Re: [TeX-music] Re: Virus from Werner??
Just a comment, since I started this thread. When looking more carefully at the mail header, it turned out to be sent from an Czeck SMTP server, so it was a typical example of a virus faking the From: field. Apparantly, it had found both mine and Werner's addresses somewhere. /Mats ___ TeX-music mailing list [EMAIL PROTECTED] http://sunsite.dk/mailman/listinfo/tex-music
Re: [TeX-music] Re: Virus from Werner??
- Original Message -
From: "Christof Biebricher" <[EMAIL PROTECTED]>
To: "Jean-Pierre Coulon" <[EMAIL PROTECTED]>
Cc: "Johan Vromans" <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]>
Sent: Thursday, April 11, 2002 12:59 PM
Subject: Re: [TeX-music] Re: Virus from Werner??
> [...]
> Before we make an overkill, we should
> asset the damage. I assume that Mats was the only person
> getting that email because nobody else was complaining.
At the risk to repeat myself: Jos Van Roy complains he got one from
*me* in person (while my computer was turned off for *five* days).
> So please, out yourself: have you received ads, unsolicitated
> emails of out-of-topic matter from anybody on the tex-music list?
At the risk to repeat myself again: Some virusses know how to
disguise the "From:" field of a mail. For example, the Snowwhite virus
puts "From: Hahaha" when it propagates. A few more lines of code
in this virus could easily replace "Hahaha" with another e-mail address
found by a robot.
> If yes, you do not have to name persons, of course, but it should
> be known who is really affected.
If I ever receive this virus, I will try to analyze the headers to find out
the *real* sender. Most virusses I get come from an obscure
Aol' ian, or Excite'ian, or Wanadoo'ian, who's got our Archive
web pages stored somewhere on his computer.
Hope this makes things clearer,
Bye,
Jean-Pierre Coulon E-mail: [EMAIL PROTECTED]
Observatoire de la Côte d'Azur
Département FRESNEL, groupe ILGA
BP 4229
06304 NICE Cedex 4
Tel: (33) {0}4 92 00 31 58 Fax: (33) {0}4 92 00 31 38
___
TeX-music mailing list
[EMAIL PROTECTED]
http://sunsite.dk/mailman/listinfo/tex-music
Re: [TeX-music] Re: Virus from Werner??
I receive all kinds of unsolicited mail, sometimes infected with viruses. On the other hand, I NEVER got it from any person on this list, neither from persons of other mail lists nor from friends. In all cases it was easy to see from the sender and the subject that it did not concern me and I deleted it immediately. Occasionally, I may have thereby deleted an `honest' enquiry. I also do not answer any of the calls to unsubsribe from lists I never enlisted to. It is obvious, however, that someone got my email address and sold it to one of those bulk email business. However, there are several legal ways to extract my email address from the internet without using the tex-music or GMD list. Since the emails are coming from private persons assuming I am a desperate person out of money, out of love and out of work living in the US, it seems that this is a hapless try of internet victims to make money. Before we make an overkill, we should asset the damage. I assume that Mats was the only person getting that email because nobody else was complaining. So please, out yourself: have you received ads, unsolicitated emails of out-of-topic matter from anybody on the tex-music list? If yes, you do not have to name persons, of course, but it should be known who is really affected. Christof ___ TeX-music mailing list [EMAIL PROTECTED] http://sunsite.dk/mailman/listinfo/tex-music
Re: [TeX-music] Re: Virus from Werner??
- Original Message -
From: "Maurizio Codogno" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Thursday, April 11, 2002 1:03 PM
Subject: Re: [TeX-music] Re: Virus from Werner??
> > Da: "Jean-Pierre Coulon" <[EMAIL PROTECTED]> )
> > [...]
> > Then a robot can easily find:
> > 1: adresses to whom it can send the virus.
>
> It may find them only if someone points at the archive
> directory from a web page wisited by a spider, of course.
> Nobody can divine a link...
Then how come I found both aforementionned pages of archives
by dooing a Google search of my own e-mail address ? These
pages *are* web pages, not results from a local software of the
sites.
> In the case of GMD, we could ask to remove the archive, and
> [...]
Despite the nice "memorial" aspect of the GMD archive, I would
agree with this, because it contains some of my outdated editions.
