[liberationtech] Large amounts of spam

[Nadim Kobeissi]

This mailing list has a spam problem (I'm receiving nude photo attachments
now.) Admins: Please address!

Thank you,
NK
--
Unsubscribe, change to digest, or change password at: 
https://mailman.stanford.edu/mailman/listinfo/liberationtech

Re: [liberationtech] Large amounts of spam

[Yosem Companys]

I've placed the list under emergency moderation, so I will have to approve
every message individually before it gets delivered.  Hopefully, this will
stop the spam.

On Tue, Oct 30, 2012 at 4:32 PM, Nadim Kobeissi  wrote:

> This mailing list has a spam problem (I'm receiving nude photo attachments
> now.) Admins: Please address!
>
> Thank you,
> NK
>
> --
> Unsubscribe, change to digest, or change password at:
> https://mailman.stanford.edu/mailman/listinfo/liberationtech
>
--
Unsubscribe, change to digest, or change password at: 
https://mailman.stanford.edu/mailman/listinfo/liberationtech

Re: [liberationtech] Large amounts of spam

[Greg Norcie]

Maybe I'm paranoid, but I wonder if this is an effort to disrupt the
list (as opposed to the usual economic incentives associated w/ spam.)
--
Greg Norcie (g...@norcie.com)
GPG key: 0x1B873635

On 10/30/12 8:09 PM, Yosem Companys wrote:
> I've placed the list under emergency moderation, so I will have to
> approve every message individually before it gets delivered.  Hopefully,
> this will stop the spam.
> 
> On Tue, Oct 30, 2012 at 4:32 PM, Nadim Kobeissi  > wrote:
> 
> This mailing list has a spam problem (I'm receiving nude photo
> attachments now.) Admins: Please address!
> 
> Thank you,
> NK
> 
> --
> Unsubscribe, change to digest, or change password at:
> https://mailman.stanford.edu/mailman/listinfo/liberationtech
> 
> 
> 
> 
> --
> Unsubscribe, change to digest, or change password at: 
> https://mailman.stanford.edu/mailman/listinfo/liberationtech
> 
--
Unsubscribe, change to digest, or change password at: 
https://mailman.stanford.edu/mailman/listinfo/liberationtech

Re: [liberationtech] Large amounts of spam

[Maxim Kammerer]

On Wed, Oct 31, 2012 at 10:14 PM, Greg Norcie  wrote:
> Maybe I'm paranoid, but I wonder if this is an effort to disrupt the
> list (as opposed to the usual economic incentives associated w/ spam.)

I didn't see any spam from the list in Google Apps, except for the two
messages from a hijacked account. Are you sure the spam comes via the
list? Or does Google Apps delete spam with malware attachments
altogether (i.e., skipping the Spam folder stage)?

-- 
Maxim Kammerer
Liberté Linux: http://dee.su/liberte
--
Unsubscribe, change to digest, or change password at: 
https://mailman.stanford.edu/mailman/listinfo/liberationtech

Re: [liberationtech] Large amounts of spam

[Andy Isaacson]

On Tue, Oct 30, 2012 at 07:32:18PM -0400, Nadim Kobeissi wrote:
> This mailing list has a spam problem (I'm receiving nude photo attachments
> now.) Admins: Please address!

Hmmm, I'm not seeing this problem; I'm subscribed to liberationtech on a
bog-standard linux + postfix installation and I save every message
delivered before I run spam filtering, and I don't see anything
porn-spam-related in my all-mail archive.

Care to share one of the spam messages (headers + body text only, I
don't need any more nude photos thnx)?  Offlist is bettter I suppose.

-andy
--
Unsubscribe, change to digest, or change password at: 
https://mailman.stanford.edu/mailman/listinfo/liberationtech

Re: [liberationtech] Large amounts of spam

[S Vivek]

Greg: This seems to be happening in other lists at Stanford, and so I won't
be worried of a concerted effort against the libtech listserv.  We are
working on it, and I hope that we'll be able to handle it soon.

Vivek


=
Program on Liberation Technology,
Stanford University
http://liberationtechnology.stanford.edu

C 149 Encina Hall
616 Serra St.
Stanford, CA 94305

Phone: 1-801-784-8357, that is 1-801-S Vivek's!

