.amset.infohttp://www.amset.info Need cheap certificates for Exchange, compatible with Windows Mobile 5.0? http://CertificatesForExchange.com/ for certificates from just $23.99. Need a domain for your certificate? http://DomainsForExchange.net/ -Original Message- From: William Lefkovics [mailto:[EMAIL PROTECTED]mailto:[EMAIL PROTECTED]] Sent: 11 August 2008 20:29 To: MS-Exchange Admin Issues Subject: RE: OOOR? You probably got several in response
RE: OOOR?
Same here. We allow OoO. Guhan Kumar Liberty Bank [EMAIL PROTECTED] mailto:[EMAIL PROTECTED] From: Roger Wright [mailto:[EMAIL PROTECTED] Sent: Monday, August 11, 2008 13:41 To: MS-Exchange Admin Issues Subject: RE: OOOR? Against my advice as well, we also allow OoO to the internet. Roger Wright Network Administrator Evatone, Inc. 727.572.7076 x388 _ From: Sherry Abercrombie [mailto:[EMAIL PROTECTED] Sent: Monday, August 11, 2008 1:17 PM To: MS-Exchange Admin Issues Subject: Re: OOOR? It's allowed at my organization, against my advice, but you do what management tells you to do. Bad idea primarily for spam reasons, however, users are ID10T's and put way too much information in their OOO's, I had one young lady (single and very young, not even 20) put her personal cell phone number in her OOO, not a very good idea. When I use an OOO (just did last week for vacation) the only info I put in it is date range of when I'll be out, when I'll be back in the office. On Mon, Aug 11, 2008 at 12:07 PM, Jim Dandy [EMAIL PROTECTED] wrote: I'm curious if others are allowing out of office replies to the internet? I've heard it's a bad idea because spammers use it to harvest valid addresses. Thanks for your comments. Curt ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja~ -- Sherry Abercrombie Any sufficiently advanced technology is indistinguishable from magic. Arthur C. Clarke ** Unless you have received this email through the Liberty Bank secure email system, before you respond, please consider that any unencrypted e-mail that is sent to us is not secure. If you send regular e-mail to Liberty Bank, please do not include any private or confidential information such as social security numbers, unlisted telephone numbers, bank account numbers, personal income information, user names, passwords, etc. If you need to provide us with such information, please telephone us at (888)570-0773 during business hours or write to us at 315 Main St. Middletown, CT 06457. The information transmitted is intended only for the person or entity to which it is addressed and may contain confidential and/or privileged material. If you are not the intended recipient of this message you are hereby notified that any use, review, retransmission, dissemination, distribution, reproduction or any action taken in reliance upon this message is prohibited and may be unlawful. If you received this in error, please contact the sender and delete the material from any computer without disclosing it. Any views expressed in this message are those of the individual sender and may not necessarily reflect the views of the Bank. Thank you. ** ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja~
Re: OOOR?
Your OOTO says I will be out of the office between Monday and Friday with no access to email. That really says My house will be empty, please come and help yourself. Interesting concept, terribly difficult to implement. Unless I know you personally and have visited your house, finding your specific address, traveling there (especially being that you're across an ocean from me), breaking in and then hoping you have something of value worth the entire endeavor (all before you get back from vacation). That's all assuming you don't put your home address and keys under the mat in your signature. On Mon, Aug 11, 2008 at 12:38 PM, Simon Butler [EMAIL PROTECTED] wrote: If you do allow OOTO to the Internet then watch your queues. As spam is spoofed the OOTOs will stack up. However the social engineering and personal security issue is very important. Your OOTO says I will be out of the office between Monday and Friday with no access to email. That really says My house will be empty, please come and help yourself. The way that I usually counter the OOTO to the internet request is quite simple. How does it look to business partners, either potential or current? To use the example above, what that could be interpreted to say is Your custom is not important enough for me to get someone else to monitor my mailbox for a week, I will read it when I get back. If you do implement OOTO then a template would be the best option. The template wouldn't give much information away, and would tell the sender that the mailbox is being monitored. Someone would then need to monitor the mailbox, even if it is just to ping the sender back to say that the person was away, is it urgent or can it wait. Simon. -- Simon Butler MVP: Exchange, MCSE Amset IT Solutions Ltd. e: [EMAIL PROTECTED] w: www.amset.co.uk w: www.amset.info Need cheap certificates for Exchange, compatible with Windows Mobile 5.0? http://CertificatesForExchange.com/ for certificates from just $23.99. Need a domain for your certificate? http://DomainsForExchange.net/ -Original Message- From: William Lefkovics [mailto:[EMAIL PROTECTED] Sent: 11 August 2008 20:29 To: MS-Exchange Admin Issues Subject: RE: OOOR? You probably got several in response to that post. Spammers don't care about OOFs. They don't nickel and dime addresses. There is sometimes juicy social engineering information within the OOF though. -Original Message- From: Jim Dandy [mailto:[EMAIL PROTECTED] Sent: Monday, August 11, 2008 10:08 AM To: MS-Exchange Admin Issues Subject: OOOR? I'm curious if others are allowing out of office replies to the internet? I've heard it's a bad idea because spammers use it to harvest valid addresses. Thanks for your comments. Curt ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja~ ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja~ ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja~ ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja~
Re: OOOR?
