Re: [ilugd] orkut - Nitin has sent you a friend request

2008-08-05 Thread Gora Mohanty
On Mon, 04 Aug 2008 22:56:21 -0700
Nitin Jaswal [EMAIL PROTECTED] wrote:

 Hi Bharat,
 
 Nitin Jaswal ([EMAIL PROTECTED]) has requested to be your friend 
 on orkut.
 
 To confirm or reject this request click
 http://www.orkut.co.in/FriendAdd.aspx?accept=trueuid=5080245646850238854
[...]

I will ask again: Can we make it policy on this list that morons
like this be immediately put on moderation (actually, my preference
would be a one-month ban), without further notice?

Regards,
Gora

___
ilugd mailinglist -- ilugd@lists.linux-delhi.org
http://frodo.hserus.net/mailman/listinfo/ilugd
Archives at: http://news.gmane.org/gmane.user-groups.linux.delhi 
http://www.mail-archive.com/ilugd@lists.linux-delhi.org/


Re: [ilugd] orkut - Nitin has sent you a friend request

2008-08-05 Thread abhishek jain
On Tue, Aug 5, 2008 at 12:12 PM, Gora Mohanty [EMAIL PROTECTED] wrote:

 On Mon, 04 Aug 2008 22:56:21 -0700
 Nitin Jaswal [EMAIL PROTECTED] wrote:

  Hi Bharat,
 
  Nitin Jaswal ([EMAIL PROTECTED]) has requested to be your friend
  on orkut.
 
  To confirm or reject this request click
 
 http://www.orkut.co.in/FriendAdd.aspx?accept=trueuid=5080245646850238854
 [...]

 I will ask again: Can we make it policy on this list that morons
 like this be immediately put on moderation (actually, my preference
 would be a one-month ban), without further notice?

 Regards,
 Gora

Hi all.
I would have donated  for the ammunition, but i think it is a mistake.
Was it?
-- 
Thanks and kind Regards,
Abhishek jain
___
ilugd mailinglist -- ilugd@lists.linux-delhi.org
http://frodo.hserus.net/mailman/listinfo/ilugd
Archives at: http://news.gmane.org/gmane.user-groups.linux.delhi 
http://www.mail-archive.com/ilugd@lists.linux-delhi.org/


Re: [ilugd] orkut - Nitin has sent you a friend request

2008-08-05 Thread Arun Khan
On Tuesday 05 Aug 2008, abhishek jain wrote:

 Hi all.
 I would have donated  for the ammunition, but i think it is a
 mistake. Was it?

Such spams occur when users (Gora used a better word) sign up for 
services and readily reveal their Gmail, Yahoo!, Hotmail 
userids/passwords during the sign up process.

These individuals would not give the same to you if you were to ask 
them - social engineering.

-- 
Arun Khan

___
ilugd mailinglist -- ilugd@lists.linux-delhi.org
http://frodo.hserus.net/mailman/listinfo/ilugd
Archives at: http://news.gmane.org/gmane.user-groups.linux.delhi 
http://www.mail-archive.com/ilugd@lists.linux-delhi.org/


Re: [ilugd] orkut - Nitin has sent you a friend request

2008-08-05 Thread मयंक जैन ( makuchaku)
On Tue, Aug 5, 2008 at 3:24 PM, Arun Khan [EMAIL PROTECTED] wrote:

 On Tuesday 05 Aug 2008, abhishek jain wrote:

  Hi all.
  I would have donated  for the ammunition, but i think it is a
  mistake. Was it?

 Such spams occur when users (Gora used a better word) sign up for
 services and readily reveal their Gmail, Yahoo!, Hotmail
 userids/passwords during the sign up process.


Just curious..
How can a mail originating from [EMAIL PROTECTED] get to
the list?
If I am not wrong, the email needs to be part of the list before it can post
a message to the list?

--
Maku
http://www.makuchaku.info
___
ilugd mailinglist -- ilugd@lists.linux-delhi.org
http://frodo.hserus.net/mailman/listinfo/ilugd
Archives at: http://news.gmane.org/gmane.user-groups.linux.delhi 
http://www.mail-archive.com/ilugd@lists.linux-delhi.org/


Re: [ilugd] orkut - Nitin has sent you a friend request

2008-08-05 Thread Ravi Kumar
if you think over it, this is generally not the problem of the user. And if
some user prevent it from happenning event when using such site (as he knows
this may happen when he reveals the Orkut or other will send the mails to
their friends), then that guy is little genius or more accurately he already
knew about it.
So, just it can be thought to forgive such thing, and we should focus over
how to prevent such occurences rather than shouting over the person.

