Re: [mailop] facebook, help?

[Dave Lugo via mailop]

Also ensure their passwords are all unique, this sounds like a password reuse 
hack. Also, does their cell number still make and receive calls and texts, and 
have you checked with

On Sun, 28 Aug 2022, Chris Woods wrote:


Chances are the SMS was the first thing changed to prevent you regaining access 
that way. There is a specific process Facebook now offers to regain account 
access, try it:

https://www.facebook.com/hacked

https://www.facebook.com/help/203305893040179


We've been there, a few times.

We came across something that claimed the "your email account has changed" 
notification has a link to reverse the account change.   IT LIES!  There 
is no such link.  Else she would have clicked it, reversed the change, and

we'd not be here now...



When you eventually regain access, enable TOTP 2FA (I recommend Authy 
with the cloud backup feature enabled), instructions at

 https://www.facebook.com/help/358336074294704 . 


She claims she has 2fa setup on the account.  Yet the attacker was able to 
change the email address with no confirmation by SMS??



Also ensure their passwords are all unique, this sounds like a password 
reuse hack. Also, does their cell number still make and receive calls 
and texts, and have you checked with


can still do sms/calls - just nothing from FB.  And we know her real phone 
# is still associated with the account - when she tries to login with the

phone #, she's offered the SM option which never actually arrives...



the carrier that there's no additional lines on the plan? Occasionally 
it has been known for hackers to engineer a SIM swap or second line on 
an account. 




There are addiational lines on the plan, her kids and mom.

She's in tears.  She has ~15 years of kid pics, memorories, all lost...

Really FB?  There's no way for her to call someone to get this fixed?

There HAS to be a way to get this fixed.  Holding her drivers license up 
to a webcam, sending a notarized statement, _something_




--
----
Dave Lugo   dl...@etherboy.comLC Unit #260   TINLC
Have you hugged your firewall today?   No spam, thanks.

Are you the police?  . . . .  No ma'am, we're sysadmins.___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop

[mailop] facebook, help?

[Dave Lugo via mailop]

My fiance's FB account was hijacked by a bad actor today.   The bad actor
changed the email address on the account, and despite multiple attempts to
recover the account using SMS, the SMS texts don't arrive (dunno if 
her carrier verizon is having SMS issues or not)


Can anyone from FB please, please help?   She did get the "your email 
address has changed" notice from facebook, so we know the bad actor's

email address, but I don't think that's very helpful at the moment, at
least with the resolution paths we have, which aren't reallly resolving
things...

I can be reached via email here, or text at 484-682-5201.

Thanks,

Dave

--
----
Dave Lugo   dl...@etherboy.comLC Unit #260   TINLC
Have you hugged your firewall today?   No spam, thanks.

Are you the police?  . . . .  No ma'am, we're sysadmins.
___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop

[mailop] hostgator contact?

[Dave Lugo via mailop]

If anyone has a contact at hostgator that can help with a
spam filter issue on their end, please send me the contact
details...

Thanks in advance,

Dave

--

Dave Lugo   dl...@etherboy.comLC Unit #260   TINLC
Have you hugged your firewall today?   No spam, thanks.

Are you the police?  . . . .  No ma'am, we're sysadmins.
___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop

[mailop] apple contact?

[Dave Lugo]

Hi,

Any apple folks here that can contact me off-list?   I have some questions
as relates to oauth2 and a largish isp.

Thanks,

Dave

--

Dave Lugo   dl...@etherboy.comLC Unit #260   TINLC
Have you hugged your firewall today?   No spam, thanks.

Are you the police?  . . . .  No ma'am, we're sysadmins.

___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop

Re: [mailop] Anyone from Gmail ?

[Dave Lugo]

On Tue, 6 Mar 2018, Michael Wise via mailop wrote:


Do the recipients actually WANT the email?

Perhaps you?re sending too much of it.

Can the recipients control the volume, or at the very least opt out?



Well.. it's a little more complicated (and I suppose simple at the same
time than that.

For instance... I get wanted mail from my bank.  It's not marketing, and
it's largely transactional.  But to put it into context... these are the
subject lines.  Guess how many I open?  (answer - none at all, since the
subject line displayed in the client is enough).  I want all this mail,
but I don't need to see more than the subject to know what it's about,
and what that means for my bank account.

  $PAYEE added to $MYBANK Billpay
  Reminder to pay $PAYEE
  $PAYEE detals changed in $MYBANK Billpay
  $MYBANK - Your Online Banking Statement Is Available


For almost _all_ the double-opt in mail my bank sends me, there's no 
compelling reason to actually read the body of the message.



--

Dave Lugo   dl...@etherboy.comLC Unit #260   TINLC
Have you hugged your firewall today?   No spam, thanks.

Are you the police?  . . . .  No ma'am, we're sysadmins.

___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop

Re: [mailop] Looking for Dave Lugo

[Dave Lugo]

On Sat, 3 Mar 2018, John Levine wrote:


Does anyone have a current contact for Dave Lugo who I think still works 
at Comcast?