Lots of home/personal theft is done by people that know you first hand (directly) or second-hand (overheard from someone that knows you directly). On Thu, Aug 14, 2008 at 1:16 PM, Eric Woodford [EMAIL PROTECTED] wrote: Your OOTO says I will be out of the office between Monday and Friday with no access to email. That really says My house will be empty, please come and help yourself. Interesting concept, terribly difficult to implement. Unless I know you personally and have visited your house, finding your specific address, traveling there (especially being that you're across an ocean from me), breaking in and then hoping you have something of value worth the entire endeavor (all before you get back from vacation). That's all assuming you don't put your home address and keys under the mat in your signature. On Mon, Aug 11, 2008 at 12:38 PM, Simon Butler [EMAIL PROTECTED] wrote: If you do allow OOTO to the Internet then watch your queues. As spam is spoofed the OOTOs will stack up. However the social engineering and personal security issue is very important. Your OOTO says I will be out of the office between Monday and Friday with no access to email. That really says My house will be empty, please come and help yourself. The way that I usually counter the OOTO to the internet request is quite simple. How does it look to business partners, either potential or current? To use the example above, what that could be interpreted to say is Your custom is not important enough for me to get someone else to monitor my mailbox for a week, I will read it when I get back. If you do implement OOTO then a template would be the best option. The template wouldn't give much information away, and would tell the sender that the mailbox is being monitored. Someone would then need to monitor the mailbox, even if it is just to ping the sender back to say that the person was away, is it urgent or can it wait. Simon. -- Simon Butler MVP: Exchange, MCSE Amset IT Solutions Ltd. e: [EMAIL PROTECTED] w: www.amset.co.uk w: www.amset.info Need cheap certificates for Exchange, compatible with Windows Mobile 5.0? http://CertificatesForExchange.com/ for certificates from just $23.99. Need a domain for your certificate? http://DomainsForExchange.net/ -Original Message- From: William Lefkovics [mailto:[EMAIL PROTECTED] Sent: 11 August 2008 20:29 To: MS-Exchange Admin Issues Subject: RE: OOOR? You probably got several in response to that post. Spammers don't care about OOFs. They don't nickel and dime addresses. There is sometimes juicy social engineering information within the OOF though. -Original Message- From: Jim Dandy [mailto:[EMAIL PROTECTED] Sent: Monday, August 11, 2008 10:08 AM To: MS-Exchange Admin Issues Subject: OOOR? I'm curious if others are allowing out of office replies to the internet? I've heard it's a bad idea because spammers use it to harvest valid addresses. Thanks for your comments. Curt ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja~ ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja~ ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja~ -- ME2 ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja~
RE: OOOR?
And 80% of deaths happen within 10 miles of home, so I moved away. -Original Message- From: Micheal Espinola Jr [mailto:[EMAIL PROTECTED] Sent: Thursday, August 14, 2008 10:27 AM To: MS-Exchange Admin Issues Subject: Re: OOOR? Lots of home/personal theft is done by people that know you first hand (directly) or second-hand (overheard from someone that knows you directly). On Thu, Aug 14, 2008 at 1:16 PM, Eric Woodford [EMAIL PROTECTED] wrote: Your OOTO says I will be out of the office between Monday and Friday with no access to email. That really says My house will be empty, please come and help yourself. Interesting concept, terribly difficult to implement. Unless I know you personally and have visited your house, finding your specific address, traveling there (especially being that you're across an ocean from me), breaking in and then hoping you have something of value worth the entire endeavor (all before you get back from vacation). That's all assuming you don't put your home address and keys under the mat in your signature. On Mon, Aug 11, 2008 at 12:38 PM, Simon Butler [EMAIL PROTECTED] wrote: If you do allow OOTO to the Internet then watch your queues. As spam is spoofed the OOTOs will stack up. However the social engineering and personal security issue is very important. Your OOTO says I will be out of the office between Monday and Friday with no access to email. That really says My house will be empty, please come and help yourself. The way that I usually counter the OOTO to the internet request is quite simple. How does it look to business partners, either potential or current? To use the example above, what that could be interpreted to say is Your custom is not important enough for me to get someone else to monitor my mailbox for a week, I will read it when I get back. If you do implement OOTO then a template would be the best option. The template wouldn't give much information away, and would tell the sender that the mailbox is being monitored. Someone would then need to monitor the mailbox, even if it is just to ping the sender back to say that the person was away, is it urgent or can it wait. Simon. ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja~
Re: OOOR?
