Someone tried doing this to me once using a message
forged with my address header. He didn't used wildcards,
must have just used the Majordomo command that gets
a list of lists at that site and probably a short bit
of shell or perl script to generate a forged subscription
request for all lists at 3 sites, one line for each
request.
This probably came from a spammer who didn't like my
complaints about such activities to his ISP. Fortunately
only 1 of the 200 or so lists he tried subscribing me
to didn't require any subscription confirmation - thanks
to the great efforts of those who maintain Majordomo code.
Thanks if any of you are listening.
Richard Kay
University of Central England (UCE)
Benji Spencer wrote:
>
> Hello
>
> one of the sites that I run majordomo (1.94.3 on one, and 1.94.4 on the
> other) seems to be egtting hit his mass-subscribes. No, not the type where
> a lot of people are subscribed, but rather where 1 person attempts to join
> all the lists at a site.
>
> the site in question is running 1.94.3. The person seems to be joining all
> the lists both private and public. Is it version 1.94.3 that allows for the
> following command?
>
> subscribe *
>
> these attepmts have come in the last 2-3 days, but have happened 4-5 times
> now (lost count)
>
> (yes, I plan on upgrading Majordomo at that site was soon as I get a chance)
>
> benji
>
> -------------------->Benji Spencer<--------------------
> spunge@spunge.org http://www.spunge.org
> spunge@ripco.com http://www.ripco.com/~spunge
> ben@anduin.eldar.org http://www.eldar.org/~ben
> ** Finger ben@anduin.eldar.org for PGP public key **
> ------------------->ICQ # 14089998<--------------------
Follow-Ups:
References:
|
|