The beginners won't always know these things, and will learn/get experience
over time.
Take Care

-- 
-=Ravi=-
___
ilugd mailinglist -- ilugd@lists.linux-delhi.org
http://frodo.hserus.net/mailman/listinfo/ilugd
Archives at: http://news.gmane.org/gmane.user-groups.linux.delhi 
http://www.mail-archive.com/ilugd@lists.linux-delhi.org/


Re: [ilugd] orkut - Nitin has sent you a friend request

2008-08-05 Thread Ashish Shukla
On Tue, Aug 5, 2008 at 3:32 PM, मयंक जैन (makuchaku)
[EMAIL PROTECTED] wrote:
 Just curious..
 How can a mail originating from [EMAIL PROTECTED] get to
 the list?
 If I am not wrong, the email needs to be part of the list before it can post
 a message to the list?

From a 2 year old Orkut invitation's mail, I found that Orkut Spam
Solution encodes the spammer's email address in 'Sender' field of the
mail header:

Quoting from RFC2822:
88
3.6.2. Originator fields

   The originator fields of a message consist of the from field, the
   sender field (when applicable), and optionally the reply-to field.
   The from field consists of the field name From and a
   comma-separated list of one or more mailbox specifications.  If the
   from field contains more than one mailbox specification in the
   mailbox-list, then the sender field, containing the field name
   Sender and a single mailbox specification, MUST appear in the
   message.  In either case, an optional reply-to field MAY also be
   included, which contains the field name Reply-To and a
   comma-separated list of one or more addresses.

from=   From: mailbox-list CRLF

sender  =   Sender: mailbox CRLF

reply-to=   Reply-To: address-list CRLF

   The originator fields indicate the mailbox(es) of the source of the
   message.  The From: field specifies the author(s) of the message,
   that is, the mailbox(es) of the person(s) or system(s) responsible
   for the writing of the message.  The Sender: field specifies the
   mailbox of the agent responsible for the actual transmission of the
   message.  For example, if a secretary were to send a message for
   another person, the mailbox of the secretary would appear in the
   Sender: field and the mailbox of the actual author would appear in
   the From: field.  If the originator of the message can be indicated
   by a single mailbox and the author and transmitter are identical, the
   Sender: field SHOULD NOT be used.  Otherwise, both fields SHOULD
   appear.
88

HTH
-- 
Ashish Shukla आशीष शुक्ल http://wahjava.wordpress.com/
·-- ·-  ·--- ·- ···- ·- ·--·-· --· -- ·- ·· ·-·· ·-·-·- -·-· --- --
___
ilugd mailinglist -- ilugd@lists.linux-delhi.org
http://frodo.hserus.net/mailman/listinfo/ilugd
Archives at: http://news.gmane.org/gmane.user-groups.linux.delhi 
http://www.mail-archive.com/ilugd@lists.linux-delhi.org/


Re: [ilugd] orkut - Nitin has sent you a friend request

2008-08-05 Thread Gora Mohanty
On Tue, 5 Aug 2008 19:15:20 +0530
Ravi Kumar [EMAIL PROTECTED] wrote:

[Decent argument about the possibility of mistakes snipped]

I quite agree with what you say, and what others have said.
I am prepared to believe that it is not the moron^Wuser that
is primarily to blame, but the unethical social networking
sites, who absolutely rank among spammers (in my book, this
includes popular sites like Facebook and Orkut by the way).
However, given that this has been going on for a while (I get
an average of one such unsolicited invitation either personally,
or worse yet, on a list every few days), I think that we have
to take pro-active steps to stop this nonsense: Hit the spammers,
or their facilitators (however innocent), where it hurts. I am
quite rude in replies to such personal mail, and make sure to
locally black-list senders.

I would really like my proposal of a one-month ban, but simple
moderation is fine, too.

Regards,
Gora

___
ilugd mailinglist -- ilugd@lists.linux-delhi.org
http://frodo.hserus.net/mailman/listinfo/ilugd
Archives at: http://news.gmane.org/gmane.user-groups.linux.delhi 
http://www.mail-archive.com/ilugd@lists.linux-delhi.org/


Re: [ilugd] orkut - Nitin has sent you a friend request

2008-08-05 Thread Gora Mohanty
On Tue, 5 Aug 2008 21:15:10 +0530
Ashish Shukla [EMAIL PROTECTED] wrote:

 On Tue, Aug 5, 2008 at 3:32 PM, मयंक जैन (makuchaku)
 [EMAIL PROTECTED] wrote:
  Just curious..
  How can a mail originating from [EMAIL PROTECTED] get to
  the list?
  If I am not wrong, the email needs to be part of the list before it can post
  a message to the list?
 
