Re: Is mailback validation still safe?

[murr rhame]

On Sat, 9 Dec 2000, J C Lawrence wrote:

> The second is a horrible nasty problem in this age of mail
> forgery and the ease of harvesting member addresses from
> lists (especially once you are a subscriber).  Given that a
> spammer can susbcribe and can then harvest addresses with
> (presumably) posting authority with no more than a couple
> hours worth of scripting and a little time waiting while his
> bot runs, the simple MESSAGE_FROM_XXX_IS_OKAY metric is
> likely to last no longer.

Lyris has a optional feature that requires a subscriber password
for posting.  The subscriber includes their personal list
password at the start of the body of the post.  This password is
stripped before the post is distributed....  I think I'd just
switch to full moderation before I tried this technique.


- murr -