Exactly. It's not spammers that have no idea who you are or where you live. Hey Bill, had a great vacation, but my home was broken into while... wait, isn't that my stereo?? and my LCD? On Thu, Aug 14, 2008 at 10:27 AM, Micheal Espinola Jr [EMAIL PROTECTED] wrote: Lots of home/personal theft is done by people that know you first hand (directly) or second-hand (overheard from someone that knows you directly). On Thu, Aug 14, 2008 at 1:16 PM, Eric Woodford [EMAIL PROTECTED] wrote: Your OOTO says I will be out of the office between Monday and Friday with no access to email. That really says My house will be empty, please come and help yourself. Interesting concept, terribly difficult to implement. Unless I know you personally and have visited your house, finding your specific address, traveling there (especially being that you're across an ocean from me), breaking in and then hoping you have something of value worth the entire endeavor (all before you get back from vacation). That's all assuming you don't put your home address and keys under the mat in your signature. On Mon, Aug 11, 2008 at 12:38 PM, Simon Butler [EMAIL PROTECTED] wrote: If you do allow OOTO to the Internet then watch your queues. As spam is spoofed the OOTOs will stack up. However the social engineering and personal security issue is very important. Your OOTO says I will be out of the office between Monday and Friday with no access to email. That really says My house will be empty, please come and help yourself. The way that I usually counter the OOTO to the internet request is quite simple. How does it look to business partners, either potential or current? To use the example above, what that could be interpreted to say is Your custom is not important enough for me to get someone else to monitor my mailbox for a week, I will read it when I get back. If you do implement OOTO then a template would be the best option. The template wouldn't give much information away, and would tell the sender that the mailbox is being monitored. Someone would then need to monitor the mailbox, even if it is just to ping the sender back to say that the person was away, is it urgent or can it wait. Simon. -- Simon Butler MVP: Exchange, MCSE Amset IT Solutions Ltd. e: [EMAIL PROTECTED] w: www.amset.co.uk w: www.amset.info Need cheap certificates for Exchange, compatible with Windows Mobile 5.0? http://CertificatesForExchange.com/ for certificates from just $23.99. Need a domain for your certificate? http://DomainsForExchange.net/ -Original Message- From: William Lefkovics [mailto:[EMAIL PROTECTED] Sent: 11 August 2008 20:29 To: MS-Exchange Admin Issues Subject: RE: OOOR? You probably got several in response to that post. Spammers don't care about OOFs. They don't nickel and dime addresses. There is sometimes juicy social engineering information within the OOF though. -Original Message- From: Jim Dandy [mailto:[EMAIL PROTECTED] Sent: Monday, August 11, 2008 10:08 AM To: MS-Exchange Admin Issues Subject: OOOR? I'm curious if others are allowing out of office replies to the internet? I've heard it's a bad idea because spammers use it to harvest valid addresses. Thanks for your comments. Curt ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja~ ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja~ ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja~ -- ME2 ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja~ ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja~
RE: OOOR?
LOL -Original Message- From: William Lefkovics [mailto:[EMAIL PROTECTED] Sent: Thursday, August 14, 2008 11:05 AM To: MS-Exchange Admin Issues Subject: RE: OOOR? And 80% of deaths happen within 10 miles of home, so I moved away. -Original Message- From: Micheal Espinola Jr [mailto:[EMAIL PROTECTED] Sent: Thursday, August 14, 2008 10:27 AM To: MS-Exchange Admin Issues Subject: Re: OOOR? Lots of home/personal theft is done by people that know you first hand (directly) or second-hand (overheard from someone that knows you directly). On Thu, Aug 14, 2008 at 1:16 PM, Eric Woodford [EMAIL PROTECTED] wrote: Your OOTO says I will be out of the office between Monday and Friday with no access to email. That really says My house will be empty, please come and help yourself. Interesting concept, terribly difficult to implement. Unless I know you personally and have visited your house, finding your specific address, traveling there (especially being that you're across an ocean from me), breaking in and then hoping you have something of value worth the entire endeavor (all before you get back from vacation). That's all assuming you don't put your home address and keys under the mat in your signature. On Mon, Aug 11, 2008 at 12:38 PM, Simon Butler [EMAIL PROTECTED] wrote: If you do allow OOTO to the Internet then watch your queues. As spam is spoofed the OOTOs will stack up. However the social engineering and personal security issue is very important. Your OOTO says I will be out of the office between Monday and Friday with no access to email. That really says My house will be empty, please come and help yourself. The way that I usually counter the OOTO to the internet request is quite simple. How does it look to business partners, either potential or current? To use the example above, what that could be interpreted to say is Your custom is not important enough for me to get someone else to monitor my mailbox for a week, I will read it when I get back. If you do implement OOTO then a template would be the best option. The template wouldn't give much information away, and would tell the sender that the mailbox is being monitored. Someone would then need to monitor the mailbox, even if it is just to ping the sender back to say that the person was away, is it urgent or can it wait. Simon. ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja~ ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja~
Re: OOOR?