 From a 2 year old Orkut invitation's mail, I found that Orkut Spam
 Solution encodes the spammer's email address in 'Sender' field of the
 mail header:
[...]

How do the unethical spammers like Orkut (yes, this includes *you*,
Google Search) manage this in the USA? Isn't this illegal under the
CAN-SPAM act (never heard of a law that was better named).

Regards,
Gora

___
ilugd mailinglist -- ilugd@lists.linux-delhi.org
http://frodo.hserus.net/mailman/listinfo/ilugd
Archives at: http://news.gmane.org/gmane.user-groups.linux.delhi 
http://www.mail-archive.com/ilugd@lists.linux-delhi.org/


Re: [ilugd] orkut - Nitin has sent you a friend request

2008-08-05 Thread Ashish Shukla
On 8/5/08, Gora Mohanty [EMAIL PROTECTED] wrote:

[snip]

 How do the unethical spammers like Orkut (yes, this includes *you*,
 Google Search) manage this in the USA? Isn't this illegal under the
 CAN-SPAM act (never heard of a law that was better named).

I also think their mail violates, CAN-SPAM act[1], since their invites
don't contain any valid postal address of the sender.

BtW, how about some non-lazy person clicking on opt-out links of such lists ?

References:
[1] - http://www.ftc.gov/bcp/conline/pubs/buspubs/canspam.shtm

Ashish
-- 
Ashish Shukla आशीष शुक्ल  http://wahjava.wordpress.com/
·-- ·-  ·--- ·- ···- ·- ·--·-· --· -- ·- ·· ·-·· ·-·-·- -·-· --- --
___
ilugd mailinglist -- ilugd@lists.linux-delhi.org
http://frodo.hserus.net/mailman/listinfo/ilugd
Archives at: http://news.gmane.org/gmane.user-groups.linux.delhi 
http://www.mail-archive.com/ilugd@lists.linux-delhi.org/


Re: [ilugd] orkut - Nitin has sent you a friend request

2008-08-05 Thread Arun Khan
On Tuesday 05 Aug 2008, Gora Mohanty wrote:

 How do the unethical spammers like Orkut (yes, this includes *you*,
 Google Search) manage this in the USA? Isn't this illegal under the
 CAN-SPAM act (never heard of a law that was better named).

I am guessing, in the fine print, alongside the I agree button, the user 
consents to such activity.  The offender can claim, the user gave 
access to his/her address book voluntarily (by readily coughing up 
userid/password during the sign up process).  From what I have observed 
the SPAM comes only once as an invite to join the bleh service; it is 
a thin line between legit and SPAM.

-- 
Arun Khan

___
ilugd mailinglist -- ilugd@lists.linux-delhi.org
http://frodo.hserus.net/mailman/listinfo/ilugd
Archives at: http://news.gmane.org/gmane.user-groups.linux.delhi 
http://www.mail-archive.com/ilugd@lists.linux-delhi.org/


Re: [ilugd] orkut - Nitin has sent you a friend request

2008-08-05 Thread Arun Khan
On Tuesday 05 Aug 2008, मयंक जैन (makuchaku) wrote:
 On Tue, Aug 5, 2008 at 3:24 PM, Arun Khan [EMAIL PROTECTED] wrote:
  On Tuesday 05 Aug 2008, abhishek jain wrote:
   Hi all.
   I would have donated  for the ammunition, but i think it is a
   mistake. Was it?
 
  Such spams occur when users (Gora used a better word) sign up for
  services and readily reveal their Gmail, Yahoo!, Hotmail
  userids/passwords during the sign up process.

 Just curious..
 How can a mail originating from [EMAIL PROTECTED]
 get to the list?
 If I am not wrong, the email needs to be part of the list before it
 can post a message to the list?

This is my high level understanding of how SMTP works:

1. The sending MTA packs your message (headers and contents) into an 
envelope (similar to what we do in snail mail) with a To and From 
header.  

2. The receiving MTA opens the envelope and delivers the content to our 
mailbox.  The headers and such that we see, are part of the message and 
not the envelope.  The envelope is discarded.

http://www.freesoft.org/CIE/RFC/1123/86.htm

The rogue senders are most likely populating the From header in the 
envelope properly and such it is accepted by the mailing list.

-- Arun Khan





-- 
Arun Khan

___
ilugd mailinglist -- ilugd@lists.linux-delhi.org
http://frodo.hserus.net/mailman/listinfo/ilugd
Archives at: http://news.gmane.org/gmane.user-groups.linux.delhi 
http://www.mail-archive.com/ilugd@lists.linux-delhi.org/