Re: [sqlite] This list is getting spammed again 172
We actually had a go at this. But perhaps it's worth another shot. Dan.
Re: [sqlite] This list is getting spammed again
2018-05-11 11:12 GMT+02:00 Cecil Westerhof : > 2018-05-10 1:09 GMT+02:00 Simon Slavin : > >> >> >> On 9 May 2018, at 9:37pm, Cecil Westerhof wrote: >> >> > I am bitten by it also now. I posted a question and within two minutes >> I >> > got a spam message >> >> I got three or four of these, each one soon after I'd posted a message. >> Then I got no more. I didn't do anything to stop them and I have checked >> my spam system to see if it stopped them, but the spam system didn't >> receive any more. >> > > I marked the sender as spammer. (It was from one sender.) And the > messages are send to spam now. I got a few more. I'll watch if this > triggers again, or that it is a 'smart' spammer that stops when you do not > reply. > I got no new spam message. So it is a 'smart' spammer. -- Cecil Westerhof ___ sqlite-users mailing list sqlite-users@mailinglists.sqlite.org http://mailinglists.sqlite.org/cgi-bin/mailman/listinfo/sqlite-users
Re: [sqlite] This list is getting spammed again
ahh disregard - it was there Paul www.sandersonforensics.com skype: r3scue193 twitter: @sandersonforens Tel +44 (0)1326 572786 http://sandersonforensics.com/forum/content.php?195-SQLite-Forensic-Toolkit -Forensic Toolkit for SQLite email from a work address for a fully functional demo licence On 11 May 2018 at 10:33, Simon Slavin wrote: > On 11 May 2018, at 10:26am, Paul Sanderson > wrote: > > > Would it be possible for an admin to run a script that sent an individual > > email (e.g. different number in subject) to each user on the list and see > > who is sending the spam based on the replies? > > My guess is that the spammer harvests our addresses from nabble, or from > the Mailman archive. > > Simon. > ___ > sqlite-users mailing list > sqlite-users@mailinglists.sqlite.org > http://mailinglists.sqlite.org/cgi-bin/mailman/listinfo/sqlite-users > ___ sqlite-users mailing list sqlite-users@mailinglists.sqlite.org http://mailinglists.sqlite.org/cgi-bin/mailman/listinfo/sqlite-users
Re: [sqlite] This list is getting spammed again
Prob not nabble as my message does not seem to have made it there yet, didn't check mailman - I suspect that they are subscribed as spam is sent within seconds. Paul www.sandersonforensics.com skype: r3scue193 twitter: @sandersonforens Tel +44 (0)1326 572786 http://sandersonforensics.com/forum/content.php?195-SQLite-Forensic-Toolkit -Forensic Toolkit for SQLite email from a work address for a fully functional demo licence On 11 May 2018 at 10:33, Simon Slavin wrote: > On 11 May 2018, at 10:26am, Paul Sanderson > wrote: > > > Would it be possible for an admin to run a script that sent an individual > > email (e.g. different number in subject) to each user on the list and see > > who is sending the spam based on the replies? > > My guess is that the spammer harvests our addresses from nabble, or from > the Mailman archive. > > Simon. > ___ > sqlite-users mailing list > sqlite-users@mailinglists.sqlite.org > http://mailinglists.sqlite.org/cgi-bin/mailman/listinfo/sqlite-users > ___ sqlite-users mailing list sqlite-users@mailinglists.sqlite.org http://mailinglists.sqlite.org/cgi-bin/mailman/listinfo/sqlite-users
Re: [sqlite] This list is getting spammed again
On 11 May 2018, at 10:26am, Paul Sanderson wrote: > Would it be possible for an admin to run a script that sent an individual > email (e.g. different number in subject) to each user on the list and see > who is sending the spam based on the replies? My guess is that the spammer harvests our addresses from nabble, or from the Mailman archive. Simon. ___ sqlite-users mailing list sqlite-users@mailinglists.sqlite.org http://mailinglists.sqlite.org/cgi-bin/mailman/listinfo/sqlite-users