Blog: http://viveks.info



On Wed, Oct 31, 2012 at 1:34 PM, Andy Isaacson  wrote:

> On Tue, Oct 30, 2012 at 07:32:18PM -0400, Nadim Kobeissi wrote:
> > This mailing list has a spam problem (I'm receiving nude photo
> attachments
> > now.) Admins: Please address!
>
> Hmmm, I'm not seeing this problem; I'm subscribed to liberationtech on a
> bog-standard linux + postfix installation and I save every message
> delivered before I run spam filtering, and I don't see anything
> porn-spam-related in my all-mail archive.
>
> Care to share one of the spam messages (headers + body text only, I
> don't need any more nude photos thnx)?  Offlist is bettter I suppose.
>
> -andy
> --
> Unsubscribe, change to digest, or change password at:
> https://mailman.stanford.edu/mailman/listinfo/liberationtech
>
--
Unsubscribe, change to digest, or change password at: 
https://mailman.stanford.edu/mailman/listinfo/liberationtech

Re: [liberationtech] Large amounts of spam

[Sarah Watts]

I am one of the...people it got; my email address was suddenly
subscribed to more than thirty lists (Twenty maybe) none of which I
subscribed to.

I contacted someone...and have yet to do the second thing they suggested.

-S

On 10/31/12, S Vivek  wrote:
> Greg: This seems to be happening in other lists at Stanford, and so I won't
> be worried of a concerted effort against the libtech listserv.  We are
> working on it, and I hope that we'll be able to handle it soon.
>
> Vivek
>
>
> =
> Program on Liberation Technology,
> Stanford University
> http://liberationtechnology.stanford.edu
>
> C 149 Encina Hall
> 616 Serra St.
> Stanford, CA 94305
>
> Phone: 1-801-784-8357, that is 1-801-S Vivek's!
>
> Blog: http://viveks.info
>
>
>
> On Wed, Oct 31, 2012 at 1:34 PM, Andy Isaacson  wrote:
>
>> On Tue, Oct 30, 2012 at 07:32:18PM -0400, Nadim Kobeissi wrote:
>> > This mailing list has a spam problem (I'm receiving nude photo
>> attachments
>> > now.) Admins: Please address!
>>
>> Hmmm, I'm not seeing this problem; I'm subscribed to liberationtech on a
>> bog-standard linux + postfix installation and I save every message
>> delivered before I run spam filtering, and I don't see anything
>> porn-spam-related in my all-mail archive.
>>
>> Care to share one of the spam messages (headers + body text only, I
>> don't need any more nude photos thnx)?  Offlist is bettter I suppose.
>>
>> -andy
>> --
>> Unsubscribe, change to digest, or change password at:
>> https://mailman.stanford.edu/mailman/listinfo/liberationtech
>>
>
--
Unsubscribe, change to digest, or change password at: 
https://mailman.stanford.edu/mailman/listinfo/liberationtech

Re: [liberationtech] Large amounts of spam

[Andrew Lewis]

Maybe someone is simply scrapping the archives for the sender address?


On Oct 31, 2012, at 6:36 PM, Sarah Watts wrote:

> I am one of the...people it got; my email address was suddenly
> subscribed to more than thirty lists (Twenty maybe) none of which I
> subscribed to.
> 
> I contacted someone...and have yet to do the second thing they suggested.
> 
> -S
> 
> On 10/31/12, S Vivek  wrote:
>> Greg: This seems to be happening in other lists at Stanford, and so I won't
>> be worried of a concerted effort against the libtech listserv.  We are
>> working on it, and I hope that we'll be able to handle it soon.
>> 
>> Vivek
>> 
>> 
>> =
>> Program on Liberation Technology,
>> Stanford University
>> http://liberationtechnology.stanford.edu
>> 
>> C 149 Encina Hall
>> 616 Serra St.
>> Stanford, CA 94305
>> 
>> Phone: 1-801-784-8357, that is 1-801-S Vivek's!
>> 
>> Blog: http://viveks.info
>> 
>> 
>> 
>> On Wed, Oct 31, 2012 at 1:34 PM, Andy Isaacson  wrote:
>> 
>>> On Tue, Oct 30, 2012 at 07:32:18PM -0400, Nadim Kobeissi wrote:
 This mailing list has a spam problem (I'm receiving nude photo
>>> attachments
 now.) Admins: Please address!
>>> 
>>> Hmmm, I'm not seeing this problem; I'm subscribed to liberationtech on a
>>> bog-standard linux + postfix installation and I save every message
>>> delivered before I run spam filtering, and I don't see anything
>>> porn-spam-related in my all-mail archive.
>>> 
>>> Care to share one of the spam messages (headers + body text only, I
>>> don't need any more nude photos thnx)?  Offlist is bettter I suppose.
>>> 
>>> -andy
>>> --
>>> Unsubscribe, change to digest, or change password at:
>>> https://mailman.stanford.edu/mailman/listinfo/liberationtech
>>> 
>> 
> --
> Unsubscribe, change to digest, or change password at: 
> https://mailman.stanford.edu/mailman/listinfo/liberationtech