Moreover, the Yahoo! sites, and similar web-guides are not
willing to replace their link to the gmd site by one to our new
Archive, so that many potential readers miss the new Archive.
(AFAIK, the "frozen state" warning is present only in the English
introduction)
> As for the current archives, I have modified the default,
> and now they are available only to list members.
Great! I just checked this.
Ciao,
Jean-Pierre Coulon E-mail: [EMAIL PROTECTED]
Observatoire de la Côte d'Azur
Département FRESNEL, groupe ILGA
BP 4229
06304 NICE Cedex 4
Tel: (33) {0}4 92 00 31 58 Fax: (33) {0}4 92 00 31 38
___
TeX-music mailing list
[EMAIL PROTECTED]
http://sunsite.dk/mailman/listinfo/tex-music
Re: [TeX-music] Re: Virus from Werner??
> Da: "Jean-Pierre Coulon" <[EMAIL PROTECTED]> > AFAIK, all messages sent on this list are posted on the Web > (see for example http://sunsite.dk/pipermail/tex-music/2001-May.txt ), > and messages posted on the former gmd site are accessible in a > similar way (see for example > http://www.gmd.de/Mail/mutex-archive/1519.html ) > > Then a robot can easily find: > 1: adresses to whom it can send the virus. It may find them only if someone points at the archive directory from a web page wisited by a spider, of course. Nobody can divine a link... In the case of GMD, we could ask to remove the archive, and maybe send it to us for inclusion somewhere (Christian, do you still have the address of the contact at GMD? I would like also to have he delete the old aliases from [EMAIL PROTECTED] : you won't believe how much spam I receive, both as mutex-owner and as messages to the list which I reject) . As for the current archives, I have modified the default, and now they are available only to list members. ciao, .mau. ___ TeX-music mailing list [EMAIL PROTECTED] http://sunsite.dk/mailman/listinfo/tex-music
Re: [TeX-music] Re: Virus from Werner??
- Original Message -
From: "Johan Vromans" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Wednesday, April 10, 2002 10:07 PM
Subject: [TeX-music] Re: Virus from Werner??
> Mats Bengtsson <[EMAIL PROTECTED]> writes:
>
> > Has anyone else then me received an email containing
> > an attachment that looks very much like a virus and
> > "Werner Icking" as the sender? Either someone has a very
> > morbid sence of humor or GMD have been attacked by some
> > virus that uses all accounts it can find. Watch out!
>
> For what it is worth, I often get bounces from emails (containing
> viruses) that pretend having been sent by me.
> What worries me is that these are often sent to people I know via
> mailing lists, and have subjects that relate to items discussed on
> these mailing lists. Scary. And I'm not even running Windows...
Yeah, I just received such a complaint from my friend Jos (who
wrote the MIDI files of my "salon pieces").
AFAIK, all messages sent on this list are posted on the Web
(see for example http://sunsite.dk/pipermail/tex-music/2001-May.txt ),
and messages posted on the former gmd site are accessible in a
similar way (see for example
http://www.gmd.de/Mail/mutex-archive/1519.html )
Then a robot can easily find:
1: adresses to whom it can send the virus.
2: adresses in the "From:" field of these pages, in order to stick these
adresses in the "From:" field along with the virus.
3: a reasonnable message to stick into the body of the message.
FYI, disguising the "From:" field of a mail isn't very difficult.
Disguising the "headers" is more difficult. Those who have received
the "Snowwhite" virus will understand what I mean.
Because of such practices, I have already suggested disguising our
names on the web pages of our Archive, but it seems everybody here
enjoys deleting heaps of virusses and spam.
(let's find something more subtle than [EMAIL PROTECTED])
I know Werner strongly disagreed with this, but IMHO things have
changed now.
I welcome your comments,
Regards,
Jean-Pierre Coulon E-mail: [EMAIL PROTECTED]
Observatoire de la Côte d'Azur
Département FRESNEL, groupe ILGA
BP 4229
06304 NICE Cedex 4
Tel: (33) {0}4 92 00 31 58 Fax: (33) {0}4 92 00 31 38
___
TeX-music mailing list
[EMAIL PROTECTED]
http://sunsite.dk/mailman/listinfo/tex-music
