Re: security Digest, Vol 46, Issue 1

[Tristan Santore]

On 30/04/11 13:00, security-request(a)lists.fedoraproject.org wrote:
>  Send security mailing list submissions to
>  	security(a)lists.fedoraproject.org
>  
>  To subscribe or unsubscribe via the World Wide Web, visit
>  	https://admin.fedoraproject.org/mailman/listinfo/security
>  or, via email, send a message with subject or body 'help' to
>  	security-request(a)lists.fedoraproject.org
>  
>  You can reach the person managing the list at
>  	security-owner(a)lists.fedoraproject.org
>  
>  When replying, please edit your Subject line so it is more specific
>  than "Re: Contents of security digest..."
>  
>  
>  Today's Topics:
>  
>     1. spam and fedorahosted (Casper)
>  
>  
>  ----------------------------------------------------------------------
>  
>  Message: 1
>  Date: Sat, 30 Apr 2011 13:44:30 +0200
>  From: Casper <casper.le.fantom(a)gmail.com&gt;
>  Subject: spam and fedorahosted
>  To: security(a)lists.fedoraproject.org
>  Message-ID: <20110430114430.GA2704@Blackbird>
>  Content-Type: text/plain; charset="us-ascii"
>  
>  Hello,
>  this morning I received a spam so troubling :
>  
> > Date: Sat, 30 Apr 2011 07:30:19 +0530 (IST) 
> > From: riter dioh <riterdioh32(a)indiatimes.com&gt;
> > To: riterdioh32(a)yahoo.com
> > Subject:
> > X-Mailer: Zimbra 5.0.6_GA_2313.RHEL4_64 (zclient/5.0.6_GA_2313.RHEL4_64)
> > Message-ID:
> <1564463416.1105311304128819040.JavaMail.root(a)tilmb14.indiatimes.com&gt;
> >
> > Hello dear,
> > how are you today? My name is Riter  i saw you advert on this site
> (https://fedorahosted.org) and
> > i decided to contact you base on your searching, if you wouldn't mind, i will
> like you to contact
> > me through this email addresss (riterdioh32(a)yahoo.com) so we can discuss according to
> your advert,
> > Best Regard,
> > Riter.
>  
>  A spam speaking about Fedora ?!?
>  Why I think it's a spam ? Because the response adress towards yahoo
>  How spammer recovered my adress ?
>  Maybe it's a security failure of the infrastucture...
>  Please help me 
Your statement makes no sense, and secondly, even if this was
coming
from the Fedora Infrastructure, you are writing to the wrong list.

If there was spam being sent using a fp.o alias, you have neither
provided any proof, nor are you contacting the right people.

Please direct this to the infrastructure list, or better, join
#fedora-admin, providing the headers of the entire message. If the
headers do not indicate that the message is sent via fp.o or Red Hat
mail servers,
and the only reason you think it has anything to do with fp.o, is a spam
email mentioning a web link, then please ignore the spam email, and
please do NOT contact anyone.

Thank you.

Regards,

Tristan

-- 
Tristan Santore BSc MBCS
TS4523-RIPE
Network and Infrastructure Operations
InterNexusConnect
Mobile [phone]
Tristan.Santore(a)internexusconnect.net

Former Thawte Notary
(Please note: Thawte has closed its WoT programme down,
and I am therefore no longer able to accredit trust)

For Fedora related issues, please email me at:
TSantore(a)fedoraproject.org