His etherboy.com domain doesn't work, can't ping any of the hosts.




Already followed-up offlist, but let me say,,, I hatesess power outages :(

24 hours no power, and then a fried router when it was over.  Router 
replaced today.


--

Dave Lugo   dl...@etherboy.comLC Unit #260   TINLC
Have you hugged your firewall today?   No spam, thanks.

Are you the police?  . . . .  No ma'am, we're sysadmins.

___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop

Re: [mailop] shutterfly contact?

[Dave Lugo]

Hi,

Not sure if this is being sent by the ESP... it's coming from 
136.179.236.38, which whois tells me is:


SWITCH, LTD SWITCH-LTD (NET-136-179-0-0-1) 136.179.0.0 - 136.179.255.255
Shutterfly SHUTTERFLY-236 (NET-136-179-236-0-1) 136.179.236.0 - 136.179.239.255

Thanks,

Dave

On Mon, 24 Jul 2017, Matt Vernhout wrote:


They seem to use Responsys (Oracle) as their ESP - If you need a contact there 
LMK and I'll send you one off list.

~
Matt

On Sun, Jul 23, 2017 at 4:47 PM, Dave Lugo <dl...@etherboy.com> wrote:
  Does anyone have a shutterfly contact they can share?

  They're violating can-spam in at least two ways...

  Thanks,

  Dave

  --
  
  Dave Lugo   dl...@etherboy.com    LC Unit #260   TINLC
  Have you hugged your firewall today?   No spam, thanks.
  
  Are you the police?  . . . .  No ma'am, we're sysadmins.

  ___
  mailop mailing list
  mailop@mailop.org
  https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop






--
----
Dave Lugo   dl...@etherboy.comLC Unit #260   TINLC
Have you hugged your firewall today?   No spam, thanks.

Are you the police?  . . . .  No ma'am, we're sysadmins.___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop

[mailop] shutterfly contact?

[Dave Lugo]

Does anyone have a shutterfly contact they can share?

They're violating can-spam in at least two ways...

Thanks,

Dave

--

Dave Lugo   dl...@etherboy.comLC Unit #260   TINLC
Have you hugged your firewall today?   No spam, thanks.

Are you the police?  . . . .  No ma'am, we're sysadmins.

___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop

Re: [mailop] Question re: AOL will not accept delivery of this message

[Dave Lugo]

On Wed, 14 Jun 2017, Steve Atkins wrote:


AOL-owned domains, IIRC (cf. the "New gmail warning" thread).



Maybe - but the page doesn't mention that at all.



With Ken not sharing any information about the context it's hard to say more.



Yup.

--
----
Dave Lugo   dl...@etherboy.comLC Unit #260   TINLC
Have you hugged your firewall today?   No spam, thanks.

Are you the police?  . . . .  No ma'am, we're sysadmins.

___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop

Re: [mailop] Question re: AOL will not accept delivery of this message

[Dave Lugo]

On Wed, 14 Jun 2017, Ken O'Driscoll via mailop wrote:

From https://postmaster.aol.com/error-codes:

AOL will not accept delivery of this message

This is a permanent bounce due to:
* RFC2822 From domain does not match the rDNS of sending server.
* RFC 2822 FROM address does not have an A record and is not a valid domain.
* IP has a poor reputation and mail is sent to multiple recipients.
* There are multiple From address in the mail headers and the IP reputation is 
poor.

Would anybody mind offering their interpretation of that first bullet
point?

Perhaps I'm too tired, but is it just a typo and should be the envelope
from address in 5321 (previously 2821)? Or is it something else?



Requiring the rDNS domain of the sending client to match either the MAIL 
FROM or 'From:...' domain is going to cause a lot of pain.  I'd like to 
think there's some other condition that needs to be met before AOL 
considers that check, but I'm not an AOL-er.



--

Dave Lugo   dl...@etherboy.comLC Unit #260   TINLC
Have you hugged your firewall today?   No spam, thanks.

Are you the police?  . . . .  No ma'am, we're sysadmins.___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop

Re: [mailop] Is rbl.att.net down?

[Dave Lugo]

NXDOMAIN here too...


On Wed, 14 Jun 2017, Tonya Gordon wrote:


Date: Wed, 14 Jun 2017 11:45:41
From: Tonya Gordon <tonya.gor...@sparkpost.com>
To: mailop@mailop.org
Subject: [mailop] Is rbl.att.net down?

Hello!

Is anyone else able to get to rbl.att.net/block_inquiry.html?  We are getting 
Server Not Found.

Thanks!
Tonya

--
--
TONYA GORDON
sr. deliverability analyst
www.sparkpost.com
twitter @Tonya.Delivers

tel 415-578-5222 x402
mobile 469-400-0372
fax 410-872-4913
email tonya.gor...@sparkpost.com




--
----
Dave Lugo   dl...@etherboy.comLC Unit #260   TINLC
Have you hugged your firewall today?   No spam, thanks.

