[aclug-L] Re: WeatherLab virus

[Robert Bottorff <robotto@xxxxxxxxxxxx>]

maybe some were wondering where clint and jon hall's response came
from -- my original notes were sent to moderation and clint
probably let them thru, eventually, but i never saw them on
the discuss list . . . .

Jonathan Hall wrote:
> As an email address?  What does that have to do with security?  If that's
> your preference do it.  I think it's silly, personally.

it doesn't have anything to do with security -- the point is
some cracks might assume easy email address, easy password access.
i know it's not true, but there's no accounting for the silliness
out there.

> As a password?  Why not use your first name as your password, too? :)
> 
> Everyone and their dog uses their birthday, or their child's birthday as
> their password.  It's a horrible idea.
> 
> If I was going to try to manually hack someone's account, I'd start by using
> names of family members and birthdays as their password.

see -- silliness -- accounting for it is an awesome responsibility.

again, if you don't want spam in your mailbox,
don't respond to it ( even if you're asking to have your email address 
removed from the spammer list ).

do register with abuse.net and forward any spam to them.

if this is too much then forward the spam to postmaster@<the provider's 
site> with your gripes and the postmaster should take care of it.

According to the internet standard RFC822 (STD 11), all sites are 
supposed to have such a mailbox.  you might have to use traceroute
on whatever you pulled off of the 'received from' line to get
to the right provider's postmaster.

rob bottorff
robotto@xxxxxxxxxxxx

> -- Jonathan
> 
> 
> ----- Original Message -----
> From: "Robert Bottorff" <robotto@xxxxxxxxxxxx>
> To: <discussion@xxxxxxxxx>
> Sent: Thursday, November 14, 2002 6:29 PM
> Subject: [aclug-L] Re: WeatherLab virus
> 
> 
> 
>>what do security minded types think
>>of using your birthday as an email address?
>>
>>how about a password?
>>
>>robert bottorff
>>robotto@xxxxxxxxxxxx
>>
>>p.s.
>>wow, was that pgp key signing 4 years ago already?
>>i think only 4 folks traded keys that night.
>>clint, jon hall, me and another guy.
>>
>>David Carmichael wrote:
>>
>>>Reply to:
>>>
>>>
>>>>On FYI-2:
>>>>I "really" use abcjr@xxxxxxxxx, and have since December of 1999.  I do
>>>>have to say that I find your "logic" behind placing e-mail addresses in
>>>>your "spammers" filter quite "amazing".
>>>
>>>
>>>Not if you had any idea the amount of spam / virus infected emails that
>>
> I
> 
>>>get!
>>>
>>>It seems that every time I post a message in any 'Newsgroup" I receive
>>
> about
> 
>>>50 to 100 junk/spam/virus mails the next day.
>>>
>>>And since many of the messages come from the same servers I just found
>>
> it
> 
>>>easier to trap the "@xyz.com" of any email address in the related
>>
> message
> 
>>>and add it to my filter... which sends back a nice little message asking
>>
> to
> 
>>>have my email address removed from their address book listing... and if
>>
> they
> 
>>>got the anti-spam message by mistake how to reach me.
>>>
>>>--David
>>>
>>>
>>>
>>>----- Original Message -----
>>>From: "Arnold Cavazos Jr." <abcjr@xxxxxxxxx>
>>>To: <discussion@xxxxxxxxx>
>>>Sent: Thursday, November 14, 2002 3:20 PM
>>>Subject: [aclug-L] Re: WeatherLab virus
>>>
>>>
>>>
>>>
>>>>David,
>>>>
>>>>On FYI-1:
>>>>It is reall easy to track down what EarthLink customer that
>>>>e-mail came from if one had access to EarthLink's radius logs.  But
>>>>it appears that you have mistaken me as an EarthLink employee, and I
>>>>haven't been one of those since Feb 2 2001.
>>>>
>>>>On FYI-2:
>>>>I "really" use abcjr@xxxxxxxxx, and have since December of 1999.  I do
>>>>have to say that I find your "logic" behind placing e-mail addresses in
>>>>your "spammers" filter quite "amazing".
>>>>
>>>>--
>>>>abcjr
>>>>
>>>>
>>>
>>>
>>>
>>>-- This is the discussion@xxxxxxxxx list.  To unsubscribe,
>>>visit http://www.complete.org/cgi-bin/listargate-aclug.cgi
>>>
>>>
>>
>>
>>-- This is the discussion@xxxxxxxxx list.  To unsubscribe,
>>visit http://www.complete.org/cgi-bin/listargate-aclug.cgi
>>
>>
> 
> 
> -- This is the discussion@xxxxxxxxx list.  To unsubscribe,
> visit http://www.complete.org/cgi-bin/listargate-aclug.cgi
> 
> 


-- This is the discussion@xxxxxxxxx list.  To unsubscribe,
visit http://www.complete.org/cgi-bin/listargate-aclug.cgi