On Fri, Nov 28, 2003, Shachar Shemesh wrote about "Re: [OT?] SPAM":Maybe you are right about major-domo. I have not exeprienced the thing myself, partially due to the fact that I use mostly ezmlm for my mailing lists, and they don't have a "mailing list server". They also don't support sending out the subscriber's list out of the box.
The problem is not that spammers subscribe to this list. The problem are the web archives.
You might be surprised, but in addition to what you said, spammers actually *do* try to subscribe to mailing list and find addresses of active subscribers. In fact I think it's what they're after, because I never saw a spammer actually posting to a mailing list after subscribing.
How do they know which mailing lists to subscribe to? The spammers I
saw simply asked the majordomo account of an arbitrary computer for a
list of mailing lists it carries, and then for each of those it subscribed,
and also asked for the subscriber list. Many Majordomo servers are configured
to allow these actions. Similar issues might exist on other mailing list
servers as well, but I didn't personally see them.
In any case, we can check that out. Evgeny, can you please manually change one of my email addresses in the archive on plasma-gate to something else (I'm emailing it to you in private). We'll see whether that is, indeed, the case.
Also, I'll note that I just searched my spam folder. I got 1 email (over the period the folder covers) for my linux-il address. I am also subscribed to the wine-devel mailing list. At some point they introduced spam-protection on the web archives. At some point, I changed my email address. I can try and see what happened first. The new address, however, is there since april (which means I was on the list about equal time with the new and the old addresses).
In any case, I got 8 spams to my new address, and 66 spams to my old address. My spam folder was deleted about a month ago, so this can't be attributed to old spams received before the change of email.
In short, while I'm sure you are right, Nadav, this does not seem to be the main thing to spammer's address "harvesting".
Shachar
-- Shachar Shemesh Open Source integration & consulting Home page & resume - http://www.shemesh.biz/
The opinions expressed in this mail are my own, and do not necessarily represent the opinions of my employer. Wait! I am self employed! Hmm...
================================================================= To unsubscribe, send mail to [EMAIL PROTECTED] with the word "unsubscribe" in the message body, e.g., run the command echo unsubscribe | mail [EMAIL PROTECTED]
