On Wed, Aug 17, 2016 at 06:14:38PM +0200, Daniel Pocock wrote: > > > I received a notification that a bug was closed. > > The email that closed the bug was a spam email sent to the address > (bug-number)-d...@bugs.debian.org > > > https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=737921 It was send by an PHP script, probably an abused contact form X-PHP-Originating-Script: 10006:post.php(5) : regexp code(1) : eval()'d code(17) : eval()'d code
> > Maybe time to start requiring PGP signatures on control emails to the BTS? > what about non-DDs? -- 1AE0 322E B8F7 4717 BDEA BF1D 44BB 1BA7 9F6C 6333 keybase: https://keybase.io/gfa
signature.asc
Description: PGP signature