--
Unsubscribe, change to digest, or change password at: 
https://mailman.stanford.edu/mailman/listinfo/liberationtech

Re: [liberationtech] Large amounts of spam

[Yosem Companys]

Maybe. But the site was already mirrored for a while prior to the
archives being made public.  So I think that's unlikely.

On Wed, Oct 31, 2012 at 3:39 PM, Andrew Lewis  wrote:
> Maybe someone is simply scrapping the archives for the sender address?
>
>
> On Oct 31, 2012, at 6:36 PM, Sarah Watts wrote:
>
>> I am one of the...people it got; my email address was suddenly
>> subscribed to more than thirty lists (Twenty maybe) none of which I
>> subscribed to.
>>
>> I contacted someone...and have yet to do the second thing they suggested.
>>
>> -S
>>
>> On 10/31/12, S Vivek  wrote:
>>> Greg: This seems to be happening in other lists at Stanford, and so I won't
>>> be worried of a concerted effort against the libtech listserv.  We are
>>> working on it, and I hope that we'll be able to handle it soon.
>>>
>>> Vivek
>>>
>>>
>>> =
>>> Program on Liberation Technology,
>>> Stanford University
>>> http://liberationtechnology.stanford.edu
>>>
>>> C 149 Encina Hall
>>> 616 Serra St.
>>> Stanford, CA 94305
>>>
>>> Phone: 1-801-784-8357, that is 1-801-S Vivek's!
>>>
>>> Blog: http://viveks.info
>>>
>>>
>>>
>>> On Wed, Oct 31, 2012 at 1:34 PM, Andy Isaacson  wrote:
>>>
 On Tue, Oct 30, 2012 at 07:32:18PM -0400, Nadim Kobeissi wrote:
> This mailing list has a spam problem (I'm receiving nude photo
 attachments
> now.) Admins: Please address!

 Hmmm, I'm not seeing this problem; I'm subscribed to liberationtech on a
 bog-standard linux + postfix installation and I save every message
 delivered before I run spam filtering, and I don't see anything
 porn-spam-related in my all-mail archive.

 Care to share one of the spam messages (headers + body text only, I
 don't need any more nude photos thnx)?  Offlist is bettter I suppose.

 -andy
 --
 Unsubscribe, change to digest, or change password at:
 https://mailman.stanford.edu/mailman/listinfo/liberationtech

>>>
>> --
>> Unsubscribe, change to digest, or change password at: 
>> https://mailman.stanford.edu/mailman/listinfo/liberationtech
>
> --
> Unsubscribe, change to digest, or change password at: 
> https://mailman.stanford.edu/mailman/listinfo/liberationtech
--
Unsubscribe, change to digest, or change password at: 
https://mailman.stanford.edu/mailman/listinfo/liberationtech

Re: [liberationtech] Large amounts of spam

[Bernard Tyers - ei8fdb]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

At a risk of receiving the mentioned spam myself (thankfully my mail provider 
also seems to be killing the spam before it gets to me), and at risk of 
offering another evidence-less possible scenario - 

There was recently a "valid" e-mail account that was somehow used to send spam 
to the list. It's quite conceivable that account is some way connected/has 
provided the beginning point.