FWIW: Perhaps it just depends on where you live, as I've seen it personally multiple times growing up in the big city - i.e., its been attempted against me multiple times until I moved. Never mind the statistics, etc. So yea, moving is a great idea. ;-) The upcoming generations' need to constantly post their current status (re: facebook, etc), is going to incur a huge backlash as they get older. Social Engineering seems to only get easier. Stupidity is the new commodity. On Thu, Aug 14, 2008 at 2:05 PM, William Lefkovics [EMAIL PROTECTED] wrote: And 80% of deaths happen within 10 miles of home, so I moved away. -Original Message- From: Micheal Espinola Jr [mailto:[EMAIL PROTECTED] Sent: Thursday, August 14, 2008 10:27 AM To: MS-Exchange Admin Issues Subject: Re: OOOR? Lots of home/personal theft is done by people that know you first hand (directly) or second-hand (overheard from someone that knows you directly). On Thu, Aug 14, 2008 at 1:16 PM, Eric Woodford [EMAIL PROTECTED] wrote: Your OOTO says I will be out of the office between Monday and Friday with no access to email. That really says My house will be empty, please come and help yourself. Interesting concept, terribly difficult to implement. Unless I know you personally and have visited your house, finding your specific address, traveling there (especially being that you're across an ocean from me), breaking in and then hoping you have something of value worth the entire endeavor (all before you get back from vacation). That's all assuming you don't put your home address and keys under the mat in your signature. On Mon, Aug 11, 2008 at 12:38 PM, Simon Butler [EMAIL PROTECTED] wrote: If you do allow OOTO to the Internet then watch your queues. As spam is spoofed the OOTOs will stack up. However the social engineering and personal security issue is very important. Your OOTO says I will be out of the office between Monday and Friday with no access to email. That really says My house will be empty, please come and help yourself. The way that I usually counter the OOTO to the internet request is quite simple. How does it look to business partners, either potential or current? To use the example above, what that could be interpreted to say is Your custom is not important enough for me to get someone else to monitor my mailbox for a week, I will read it when I get back. If you do implement OOTO then a template would be the best option. The template wouldn't give much information away, and would tell the sender that the mailbox is being monitored. Someone would then need to monitor the mailbox, even if it is just to ping the sender back to say that the person was away, is it urgent or can it wait. Simon. ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja~ -- ME2 ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja~
RE: OOOR?
Really??? Attempted as a result of a business OOO? - amazing - wonder how they made the connection. 'course when I was growing up, all this email stuff (and most computers) was way future technology. I'd have to agree about social engineering and stupidity - but then I've never overcome my attraction for mantraps. -Original Message- From: Micheal Espinola Jr [mailto:[EMAIL PROTECTED] Sent: Thursday, August 14, 2008 11:26 AM To: MS-Exchange Admin Issues Subject: Re: OOOR? FWIW: Perhaps it just depends on where you live, as I've seen it personally multiple times growing up in the big city - i.e., its been attempted against me multiple times until I moved. Never mind the statistics, etc. So yea, moving is a great idea. ;-) The upcoming generations' need to constantly post their current status (re: facebook, etc), is going to incur a huge backlash as they get older. Social Engineering seems to only get easier. Stupidity is the new commodity. On Thu, Aug 14, 2008 at 2:05 PM, William Lefkovics [EMAIL PROTECTED] wrote: And 80% of deaths happen within 10 miles of home, so I moved away. -Original Message- From: Micheal Espinola Jr [mailto:[EMAIL PROTECTED] Sent: Thursday, August 14, 2008 10:27 AM To: MS-Exchange Admin Issues Subject: Re: OOOR? Lots of home/personal theft is done by people that know you first hand (directly) or second-hand (overheard from someone that knows you directly). On Thu, Aug 14, 2008 at 1:16 PM, Eric Woodford [EMAIL PROTECTED] wrote: Your OOTO says I will be out of the office between Monday and Friday with no access to email. That really says My house will be empty, please come and help yourself. Interesting concept, terribly difficult to implement. Unless I know you personally and have visited your house, finding your specific address, traveling there (especially being that you're across an ocean from me), breaking in and then hoping you have something of value worth the entire endeavor (all before you get back from vacation). That's all assuming you don't put your home address and keys under the mat in your signature. On Mon, Aug 11, 2008 at 12:38 PM, Simon Butler [EMAIL PROTECTED] wrote: If you do allow OOTO to the Internet then watch your queues. As spam is spoofed the OOTOs will stack up. However the social engineering and personal security issue is very important. Your OOTO says I will be out of the office between Monday and Friday with no access to email. That really says My house will be empty, please come and help yourself. The way that I usually counter the OOTO to the internet request is quite simple. How does it look to business partners, either potential or current? To use the example above, what that could be interpreted to say is Your custom is not important enough for me to get someone else to monitor my mailbox for a week, I will read it when I get back. If you do implement OOTO then a template would be the best option. The template wouldn't give much information away, and would tell the sender that the mailbox is being monitored. Someone would then need to monitor the mailbox, even if it is just to ping the sender back to say that the person was away, is it urgent or can it wait. Simon. ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja~ -- ME2 ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja~ ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja~
Re: OOOR?
