... cool -  getting out of office messages from the list members now !!!
... and so the full address and contact information as well ....

Great job you do at the University of Michigan!



... so have a good time to those on vacation!





__________________

Hi,

please delete my email address from this group immediately !!!

It was never ment to be viewable for everyone. The spam sent to my address
within the last days increased incredibly.

Also to turn on the Google synchronization - bullshit.

 Kind regards
 Karsten Friedrich






From:   "Bill Cole" <[email protected]>
To:     ldap <[email protected]>,
Cc:     [email protected], [email protected]
Date:   21.06.2013 06:16
Subject:        [ldap] Re: LDAP to change from listserv to University of
            Michigan MCommunity group
Sent by:        [email protected]



On 17 Jun 2013, at 17:26, Luke Tracy wrote:

> The listserv has now been converted to an MCommunity Group.

And was echoing every legitimate message for a day. Cute. Not very
competent, but cute.

> You can view
> the details of the group here:
> https://mcommunity.umich.edu/#group:ldap

Definitely not ready for production use. It has link syntax errors that
would have been caught in the most trivial sort of testing, making it
clear that was none. Also serve out an uncacheable 7.5 MB file that
blocks rendering until it completes and consists of an atrocious mess of
GWT-based JavaScript. That's simply user-hostile for anyone not on the
UMich network, as it means a long wait (about a minute, at T-1 speed)
with nothing renderable. Whoever created that system would do more good
flipping burgers than designing webapps and writing code.

Beyond that, the site is displaying the full member list to anyone
wandering by, all in unobfuscated mailto links, perfect for harvesters.
You've apparently also opened submissions to the list to any sender,
with a convenient mailto on the public web page. The inevitable result:
the address I use for this list got its first spam in over 4 years, just
12 hours after you made the switch. It had 15 more tossed at it in 48
hours, all coming from UMich machines with [email protected] as the
Return-Path. In short: you've made this a spam list.

>> The LDAP listserv is an open list and anyone may subscribe and
>> unsubscribe. I am therefore planning to make the MCommunity group
>> joinable,
>> however, only members with a University of Michigan login will be
>> able to
>> join or resign on their own. All others will need to request to join
>> or
>> resign.

I have an easier method, thanks to having signed up with an address
designed to be killed unilaterally. Never thought I'd have to use it
because of bumbling incompetence at UMich, but glad to be able to stop
some spam without counting on the people whose carelessness made it
happen.





This message and any attachment are confidential and may be privileged or
otherwise protected from disclosure. If you are not the intended recipient,
you must not copy this message or attachment or disclose the contents to
any other person. If you have received this transmission in error, please
notify the sender immediately and delete the message and any attachment
from your system. Merck KGaA, Darmstadt, Germany and any of its
subsidiaries do not accept liability for any omissions or errors in this
message which may arise as a result of E-Mail-transmission or for damages
resulting from any unauthorized changes of the content of this message and
any attachment thereto. Merck KGaA, Darmstadt, Germany and any of its
subsidiaries do not guarantee that this message is free of viruses and does
not accept liability for any damages caused by any virus transmitted
therewith.

Click http://www.merckgroup.com/disclaimer to access the German, French,
Spanish and Portuguese versions of this disclaimer.

Reply via email to