Or like the person from Stanford mentioned maybe the spam is targeting a number 
of Stanford lists

On 31 Oct 2012, at 22:41, Yosem Companys wrote:

> Maybe. But the site was already mirrored for a while prior to the
> archives being made public.  So I think that's unlikely.
> 
> On Wed, Oct 31, 2012 at 3:39 PM, Andrew Lewis  wrote:
>> Maybe someone is simply scrapping the archives for the sender address?
>> 
>> 
>> On Oct 31, 2012, at 6:36 PM, Sarah Watts wrote:
>> 
>>> I am one of the...people it got; my email address was suddenly
>>> subscribed to more than thirty lists (Twenty maybe) none of which I
>>> subscribed to.
>>> 
>>> I contacted someone...and have yet to do the second thing they suggested.
>>> 
>>> -S
>>> 
>>> On 10/31/12, S Vivek  wrote:
 Greg: This seems to be happening in other lists at Stanford, and so I won't
 be worried of a concerted effort against the libtech listserv.  We are
 working on it, and I hope that we'll be able to handle it soon.
 
 Vivek
 
 
 =
 Program on Liberation Technology,
 Stanford University
 http://liberationtechnology.stanford.edu
 
 C 149 Encina Hall
 616 Serra St.
 Stanford, CA 94305
 
 Phone: 1-801-784-8357, that is 1-801-S Vivek's!
 
 Blog: http://viveks.info
 
 
 
 On Wed, Oct 31, 2012 at 1:34 PM, Andy Isaacson  wrote:
 
> On Tue, Oct 30, 2012 at 07:32:18PM -0400, Nadim Kobeissi wrote:
>> This mailing list has a spam problem (I'm receiving nude photo
> attachments
>> now.) Admins: Please address!
> 
> Hmmm, I'm not seeing this problem; I'm subscribed to liberationtech on a
> bog-standard linux + postfix installation and I save every message
> delivered before I run spam filtering, and I don't see anything
> porn-spam-related in my all-mail archive.
> 
> Care to share one of the spam messages (headers + body text only, I
> don't need any more nude photos thnx)?  Offlist is bettter I suppose.
> 
> -andy
> --
> Unsubscribe, change to digest, or change password at:
> https://mailman.stanford.edu/mailman/listinfo/liberationtech
> 
 
>>> --
>>> Unsubscribe, change to digest, or change password at: 
>>> https://mailman.stanford.edu/mailman/listinfo/liberationtech
>> 
>> --
>> Unsubscribe, change to digest, or change password at: 
>> https://mailman.stanford.edu/mailman/listinfo/liberationtech
> --
> Unsubscribe, change to digest, or change password at: 
> https://mailman.stanford.edu/mailman/listinfo/liberationtech

- --
Bernard / bluboxthief / ei8fdb

IO91XM / www.ei8fdb.org

-BEGIN PGP SIGNATURE-
Version: GnuPG/MacGPG2 v2.0.17 (Darwin)
Comment: GPGTools - http://gpgtools.org

iQEcBAEBAgAGBQJQkatQAAoJENsz1IO7MIrrGmIIALgjzfbnvsd4bqRyx98UbSkc
L2t1nny6L2gMjPdsfxL/ywNr90411i87RuVXBI2Y83wBAi37M6zpgbFw3UR23tmT
u4skCXNFuW+A3exQVzEZ9IVIEawaqWFu5iDrb9qobLprelOGhf5IsDV23JbNEnsn
OO9PFJXzRpdbSOKrnu/JzAnv6yMehRpHqNlL8o3bzrdGS+hC7ghpNbGWoFKtEM6G
nIVQ5UWM/VVxZDwvw9WfTfYAgNySydub4hI8xFNx4RXVIbP7ktNZqeyWc2ZM+Yax
HoI/tZX7YXrWeYEXNuXgtYVSIJXIm7OwvUtYh9b+W1O4TdpP6RU+I9EoLABELAA=
=S7z4
-END PGP SIGNATURE-
--
Unsubscribe, change to digest, or change password at: 
https://mailman.stanford.edu/mailman/listinfo/liberationtech

Re: [liberationtech] Large amounts of spam

[Greg Norcie]

I used to do anti-phishing training for a start up.

Spammers aren't dumb.

They probably realize

1.) People in academia trust other academics
2.) People from Stanford have more disposable income than the average
mailing list recipient.