Directly of an OOO? No. People finding out I wasn't home and knew I had cool stuff? Yes - including the audacity to try to steal a motocross bike stored in my basement. Its just a good thing that security is tght But OOO, people blabbing in misc. company, etc - Its really all the same: Bad people are everywhere, and will try to take advantage of a situation based on the information they have. On Thu, Aug 14, 2008 at 3:07 PM, Don Andrews [EMAIL PROTECTED] wrote: Really??? Attempted as a result of a business OOO? - amazing - wonder how they made the connection. 'course when I was growing up, all this email stuff (and most computers) was way future technology. I'd have to agree about social engineering and stupidity - but then I've never overcome my attraction for mantraps. -Original Message- From: Micheal Espinola Jr [mailto:[EMAIL PROTECTED] Sent: Thursday, August 14, 2008 11:26 AM To: MS-Exchange Admin Issues Subject: Re: OOOR? FWIW: Perhaps it just depends on where you live, as I've seen it personally multiple times growing up in the big city - i.e., its been attempted against me multiple times until I moved. Never mind the statistics, etc. So yea, moving is a great idea. ;-) The upcoming generations' need to constantly post their current status (re: facebook, etc), is going to incur a huge backlash as they get older. Social Engineering seems to only get easier. Stupidity is the new commodity. On Thu, Aug 14, 2008 at 2:05 PM, William Lefkovics [EMAIL PROTECTED] wrote: And 80% of deaths happen within 10 miles of home, so I moved away. -Original Message- From: Micheal Espinola Jr [mailto:[EMAIL PROTECTED] Sent: Thursday, August 14, 2008 10:27 AM To: MS-Exchange Admin Issues Subject: Re: OOOR? Lots of home/personal theft is done by people that know you first hand (directly) or second-hand (overheard from someone that knows you directly). On Thu, Aug 14, 2008 at 1:16 PM, Eric Woodford [EMAIL PROTECTED] wrote: Your OOTO says I will be out of the office between Monday and Friday with no access to email. That really says My house will be empty, please come and help yourself. Interesting concept, terribly difficult to implement. Unless I know you personally and have visited your house, finding your specific address, traveling there (especially being that you're across an ocean from me), breaking in and then hoping you have something of value worth the entire endeavor (all before you get back from vacation). That's all assuming you don't put your home address and keys under the mat in your signature. On Mon, Aug 11, 2008 at 12:38 PM, Simon Butler [EMAIL PROTECTED] wrote: If you do allow OOTO to the Internet then watch your queues. As spam is spoofed the OOTOs will stack up. However the social engineering and personal security issue is very important. Your OOTO says I will be out of the office between Monday and Friday with no access to email. That really says My house will be empty, please come and help yourself. The way that I usually counter the OOTO to the internet request is quite simple. How does it look to business partners, either potential or current? To use the example above, what that could be interpreted to say is Your custom is not important enough for me to get someone else to monitor my mailbox for a week, I will read it when I get back. If you do implement OOTO then a template would be the best option. The template wouldn't give much information away, and would tell the sender that the mailbox is being monitored. Someone would then need to monitor the mailbox, even if it is just to ping the sender back to say that the person was away, is it urgent or can it wait. Simon. ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja~ -- ME2 ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja~ ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja~ -- ME2 ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja~
RE: OOOR?
