On Wed, Aug 3, 2011 at 7:43 AM, Michał Górny <mgo...@gentoo.org> wrote: > On Wed, 03 Aug 2011 07:27:23 +0200 > "Francisco Blas Izquierdo Riera (klondike)" <klond...@gentoo.org> wrote: > >> El 03/08/11 06:57, Robin H. Johnson escribió: >> > On Wed, Aug 03, 2011 at 04:13:19AM +0200, Francisco Blas Izquierdo >> > Riera (klondike) wrote: >> >> Come on they can't be serious... this won't work against Gentoo >> >> devs, will it? >> > It is concerning that the spammer used a valid list subscriber. >> > >> > Crunching all attachments for validation or moderating everything to >> > catch this is a lot of work. >> What about using an antispam filter reference for moderation. A >> properly configured antispam system should have detected a mail like >> that one as, at least, a possible virus. > > A good moderation would be to require PGP signatures as well but I > guess many devs still don't do that.
This list is public, so not just developers need keys, but anyone who posts would need to sign their mails, and then put their public key on a keyserver, and then somehow let the mail server know where the public key is. lolwut? PS: Get decent spam fitlers ;) -A > > -- > Best regards, > Michał Górny >