On 9/27/06, Kamaraju Kusumanchi <[EMAIL PROTECTED]> wrote:
If murphy is sending spamtraps, it deserves to be listed. period.
Um, murphy sends confirmation email to any address registered through
the web interface. Even if you changed this to email-to-subscribe
without a web option, addresses can be spoofed. This isn't about spam
coming from murphy, it's about a denial of service attack against it.
I suppose another option is to have the confirmations handled by a
different host, though this still allows an attacker to DoS the
confirmation server through spamcop, so that people using spamcop can
no longer subscribe nor unsubscribe.
--
Michael A. Marsh
http://www.umiacs.umd.edu/~mmarsh
http://mamarsh.blogspot.com
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
