Re: [scots-l] Jack or other net experts: help!

2001-03-11 Thread Derek Hoy

David wrote:
 This is an appeal to anyone with internet know-how.
 
 In the last few days, blank subjectless message from many different people 
 whose email
 addresses start 'david@' have been arriving. Now I find that other people 
 (same criterion)
 have been getting blank subjectless message from me. These originate at 
 times when my
 computer is not connected, so it is not a virus on my system, and 
 presumably not a virus
 on theirs.

I've had the same thing.  The addresses being used are ones I used to post to 
newsgroups:  rec.music.celtic and uk.music.folk, which you've posted to.

I also get occasional spam to these addresses, so I think they've been 
hoovered up by people who do that thing.  It's the reason I use a special 
address for each newsgroup.
Alternative is not to use a real address, like Jack with his bogus@purr.

I'm inclined to ignore all this, and hope it goes away.  It would only be a 
problem if your address was used for mass emailing which got it blacklisted.  
But I think the folks who know anything about this know you aren't the 
culprit.  If you know what to look for, you can trace the route of an email 
from the header information.  Almost all spam uses a fake 'from' address.

If you want to report it, there are places to do it, but I can't remember 
off-hand where.  A quick trip to Google would point you in the right 
direction.

Derek
Posted to Scots-L - The Traditional Scottish Music  Culture List - To 
subscribe/unsubscribe, point your browser to: http://www.tullochgorm.com/lists.html



Re: [scots-l] Jack or other net experts: help!

2001-03-11 Thread Wendy Galovich

On Sat, 10 Mar 2001, David Kilpatrick wrote:
 
 This is an appeal to anyone with internet know-how.
 
 In the last few days, blank subjectless message from many different people whose 
email
 addresses start 'david@' have been arriving. Now I find that other people (same 
criterion)
 have been getting blank subjectless message from me. These originate at times when my
 computer is not connected, so it is not a virus on my system, and presumably not a 
virus
 on theirs.
 
 A few weeks ago a spambot mailed a huge list - any address beginning 'david@' and I 
notice
 the same spambot also mailed just about every other possible name or address 
configuration.
 
 Anyone have any idea how a system, somewhere, can be sending blank emails 'to and 
from'
 addresses on a list which it holds, and why on earth it would do so? And how it can 
be
 stopped, as the messages seem to come from individuals but do not?
 
 I find it worrying that messages - even blanks - can be sent which appear to 
originate
 from me. 


Disable Javascript in your mail client if you're using one that
will run it. I recently came across an article that discussed
vulnerabilities inherent in having Javascript running in your email. For
example it is possible for someone to send you a message containing some
script (which you don't see) that instructs your mailer to surreptiously
send them a copy if you forward that message to anyone else. 
The article mentioned Netscape, Outlook and Outlook Express as the
primary targets for this kind of abuse, but there may be others. There are
some real privacy-protection advantages to using a mail client that won't
run scripts. 
Does anyone know if the Outlook family of mailers can be abused in
the same way with VBScript? If they can, I'd avoid those mailers
altogether, since M$ apparently doesn't see the need to provide you with
any way of disabling VBScript. 

Wendy


Posted to Scots-L - The Traditional Scottish Music  Culture List - To 
subscribe/unsubscribe, point your browser to: http://www.tullochgorm.com/lists.html



Re: [scots-l] Jack or other net experts: help!

2001-03-11 Thread David Kilpatrick

Rob MacKillop wrote:
 
  I find it worrying that messages - even blanks - can be sent which appear
 to originate
  from me.
 
 I wouldn't go as far as to describe your MP3 files as 'blanks' ;-)
 Rob
 
If I ever attached one to a list or newsgroup message I think it prove to be the 
opposite
- major explosions all round!

Believe it or not, I have had people mailing me 3 to 4 megabyte mp3 and picture files
directly, unsolicited. Last year an ad agency decided it would sensible to turn 80
megabytes-worth of images and layout into a 35 mb attachment ZIP, and send me it that 
way.
I had to leave the machine on overnight to receive it (in this case it was not 
unsolicited
- but I could have fitted the same artwork into under 3Mb!).

David
Posted to Scots-L - The Traditional Scottish Music  Culture List - To 
subscribe/unsubscribe, point your browser to: http://www.tullochgorm.com/lists.html



Re: [scots-l] Jack or other net experts: help!

2001-03-11 Thread Toby Rider

Derek Hoy wrote:

 I'm inclined to ignore all this, and hope it goes away.  It would only be a
 problem if your address was used for mass emailing which got it blacklisted.
 But I think the folks who know anything about this know you aren't the
 culprit.  If you know what to look for, you can trace the route of an email
 from the header information.  Almost all spam uses a fake 'from' address.
 
 If you want to report it, there are places to do it, but I can't remember
 off-hand where.  A quick trip to Google would point you in the right
 direction.
 

Good luck trying to track down the offender. It could be worse, I
regularly have people trying to relay spam through my mailservers, they
are unsucessful, but the attempt still ties up some resources on the
machine. They just go through the domains and try to point mail at:
mail.whatever.com


Toby
Posted to Scots-L - The Traditional Scottish Music  Culture List - To 
subscribe/unsubscribe, point your browser to: http://www.tullochgorm.com/lists.html



Re: [scots-l] Jack or other net experts: help!

2001-03-11 Thread Toby Rider

Wendy Galovich wrote:

 Does anyone know if the Outlook family of mailers can be abused in
 the same way with VBScript? If they can, I'd avoid those mailers
 altogether, since M$ apparently doesn't see the need to provide you with
 any way of disabling VBScript.
 
 Wendy
 

Yup, use Pine or Mutt :-)
Posted to Scots-L - The Traditional Scottish Music  Culture List - To 
subscribe/unsubscribe, point your browser to: http://www.tullochgorm.com/lists.html



Re: [scots-l] Jack or other net experts: help!

2001-03-11 Thread Toby Rider

David Kilpatrick wrote:
 
 Rob MacKillop wrote:
 
   I find it worrying that messages - even blanks - can be sent which appear
  to originate
   from me.
 
  I wouldn't go as far as to describe your MP3 files as 'blanks' ;-)
  Rob
 
 If I ever attached one to a list or newsgroup message I think it prove to be the 
opposite
 - major explosions all round!
 
 Believe it or not, I have had people mailing me 3 to 4 megabyte mp3 and picture files
 directly, unsolicited. Last year an ad agency decided it would sensible to turn 80
 megabytes-worth of images and layout into a 35 mb attachment ZIP, and send me it 
that way.
 I had to leave the machine on overnight to receive it (in this case it was not 
unsolicited
 - but I could have fitted the same artwork into under 3Mb!).
 

I can give you a pop mail account your can use to receive mail
specifically for list mail. Let me know.


Toby
Posted to Scots-L - The Traditional Scottish Music  Culture List - To 
subscribe/unsubscribe, point your browser to: http://www.tullochgorm.com/lists.html



RE: [scots-l] Jack or other net experts: help!

2001-03-11 Thread Jonathan Hill

I got a 'Jonathan' one; same old same old, just addressed to a jonathan
instead of a Davidcould they be designed to elicit a reply thereby
confirming the currency of our email addresses to sell as a 'purified'
list??
Jonathan ( o}==::


-Original Message-
From: Toby Rider [mailto:[EMAIL PROTECTED]]
Sent: 11 March 2001 16:53
To: [EMAIL PROTECTED]
Subject: Re: [scots-l] Jack or other net experts: help!


Wendy Galovich wrote:

 Does anyone know if the Outlook family of mailers can be abused in
 the same way with VBScript? If they can, I'd avoid those mailers
 altogether, since M$ apparently doesn't see the need to provide you with
 any way of disabling VBScript.

 Wendy


Yup, use Pine or Mutt :-)
Posted to Scots-L - The Traditional Scottish Music  Culture List - To
subscribe/unsubscribe, point your browser to:
http://www.tullochgorm.com/lists.html


Posted to Scots-L - The Traditional Scottish Music  Culture List - To 
subscribe/unsubscribe, point your browser to: http://www.tullochgorm.com/lists.html



Re: [scots-l] Jack or other net experts: help!

2001-03-10 Thread Bruce Olson

David Kilpatrick wrote:
 
 This is an appeal to anyone with internet know-how.
 
 In the last few days, blank subjectless message from many different people whose 
email
 addresses start 'david@' have been arriving. Now I find that other people (same 
criterion)
 have been getting blank subjectless message from me. These originate at times when my
 computer is not connected, so it is not a virus on my system, and presumably not a 
virus
 on theirs.
 
 A few weeks ago a spambot mailed a huge list - any address beginning 'david@' and I 
notice
 the same spambot also mailed just about every other possible name or address 
configuration.
 
 Anyone have any idea how a system, somewhere, can be sending blank emails 'to and 
from'
 addresses on a list which it holds, and why on earth it would do so? And how it can 
be
 stopped, as the messages seem to come from individuals but do not?
 
 I find it worrying that messages - even blanks - can be sent which appear to 
originate
 from me.
 
 David Kilpatrick

A guess, perhaps wild. Another newsgroup had problems from Microsoft
Outlook Express who's initial default option is to send text as Rich
Text (html) and a copy in plain ASCII. Some email reading software
didn't know what to do with 2 formats in the same message, and simply
stopped after the header, so no message was recieved. Netscape had no
problem with this, but if someone inadvertantly got a third or different
format in the message, probably common software would also be at a loss
as to how to interpret it, and again all would be lost. One way of
checking that you got a blank message is to copy all of it to a named
file, and look at it with a word processor.
 
Bruce Olson 
-- 
Old English, Irish and, Scots: popular songs, tunes, broadside
ballads at my website (no advs-spam, etc)- www.erols.com/olsonw
or click below  A href="http://www.erols.com/olsonw" Click /a
Posted to Scots-L - The Traditional Scottish Music  Culture List - To 
subscribe/unsubscribe, point your browser to: http://www.tullochgorm.com/lists.html