Piers,
The spammer could get the email address everywhere, not just from the
yahoo group archives. Every person Chris has ever sent an email to has
the address (and could be infected with a virus etc.). Also every
person who subscribes to this list in email form sees the email
address of everyone who posts.
If I was a spammer, I would just subscribe to all lists and the valid
addresses would come flooding in!
A long long while ago someone sent spam with my address. It was just
once and stopped (or maybe it didn't but google mail spam filter
catches spam sent from myself, hehe). I changed all passwords but
don't know if that was even necessary.
ST
On Mon, Aug 16, 2010 at 2:16 PM, Piers Goodhew <piers@...> wrote:
> ... so it looks like it's trivial to post under any name at all, using any valid list member address. This isn't really Y!'s fault, email was never designed to be verifiably authentic. I could post as "Barack Obama" using Chris' email address (but I wont, for several reasons).
>
> Group messages are viewable without requiring a login, and while it only shows the part before the @, my hunch is the spammer has had an automated script skim all group archives and then add "@..." to all users and tried to post from those addresses. Does anyone else post using a yahoo email?
>
> PG
>
> On 16/08/2010, at 9:59 PM, Piers Goodhew wrote:
>
>> It's possible they're just doing simple "from" spoofing - if so, then the spammer does not and never has had access to yr account (or need not have anyway). It's perfectly allowable in email to put whatever "from" address you like, and if that's all yahoo groups cares about, then you only have to have the email address of a valid group member.
>>
>> Only way to stop it would be to subscribe under a different email. Or get Y! groups to do much more thorough authenticity checking, which is actually pretty hard (both hard itself and hard to get Y! to change in a hurry).
>>
>> I'll just try a quick post as me but from a totally different account/server and see what happens ...
>>
>> PG
>>
>> On 16/08/2010, at 8:37 PM, Chris wrote:
>>
>>>
>>>
>>> Sorry about this guys. I am not a spammer but have no idea how this person(s) keeps doing this to me. I have changed passwords and have noticed that it does not matter which computer I use to post with. The last time this happened I was actually on my work computer which I completely killed and reinstalled the O.S.
>>>
>>> I will have to post on some other groups to see if the problem happens everywhere or just on this forum.
>>>
>>> I will change my password again but do not think this will clear up the problem as I have no idea how it is happening.
>>>
>>> Again, sorry about this guys but I have no way of stopping it.
>>>
>>> Chris
>>>
>>>
>>
>>
>>
>> ------------------------------------
>>
>> Be sure to visit the group home and check for new Links, Files, and Photos:
>> http://groups.yahoo.com/group/Homebrew_PCBsYahoo! Groups Links
>>
>>
>>
>
>
>
> ------------------------------------
>
> Be sure to visit the group home and check for new Links, Files, and Photos:
> http://groups.yahoo.com/group/Homebrew_PCBsYahoo! Groups Links
>
>
>
>