:)

--
Greg Norcie (g...@norcie.com)
GPG key: 0x1B873635

On 10/31/12 6:50 PM, Bernard Tyers - ei8fdb wrote:
> At a risk of receiving the mentioned spam myself (thankfully my
> mail provider also seems to be killing the spam before it gets to
> me), and at risk of offering another evidence-less possible
> scenario -
> 
> There was recently a "valid" e-mail account that was somehow used
> to send spam to the list. It's quite conceivable that account is
> some way connected/has provided the beginning point.
> 
> Or like the person from Stanford mentioned maybe the spam is
> targeting a number of Stanford lists
> 
> On 31 Oct 2012, at 22:41, Yosem Companys wrote:
> 
>> Maybe. But the site was already mirrored for a while prior to
>> the archives being made public.  So I think that's unlikely.
> 
>> On Wed, Oct 31, 2012 at 3:39 PM, Andrew Lewis 
>> wrote:
>>> Maybe someone is simply scrapping the archives for the sender
>>> address?
>>> 
>>> 
>>> On Oct 31, 2012, at 6:36 PM, Sarah Watts wrote:
>>> 
 I am one of the...people it got; my email address was
 suddenly subscribed to more than thirty lists (Twenty maybe)
 none of which I subscribed to.
 
 I contacted someone...and have yet to do the second thing
 they suggested.
 
 -S
 
 On 10/31/12, S Vivek  wrote:
> Greg: This seems to be happening in other lists at
> Stanford, and so I won't be worried of a concerted effort
> against the libtech listserv.  We are working on it, and I
> hope that we'll be able to handle it soon.
> 
> Vivek
> 
> 
> = Program on Liberation Technology, Stanford
> University http://liberationtechnology.stanford.edu
> 
> C 149 Encina Hall 616 Serra St. Stanford, CA 94305
> 
> Phone: 1-801-784-8357, that is 1-801-S Vivek's!
> 
> Blog: http://viveks.info
> 
> 
> 
> On Wed, Oct 31, 2012 at 1:34 PM, Andy Isaacson
>  wrote:
> 
>> On Tue, Oct 30, 2012 at 07:32:18PM -0400, Nadim Kobeissi
>> wrote:
>>> This mailing list has a spam problem (I'm receiving
>>> nude photo
>> attachments
>>> now.) Admins: Please address!
>> 
>> Hmmm, I'm not seeing this problem; I'm subscribed to
>> liberationtech on a bog-standard linux + postfix
>> installation and I save every message delivered before I
>> run spam filtering, and I don't see anything 
>> porn-spam-related in my all-mail archive.
>> 
>> Care to share one of the spam messages (headers + body
>> text only, I don't need any more nude photos thnx)?
>> Offlist is bettter I suppose.
>> 
>> -andy -- Unsubscribe, change to digest, or change
>> password at: 
>> https://mailman.stanford.edu/mailman/listinfo/liberationtech
>>
>

>> 
--
 Unsubscribe, change to digest, or change password at:
 https://mailman.stanford.edu/mailman/listinfo/liberationtech
>>> 
>>> -- Unsubscribe, change to digest, or change password at:
>>> https://mailman.stanford.edu/mailman/listinfo/liberationtech
>> -- Unsubscribe, change to digest, or change password at:
>> https://mailman.stanford.edu/mailman/listinfo/liberationtech
> 
> -- Bernard / bluboxthief /
> ei8fdb
> 
> IO91XM / www.ei8fdb.org
> 
> -- Unsubscribe, change to digest, or change password at:
> https://mailman.stanford.edu/mailman/listinfo/liberationtech
> 
--
Unsubscribe, change to digest, or change password at: 
https://mailman.stanford.edu/mailman/listinfo/liberationtech

Re: [liberationtech] Large amounts of spam

[Matt Mackall]

On Wed, 2012-10-31 at 18:39 -0400, Andrew Lewis wrote:
> Maybe someone is simply scrapping the archives for the sender address?

Scraping archives is passe. Most likely scenario:

- random subscriber's Windows box got owned by botnet malware
- malware scraped their disk for address books and credit card data
- malware began sending spam to people in said addressbooks for whoever
is renting the botnet

This is completely typical cybercrime behavior in 2012. And there's very
little that can be done about it.

-- 
Mathematics is the supreme nostalgia of our time.


--
Unsubscribe, change to digest, or change password at: 
https://mailman.stanford.edu/mailman/listinfo/liberationtech