Re: [sqlite] This list is getting spammed again
Would it be possible for an admin to run a script that sent an individual email (e.g. different number in subject) to each user on the list and see who is sending the spam based on the replies? Paul www.sandersonforensics.com skype: r3scue193 twitter: @sandersonforens Tel +44 (0)1326 572786 http://sandersonforensics.com/forum/content.php?195-SQLite-Forensic-Toolkit -Forensic Toolkit for SQLite email from a work address for a fully functional demo licence On 11 May 2018 at 10:12, Cecil Westerhof wrote: > 2018-05-10 1:09 GMT+02:00 Simon Slavin : > > > > > > > On 9 May 2018, at 9:37pm, Cecil Westerhof > wrote: > > > > > I am bitten by it also now. I posted a question and within two > minutes I > > > got a spam message > > > > I got three or four of these, each one soon after I'd posted a message. > > Then I got no more. I didn't do anything to stop them and I have checked > > my spam system to see if it stopped them, but the spam system didn't > > receive any more. > > > > I marked the sender as spammer. (It was from one sender.) And the messages > are send to spam now. I got a few more. I'll watch if this triggers again, > or that it is a 'smart' spammer that stops when you do not reply. > > -- > Cecil Westerhof > ___ > sqlite-users mailing list > sqlite-users@mailinglists.sqlite.org > http://mailinglists.sqlite.org/cgi-bin/mailman/listinfo/sqlite-users > ___ sqlite-users mailing list sqlite-users@mailinglists.sqlite.org http://mailinglists.sqlite.org/cgi-bin/mailman/listinfo/sqlite-users
Re: [sqlite] This list is getting spammed again
2018-05-10 1:09 GMT+02:00 Simon Slavin : > > > On 9 May 2018, at 9:37pm, Cecil Westerhof wrote: > > > I am bitten by it also now. I posted a question and within two minutes I > > got a spam message > > I got three or four of these, each one soon after I'd posted a message. > Then I got no more. I didn't do anything to stop them and I have checked > my spam system to see if it stopped them, but the spam system didn't > receive any more. > I marked the sender as spammer. (It was from one sender.) And the messages are send to spam now. I got a few more. I'll watch if this triggers again, or that it is a 'smart' spammer that stops when you do not reply. -- Cecil Westerhof ___ sqlite-users mailing list sqlite-users@mailinglists.sqlite.org http://mailinglists.sqlite.org/cgi-bin/mailman/listinfo/sqlite-users
Re: [sqlite] This list is getting spammed again
On 9 May 2018, at 9:37pm, Cecil Westerhof wrote: > I am bitten by it also now. I posted a question and within two minutes I > got a spam message I got three or four of these, each one soon after I'd posted a message. Then I got no more. I didn't do anything to stop them and I have checked my spam system to see if it stopped them, but the spam system didn't receive any more. Simon. ___ sqlite-users mailing list sqlite-users@mailinglists.sqlite.org http://mailinglists.sqlite.org/cgi-bin/mailman/listinfo/sqlite-users
Re: [sqlite] This list is getting spammed again
2018-05-08 9:37 GMT+02:00 Domingo Alvarez Duarte : > Again this list is getting spammed, I just received spam after publish. > I am bitten by it also now. I posted a question and within two minutes I got a spam message that pretended to be a reply on my message. -- Cecil Westerhof ___ sqlite-users mailing list sqlite-users@mailinglists.sqlite.org http://mailinglists.sqlite.org/cgi-bin/mailman/listinfo/sqlite-users
Re: [sqlite] This list is getting spammed again 172
Thanks for reporting this. Perhaps we can find the culprit. Dan.