Are you the police?  . . . .  No ma'am, we're sysadmins.___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop

[mailop] zero-day word exploit

[Dave Lugo]

Does anyone have a copy (or copies of) of the initial doc that
this exploit uses?

http://thehackernews.com/2017/04/microsoft-word-zero-day.html

Thanks,

Dave

--

Dave Lugo   dl...@etherboy.comLC Unit #260   TINLC
Have you hugged your firewall today?   No spam, thanks.

Are you the police?  . . . .  No ma'am, we're sysadmins.

___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop

Re: [mailop] contact at mailgun.net?

[Dave Lugo]

thank you very much!

On Sun, 15 Jan 2017, Udeme Ukutt wrote:


Date: Sun, 15 Jan 2017 09:21:06
From: Udeme Ukutt <uukutt...@gmail.com>
To: Dave Lugo <dl...@etherboy.com>
Cc: mailop@mailop.org
Subject: Re: [mailop] contact at mailgun.net?

I'll ping someone there to reach out to you.

On Sun, Jan 15, 2017 at 9:16 AM Dave Lugo <dl...@etherboy.com> wrote:


  I've tried the former several times.  The spam still flows.  I'd like to

  get to a human part of the process this time around.





  On Sun, 15 Jan 2017, Udeme Ukutt wrote:

  >

  > Did you try ab...@mailgun.com, or http://www.mailgun.com/report-spam?

  >

  >

  >

  > On Sun, Jan 15, 2017 at 8:32 AM Dave Lugo <dl...@etherboy.com> wrote:

  >

  >

  >       I've tried abuse.  The spam still flows.

  >

  >

  >

  >       Thanks in advance,

  >

  >

  >

  >       Dave

  >

  >

  >

  >       --

  >

  >       

  >

  >       Dave Lugo   dl...@etherboy.com    LC Unit #260   TINLC

  >

  >       Have you hugged your firewall today?   No spam, thanks.

  >

  >       

  >

  >       Are you the police?  . . . .  No ma'am, we're sysadmins.

  >

  >

  >

  >       ___

  >

  >       mailop mailing list

  >

  >       mailop@mailop.org

  >

  >       https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop

  >

  > --

      > Sent from my iDevice; kindly excuse any typos.

  >

  >



  --

  

  Dave Lugo   dl...@etherboy.com    LC Unit #260   TINLC

  Have you hugged your firewall today?   No spam, thanks.

  

  Are you the police?  . . . .  No ma'am, we're sysadmins.

--
Sent from my iDevice; kindly excuse any typos.




--

Dave Lugo   dl...@etherboy.comLC Unit #260   TINLC
Have you hugged your firewall today?   No spam, thanks.

Are you the police?  . . . .  No ma'am, we're sysadmins.___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop

[mailop] contact at mailgun.net?

[Dave Lugo]

I've tried abuse.  The spam still flows.

Thanks in advance,

Dave

--

Dave Lugo   dl...@etherboy.comLC Unit #260   TINLC
Have you hugged your firewall today?   No spam, thanks.

Are you the police?  . . . .  No ma'am, we're sysadmins.

___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop

[mailop] neopets.com contact?

[Dave Lugo]

Hi,

Does anyone have a contact at neopets.com, with whom I can
discuss a delivery issue?

Thanks in advance,

Dave

--

Dave Lugo   dl...@etherboy.comLC Unit #260   TINLC
Have you hugged your firewall today?   No spam, thanks.

Are you the police?  . . . .  No ma'am, we're sysadmins.

___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop

Re: [mailop] AOL , Yahoo or Comcast people ?

[Dave Lugo]

On Sat, 22 Oct 2016, ryan prihoda wrote:


We recently had to switch the IP on our "high volume"  server , 200k email 
daily, and now we are being rate
limited badly by AOL , Yahoo and Comcast
, enough to impact our customers. We have been part of their respective 
feedback loops for years and have
DKIM, SFP and DMARC in place and aligned properly. Is there anything that can 
be done to expedite a
resolution ?



I'll followup off-list for comcast.

--
----
Dave Lugo   dl...@etherboy.comLC Unit #260   TINLC
Have you hugged your firewall today?   No spam, thanks.

Are you the police?  . . . .  No ma'am, we're sysadmins.___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop

Re: [mailop] Any Comcast folk on here?

[Dave Lugo]

Yup.  I'll email you from my work address.

Sent from my iPhone

> On Apr 27, 2016, at 14:26, Josh Nason  wrote:
> 
> We've been running into sporadic throttling issues with a few customers, and 
> could use some insight if any Comcast people are available. 
> 
> Thanks!
> 
> -- 
>   
> 
> Josh Nason / Email Reputation Manager  
>  +1 603-289-1244 | @JoshNason
> 
> Email is hot! This is why it's the original form of social media.
> 
> ___
> mailop mailing list
> mailop@mailop.org
> https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop
___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop