Re: [Mailman-Users] Bogus/forged subscription attempts: request for comments and possibly data

2014-06-10 Thread Stephen J. Turnbull
Perry E. Metzger writes: > have been significant academic studies of the market, and they > indicate that your portrayal isn't accurate. I was incautious; "smart" spammers go back at least to Canter and Siegel. What I should have written was "spammers are greedy, but many aren't too smart." I

Re: [Mailman-Users] Bogus/forged subscription attempts: request for comments and possibly data

2014-06-10 Thread Perry E. Metzger
On Tue, 10 Jun 2014 11:48:49 +0900 "Stephen J. Turnbull" wrote: > Perry E. Metzger writes: > > > BTW, I don't quite understand this. Why would splatting random > > addresses at you help them? Why not just pick real addresses they > > control? Successfully subscribing is easy, and generating >

Re: [Mailman-Users] Yahoo - what chance of change now?

2014-06-10 Thread Stephen J. Turnbull
Larry Finch writes: > DMARC helped briefly, but spammers and phishers have already found > ways to defeat it. I have seen a surge in AOL-based phishing this > week. They simply use the AOL screen name in the comment in the > FROM field with a non-AOL address. As most mail clients don't > disp

Re: [Mailman-Users] Yahoo - what chance of change now?

2014-06-10 Thread Larry Finch
> On Jun 9, 2014, at 10:44 PM, "Stephen J. Turnbull" wrote: > > > spoofing of AOL addresses ballooned to about 5X the volume preceding > the attack, and presumably all of the new spoof messages were targeted > to acquaintences since the attackers are known to have obtained > millions of AOL