Received: from localhost (unknown [200.46.204.183]) by postgresql.org (Postfix) with ESMTP id 9B9DD64FFA6 for ; Fri, 18 Jul 2008 15:07:46 -0300 (ADT) Received: from postgresql.org ([200.46.204.86]) by localhost (mx1.hub.org [200.46.204.183]) (amavisd-maia, port 10024) with ESMTP id 08754-07 for ; Fri, 18 Jul 2008 15:07:41 -0300 (ADT) X-Greylist: from auto-whitelisted by SQLgrey-1.7.6 Received: from lists.commandprompt.com (host-159.commandprompt.net [207.173.203.159]) by postgresql.org (Postfix) with ESMTP id D4F3E64FD10 for ; Fri, 18 Jul 2008 15:07:42 -0300 (ADT) Received: from commandprompt.com (CPE001b63afe888-CM001adea9c5a6.cpe.net.cable.rogers.com [99.236.211.160]) (authenticated bits=0) by lists.commandprompt.com (8.13.8/8.13.8) with ESMTP id m6IIA0CL026242 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO) for ; Fri, 18 Jul 2008 11:10:02 -0700 Date: Fri, 18 Jul 2008 14:07:37 -0400 From: Andrew Sullivan To: pgsql-performance@postgresql.org Subject: Re: Mailing list hacked by spammer? Message-ID: <20080718180737.GA73459@commandprompt.com> Mail-Followup-To: Andrew Sullivan , pgsql-performance@postgresql.org References: <602464.88031.qm@web25808.mail.ukl.yahoo.com> <4880D591.5080107@emolecules.com> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <4880D591.5080107@emolecules.com> User-Agent: Mutt/1.5.17 (2007-11-01) X-Greylist: Sender succeeded SMTP AUTH, not delayed by milter-greylist-4.0 (lists.commandprompt.com [207.173.203.159]); Fri, 18 Jul 2008 11:10:03 -0700 (PDT) X-Virus-Scanned: Maia Mailguard 1.0.1 X-Spam-Status: No, hits=0.009 tagged_above=0 required=5 tests=AWL=0.009 X-Spam-Level: X-Archive-Number: 200807/156 X-Sequence-Number: 30756 On Fri, Jul 18, 2008 at 10:40:33AM -0700, Craig James wrote: > Yes, hack is the correct term. The bad guys have hacked into the major email systems, including gmail, which was the origin of this spam: > > http://www.theregister.co.uk/2008/02/25/gmail_captcha_crack/ The simple fact is that, as long as we don't reject completely all mail from any unsubscribed user, some spam will occasionally get through. It's humans who have to do the moderation, and sometimes we hit the wrong button. Sorry. (Moreover, the trick of foiling captchas and using compromised machines all over the Internet to send spam is hardly "hacking the list".) A -- Andrew Sullivan ajs@commandprompt.com +1 503 667 4564 x104 http://www.commandprompt.com/