[Tango-L] Dear friend

Alexis Cousein al at sgi.com
Thu Jun 12 09:06:38 EDT 2008


Frank Poliat wrote:
> Ed, or whoever you are (Ed Doyle is in the "From" field, but normally
> people with names like "Ed Doyle" are native speakers, which the
> sender is obviously not, so if someone "used" your gmail acct without
> your consent, my apologies.

No account was used - From: headers are trivially forged; you don't have
to "hack" anything.

In this case, a lot of headers were forged and someone then used an ill-defended
mail gateway at mail.pbinc.com (just to show you how naive the owners are,
the https gateway to configure the mail server is accessible on the internet!)
to send spam with the forged headers.

There's no need to call this spammer "Ed" (and for the benefit of other
list readers, subject the real Ed Doyle to mails full of vitriol), because
"Ed" was just selected from a list of harvested e-mails (which now provably
also includes the list members spammed).

So if you don't want to get thousands of abusive mails next time a spammer
uses *you* mail, hope others think before they type, do the same, and
leave the real Ed Doyle alone.

-- 
Alexis Cousein                                  al at sgi.com
Senior Systems Engineer/Solutions Architect     SGI/Silicon Graphics
--
<If I have seen further, it is by standing on reference manuals>




More information about the Tango-L mailing list