True 'nuff. -Original Message- From: Micheal Espinola Jr [mailto:[EMAIL PROTECTED] Sent: Thursday, August 14, 2008 12:16 PM To: MS-Exchange Admin Issues Subject: Re: OOOR? Directly of an OOO? No. People finding out I wasn't home and knew I had cool stuff? Yes - including the audacity to try to steal a motocross bike stored in my basement. Its just a good thing that security is tght But OOO, people blabbing in misc. company, etc - Its really all the same: Bad people are everywhere, and will try to take advantage of a situation based on the information they have. On Thu, Aug 14, 2008 at 3:07 PM, Don Andrews [EMAIL PROTECTED] wrote: Really??? Attempted as a result of a business OOO? - amazing - wonder how they made the connection. 'course when I was growing up, all this email stuff (and most computers) was way future technology. I'd have to agree about social engineering and stupidity - but then I've never overcome my attraction for mantraps. -Original Message- From: Micheal Espinola Jr [mailto:[EMAIL PROTECTED] Sent: Thursday, August 14, 2008 11:26 AM To: MS-Exchange Admin Issues Subject: Re: OOOR? FWIW: Perhaps it just depends on where you live, as I've seen it personally multiple times growing up in the big city - i.e., its been attempted against me multiple times until I moved. Never mind the statistics, etc. So yea, moving is a great idea. ;-) The upcoming generations' need to constantly post their current status (re: facebook, etc), is going to incur a huge backlash as they get older. Social Engineering seems to only get easier. Stupidity is the new commodity. On Thu, Aug 14, 2008 at 2:05 PM, William Lefkovics [EMAIL PROTECTED] wrote: And 80% of deaths happen within 10 miles of home, so I moved away. -Original Message- From: Micheal Espinola Jr [mailto:[EMAIL PROTECTED] Sent: Thursday, August 14, 2008 10:27 AM To: MS-Exchange Admin Issues Subject: Re: OOOR? Lots of home/personal theft is done by people that know you first hand (directly) or second-hand (overheard from someone that knows you directly). On Thu, Aug 14, 2008 at 1:16 PM, Eric Woodford [EMAIL PROTECTED] wrote: Your OOTO says I will be out of the office between Monday and Friday with no access to email. That really says My house will be empty, please come and help yourself. Interesting concept, terribly difficult to implement. Unless I know you personally and have visited your house, finding your specific address, traveling there (especially being that you're across an ocean from me), breaking in and then hoping you have something of value worth the entire endeavor (all before you get back from vacation). That's all assuming you don't put your home address and keys under the mat in your signature. On Mon, Aug 11, 2008 at 12:38 PM, Simon Butler [EMAIL PROTECTED] wrote: If you do allow OOTO to the Internet then watch your queues. As spam is spoofed the OOTOs will stack up. However the social engineering and personal security issue is very important. Your OOTO says I will be out of the office between Monday and Friday with no access to email. That really says My house will be empty, please come and help yourself. The way that I usually counter the OOTO to the internet request is quite simple. How does it look to business partners, either potential or current? To use the example above, what that could be interpreted to say is Your custom is not important enough for me to get someone else to monitor my mailbox for a week, I will read it when I get back. If you do implement OOTO then a template would be the best option. The template wouldn't give much information away, and would tell the sender that the mailbox is being monitored. Someone would then need to monitor the mailbox, even if it is just to ping the sender back to say that the person was away, is it urgent or can it wait. Simon. ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja~ -- ME2 ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja~ ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja~ -- ME2 ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja~ ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja~
RE: OOOR?
They will certainly be all a'twitter when Guido shows up at their door. I have multiple personas online. Amazingly, at least one of them is studider than the one you are reading now. -Original Message- From: Micheal Espinola Jr [mailto:[EMAIL PROTECTED] Sent: Thursday, August 14, 2008 11:26 AM To: MS-Exchange Admin Issues Subject: Re: OOOR? FWIW: Perhaps it just depends on where you live, as I've seen it personally multiple times growing up in the big city - i.e., its been attempted against me multiple times until I moved. Never mind the statistics, etc. So yea, moving is a great idea. ;-) The upcoming generations' need to constantly post their current status (re: facebook, etc), is going to incur a huge backlash as they get older. Social Engineering seems to only get easier. Stupidity is the new commodity. On Thu, Aug 14, 2008 at 2:05 PM, William Lefkovics [EMAIL PROTECTED] wrote: And 80% of deaths happen within 10 miles of home, so I moved away. -Original Message- From: Micheal Espinola Jr [mailto:[EMAIL PROTECTED] Sent: Thursday, August 14, 2008 10:27 AM To: MS-Exchange Admin Issues Subject: Re: OOOR? ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja~
Re: OOOR?
