On 5/7/07 at 1:37 PM, [EMAIL PROTECTED] wrote:

> I still come back to, how does this solve the subscription
> confirmation process? That will only work by sending a mail to the
> person that sent the request initially.

Well, he's not seeing *that* problem yet.  Plus somehow I think
SpeakEasy might be a little more gracious about confirmation requests
that didn't also echo back spammage.  But he has to deal with this
problem *now.*  If someone's shooting at you, you don't stand there like
a target until you figure out how to invent impenetrable armor.  You
take cover *now*, then you disarm *this* guy, then you attempt to solve
the larger problem.  It's triage.

His server got targeted somehow because a spammer figured out how to
abuse the unsubscribe command.  If error messages stop including the
original text (optionally, perhaps) then the spammers will give up on it
eventually, going for open relays or other ways that still deliver their
messages.

This is where we wistfully wish (say that three times fast) that all of
this wasn't designed 30 years ago, because if we did it today, we'd have
an easier way to get the IP address of the original sender than hoping
it was in optional, hard-to-parse headers.  But we got what we got.

--Matt

--
Matt Deatherage                              <[EMAIL PROTECTED]>
GCSF, Incorporated                      <http://www.macjournals.com>

"If I had asked people what they wanted, they would have said faster
 horses."  -- Henry Ford


--
This message is from the Letterrip-Talk Mailing list.
To unsubscribe, send mail to: [EMAIL PROTECTED]
Archive: http://www.mail-archive.com/letterrip-talk%40lists.letterrip.com/

Reply via email to