Yep. The email address is the only piece used to authenticate the sender. SPF and similar is the only way to lock that down further without losing the convenience of mailing to list.
It's easy enough to reproduce, try it yourself with SMTP (on some other group like I did, not here ;). ∞ Andy Badera ∞ +1 518-641-1280 Google Voice ∞ This email is: [ ] bloggable [x] ask first [ ] private ∞ Google me: http://www.google.com/search?q=andrew%20badera On Thu, Nov 12, 2009 at 5:13 AM, Tim Haines <tmhai...@gmail.com> wrote: > How does that work? He's sending using someone else's email address that's > already been approved to post on this list? > Tim. > > On Thu, Nov 12, 2009 at 11:03 PM, Andrew Badera <and...@badera.us> wrote: >> >> It's spoofed spam FWIW ... Google Groups (and probably a lot of email >> lists) provide little real authentication. Tightening up SPF records >> seems to be a fix. (use -all) >> >> ∞ Andy Badera >> ∞ +1 518-641-1280 Google Voice >> ∞ This email is: [ ] bloggable [x] ask first [ ] private >> ∞ Google me: http://www.google.com/search?q=andrew%20badera >> >> >> >> On Thu, Nov 12, 2009 at 5:01 AM, Tim Haines <tmhai...@gmail.com> wrote: >> > You should be sending this as a DM. >> > >> > On Thu, Nov 12, 2009 at 10:55 PM, MANOJ NEHA <neha4ma...@gmail.com> >> > wrote: >> >> >> >> Work At Home - Earn $900 Per Week >> >> >> >> Just Work 1-2 Hours A Day & Earn $27,000 A Month >> >> No Investments, Work anytime From Anywhere !! >> >> >> >> Visit Here http://e-way-solutions.blogspot.com/ And Start Earning >> >> Now. >> > > >