Re: [sqlite] This list is getting spammed again
On 5/8/18, John Long wrote: > > So I guess it is up to all the list owners to obfuscate posters' email > addresses appropriately? We tried that once before. People hated it. The consensus at that time was that people would rather just deal with the spam. -- D. Richard Hipp d...@sqlite.org ___ sqlite-users mailing list sqlite-users@mailinglists.sqlite.org http://mailinglists.sqlite.org/cgi-bin/mailman/listinfo/sqlite-users
Re: [sqlite] This list is getting spammed again
> Le 8 mai 2018 à 11:45, John Long a écrit : > > So I guess it is up to all the list owners to obfuscate posters' email > addresses appropriately? Why aren't people doing a better job of this? That is not very practical : it would cut people from the comfort to be able to address personal replies where appropriate. And it wouldn't fix all the addresses already captured through various public list mirrors not necessarily managed by the sqlite-users people. Fixing that now, is kind of too late. Unless you have a list processor able to receive messages to those obfuscated addresses it would have inserted, filter those message content (or filter by any other appropriate means like IPs black-hole) and if deemed appropriate forward them to the actual list member. Though, it would imply for the list processor to maybe receive and filter out thousands of messages not addressed to the list but to one of the subscriber's obfuscated email address and might imply significant processing resources. And yet that still wouldn't fix previously captured posters email addresses. I still prefer a mailing-list to a forum, with appropriate spam filtering on my email services, which you can't really live without today, there is not much annoyance and it makes for an easier workflow than to subscribe and visit tens of forums. -- Best Regards, Meilleures salutations, Met vriendelijke groeten, Olivier Mascia ___ sqlite-users mailing list sqlite-users@mailinglists.sqlite.org http://mailinglists.sqlite.org/cgi-bin/mailman/listinfo/sqlite-users
Re: [sqlite] This list is getting spammed again
On Tue, 2018-05-08 at 11:40 +0200, Olivier Mascia wrote: > > Le 8 mai 2018 à 09:37, Domingo Alvarez Duarte > > a écrit : > > > > Hello Richard ! > > > > Again this list is getting spammed, I just received spam after > > publish. > > > > Cheers ! > > Technically, it is not the list which gets spammed. > It is someone or some process which reads the messages posted to the > list So I guess it is up to all the list owners to obfuscate posters' email addresses appropriately? Why aren't people doing a better job of this? Oops, there goes another one. Cheap drugs, sunglasses, Luis Vitton handbags here they come... /jl ___ sqlite-users mailing list sqlite-users@mailinglists.sqlite.org http://mailinglists.sqlite.org/cgi-bin/mailman/listinfo/sqlite-users
Re: [sqlite] This list is getting spammed again
> Le 8 mai 2018 à 09:37, Domingo Alvarez Duarte a écrit : > > Hello Richard ! > > Again this list is getting spammed, I just received spam after publish. > > Cheers ! Technically, it is not the list which gets spammed. It is someone or some process which reads the messages posted to the list (you only need to be subscribed or poll some public archive of the list) and harvest the email addresses of who _posted_ to the list. Then this thing sends a message looking like being from the list, but sent directly to that poster. This is why people often see this right after posting to the list. The list itself can't filter out these messages since they do not circulate through the list. Earlier I spotted one or two sending IPs responsible for this, added them in blacklist in my own email server and that stopped the flow, until they change their IPs of course. Filtering out these IPs is probably done at the list level too, but won't help. -- Best Regards, Meilleures salutations, Met vriendelijke groeten, Olivier Mascia ___ sqlite-users mailing list sqlite-users@mailinglists.sqlite.org http://mailinglists.sqlite.org/cgi-bin/mailman/listinfo/sqlite-users
[sqlite] This list is getting spammed again
Hello Richard ! Again this list is getting spammed, I just received spam after publish. Cheers ! ___ sqlite-users mailing list sqlite-users@mailinglists.sqlite.org http://mailinglists.sqlite.org/cgi-bin/mailman/listinfo/sqlite-users