It's allowed at my organization, against my advice, but you do what management tells you to do. Bad idea primarily for spam reasons, however, users are ID10T's and put way too much information in their OOO's, I had one young lady (single and very young, not even 20) put her personal cell phone number in her OOO, not a very good idea. When I use an OOO (just did last week for vacation) the only info I put in it is date range of when I'll be out, when I'll be back in the office. On Mon, Aug 11, 2008 at 12:07 PM, Jim Dandy [EMAIL PROTECTED]wrote: I'm curious if others are allowing out of office replies to the internet? I've heard it's a bad idea because spammers use it to harvest valid addresses. Thanks for your comments. Curt ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja~ -- Sherry Abercrombie Any sufficiently advanced technology is indistinguishable from magic. Arthur C. Clarke ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja~
Re: OOOR?
And I'm sure that you can tell by now that there are some on this list that allow out of office replies to the internet by the number of them that you've received. On Mon, Aug 11, 2008 at 12:17 PM, Sherry Abercrombie [EMAIL PROTECTED]wrote: It's allowed at my organization, against my advice, but you do what management tells you to do. Bad idea primarily for spam reasons, however, users are ID10T's and put way too much information in their OOO's, I had one young lady (single and very young, not even 20) put her personal cell phone number in her OOO, not a very good idea. When I use an OOO (just did last week for vacation) the only info I put in it is date range of when I'll be out, when I'll be back in the office. On Mon, Aug 11, 2008 at 12:07 PM, Jim Dandy [EMAIL PROTECTED]wrote: I'm curious if others are allowing out of office replies to the internet? I've heard it's a bad idea because spammers use it to harvest valid addresses. Thanks for your comments. Curt ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja~ -- Sherry Abercrombie Any sufficiently advanced technology is indistinguishable from magic. Arthur C. Clarke -- Sherry Abercrombie Any sufficiently advanced technology is indistinguishable from magic. Arthur C. Clarke ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja~
RE: OOOR?
Against my advice as well, we also allow OoO to the internet. Roger Wright Network Administrator Evatone, Inc. 727.572.7076 x388 _ From: Sherry Abercrombie [mailto:[EMAIL PROTECTED] Sent: Monday, August 11, 2008 1:17 PM To: MS-Exchange Admin Issues Subject: Re: OOOR? It's allowed at my organization, against my advice, but you do what management tells you to do. Bad idea primarily for spam reasons, however, users are ID10T's and put way too much information in their OOO's, I had one young lady (single and very young, not even 20) put her personal cell phone number in her OOO, not a very good idea. When I use an OOO (just did last week for vacation) the only info I put in it is date range of when I'll be out, when I'll be back in the office. On Mon, Aug 11, 2008 at 12:07 PM, Jim Dandy [EMAIL PROTECTED] wrote: I'm curious if others are allowing out of office replies to the internet? I've heard it's a bad idea because spammers use it to harvest valid addresses. Thanks for your comments. Curt ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja~ -- Sherry Abercrombie Any sufficiently advanced technology is indistinguishable from magic. Arthur C. Clarke ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja~
RE: OOOR?
Same story here... From: Roger Wright [mailto:[EMAIL PROTECTED] Sent: Monday, August 11, 2008 1:41 PM To: MS-Exchange Admin Issues Subject: RE: OOOR? Against my advice as well, we also allow OoO to the internet. Roger Wright Network Administrator Evatone, Inc. 727.572.7076 x388 _ From: Sherry Abercrombie [mailto:[EMAIL PROTECTED] Sent: Monday, August 11, 2008 1:17 PM To: MS-Exchange Admin Issues Subject: Re: OOOR? It's allowed at my organization, against my advice, but you do what management tells you to do. Bad idea primarily for spam reasons, however, users are ID10T's and put way too much information in their OOO's, I had one young lady (single and very young, not even 20) put her personal cell phone number in her OOO, not a very good idea. When I use an OOO (just did last week for vacation) the only info I put in it is date range of when I'll be out, when I'll be back in the office. On Mon, Aug 11, 2008 at 12:07 PM, Jim Dandy [EMAIL PROTECTED] wrote: I'm curious if others are allowing out of office replies to the internet? I've heard it's a bad idea because spammers use it to harvest valid addresses. Thanks for your comments. Curt ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja~ -- Sherry Abercrombie Any sufficiently advanced technology is indistinguishable from magic. Arthur C. Clarke ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja~
RE: OOOR?
