Re: [mailop] Microsoft lays hands on login data: Beware of the new Outlook

2023-11-10 Thread Francois Petillon via mailop
On 11/10/23 16:54, Carsten Schiefner via mailop wrote: sort of triggered by Benoit's recent and absolutely spot-hitting rant about Microsoft's inability resp. unwillingness to appropriately deal with spam complaints, I thought I should share this article: Microsoft lays hands on login data: Bew

Re: [mailop] How to address Microsoft if spaming Office365 customers cause collateral damage for other Office365 customers sharing the same IP?

2023-03-31 Thread Francois Petillon via mailop
On 3/30/23 18:36, Hans-Martin Mosner via mailop wrote: I try to tackle this by analyzing domains present in mail headers and rejecting mails accordingly. As you've experienced, talking the Office365 customers into leaving their crappy host isn't working, so I will have to accept that a signific

Re: [mailop] Is there any analysis on root causes of mail account break-ins?

2021-11-17 Thread Francois Petillon via mailop
On 11/17/21 9:12 PM, Jarland Donnell via mailop wrote: > If you can get the passwords that are going around in these database dumps and > compare them to email accounts in your system, test those passwords against > their email accounts using automation, and then force a password change it if > mat

Re: [mailop] Is there any analysis on root causes of mail account break-ins?

2021-11-17 Thread Francois Petillon via mailop
On 11/17/21 9:10 AM, Hans-Martin Mosner via mailop wrote: > Here I want to focus on hacked mail accounts. I can think of two major root > causes but I have no idea about their relative significance: >  * Easily guessable passwords, with two subcauses for exploits: > o Brute force authenticati

Re: [mailop] Gmail out of office replies

2020-09-11 Thread Francois Petillon via mailop
On 9/11/20 2:07 PM, Kieran Cooper via mailop wrote: > Does anyone have any knowledge of how Gmail decides when to send an > auto-reply? RFC 3834 : 2. When (not) to send automatic responses An automatic responder MUST NOT blindly send a response for every message received. In practice

Re: [mailop] Abusix Potentially Compromised Account Report

2020-04-06 Thread Francois Petillon via mailop
On 3/24/20 11:36 AM, Steve Freegard via mailop wrote: > I also found that I wasn't discarding some drive-by stuff which is more akin > to > what you were talking about so I've also corrected that which will further > reduce the noise, raise the quality and reduce the number of daily reports > bei

Re: [mailop] Opinions? Email Abuse over TOR Network? (spamtraps)

2020-02-24 Thread Francois Petillon via mailop
On 2/22/20 7:47 PM, Alessandro Vesely via mailop wrote: > Even without 2FA, a password different from "12345" is probably desperately > hard to guess. _No_ When users tend to re-use the same password on different web sites or a slightly different password from site to site, guessing a password mi

Re: [mailop] Avoiding bounces - custom spamfilter behind real-spamfilter that reject mails

2019-10-24 Thread Francois Petillon via mailop
On 10/24/19 2:19 PM, Stefan Bauer via mailop wrote: > Sometimes, customers feel clever and have another local mailfilter on > site, that rejects mails, after we already have accepted them at > spamfilter level. > So the reject generates bounces at our spamfilters. Howto handle this? _If_ your clie