You probably got several in response to that post. Spammers don't care about OOFs. They don't nickel and dime addresses. There is sometimes juicy social engineering information within the OOF though. -Original Message- From: Jim Dandy [mailto:[EMAIL PROTECTED] Sent: Monday, August 11, 2008 10:08 AM To: MS-Exchange Admin Issues Subject: OOOR? I'm curious if others are allowing out of office replies to the internet? I've heard it's a bad idea because spammers use it to harvest valid addresses. Thanks for your comments. Curt ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja~ ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja~
RE: OOOR?
If you do allow OOTO to the Internet then watch your queues. As spam is spoofed the OOTOs will stack up. However the social engineering and personal security issue is very important. Your OOTO says I will be out of the office between Monday and Friday with no access to email. That really says My house will be empty, please come and help yourself. The way that I usually counter the OOTO to the internet request is quite simple. How does it look to business partners, either potential or current? To use the example above, what that could be interpreted to say is Your custom is not important enough for me to get someone else to monitor my mailbox for a week, I will read it when I get back. If you do implement OOTO then a template would be the best option. The template wouldn't give much information away, and would tell the sender that the mailbox is being monitored. Someone would then need to monitor the mailbox, even if it is just to ping the sender back to say that the person was away, is it urgent or can it wait. Simon. -- Simon Butler MVP: Exchange, MCSE Amset IT Solutions Ltd. e: [EMAIL PROTECTED] w: www.amset.co.uk w: www.amset.info Need cheap certificates for Exchange, compatible with Windows Mobile 5.0? http://CertificatesForExchange.com/ for certificates from just $23.99. Need a domain for your certificate? http://DomainsForExchange.net/ -Original Message- From: William Lefkovics [mailto:[EMAIL PROTECTED] Sent: 11 August 2008 20:29 To: MS-Exchange Admin Issues Subject: RE: OOOR? You probably got several in response to that post. Spammers don't care about OOFs. They don't nickel and dime addresses. There is sometimes juicy social engineering information within the OOF though. -Original Message- From: Jim Dandy [mailto:[EMAIL PROTECTED] Sent: Monday, August 11, 2008 10:08 AM To: MS-Exchange Admin Issues Subject: OOOR? I'm curious if others are allowing out of office replies to the internet? I've heard it's a bad idea because spammers use it to harvest valid addresses. Thanks for your comments. Curt ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja~ ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja~ ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja~
RE: OOOR?
Your OOTO says I will be out of the office between Monday and Friday with no access to email. That really says My house will be empty, please come and help yourself. I will be out of the office between Monday and Friday with no access to email really says I will be out of the office between Monday and Friday with no access to email. I will be mountain climbing in the Andes next week suggests that there is probably one fewer people in the house at least. The company approved OOF template is a solid idea. -Original Message- From: Simon Butler [mailto:[EMAIL PROTECTED] Sent: Monday, August 11, 2008 12:38 PM To: MS-Exchange Admin Issues Subject: RE: OOOR? If you do allow OOTO to the Internet then watch your queues. As spam is spoofed the OOTOs will stack up. However the social engineering and personal security issue is very important. Your OOTO says I will be out of the office between Monday and Friday with no access to email. That really says My house will be empty, please come and help yourself. The way that I usually counter the OOTO to the internet request is quite simple. How does it look to business partners, either potential or current? To use the example above, what that could be interpreted to say is Your custom is not important enough for me to get someone else to monitor my mailbox for a week, I will read it when I get back. If you do implement OOTO then a template would be the best option. The template wouldn't give much information away, and would tell the sender that the mailbox is being monitored. Someone would then need to monitor the mailbox, even if it is just to ping the sender back to say that the person was away, is it urgent or can it wait. Simon. -- Simon Butler MVP: Exchange, MCSE Amset IT Solutions Ltd. e: [EMAIL PROTECTED] w: www.amset.co.uk w: www.amset.info Need cheap certificates for Exchange, compatible with Windows Mobile 5.0? http://CertificatesForExchange.com/ for certificates from just $23.99. Need a domain for your certificate? http://DomainsForExchange.net/ -Original Message- From: William Lefkovics [mailto:[EMAIL PROTECTED] Sent: 11 August 2008 20:29 To: MS-Exchange Admin Issues Subject: RE: OOOR? You probably got several in response to that post. Spammers don't care about OOFs. They don't nickel and dime addresses. There is sometimes juicy social engineering information within the OOF though. -Original Message- From: Jim Dandy [mailto:[EMAIL PROTECTED] Sent: Monday, August 11, 2008 10:08 AM To: MS-Exchange Admin Issues Subject: OOOR? I'm curious if others are allowing out of office replies to the internet? I've heard it's a bad idea because spammers use it to harvest valid addresses. Thanks for your comments. Curt ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja~ ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja~ ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja~ ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja~
