From owner-freebsd-security Tue Aug 27 14:33:24 2002 Delivered-To: freebsd-security@freebsd.org Received: from mx1.FreeBSD.org (mx1.FreeBSD.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id B747537B400 for ; Tue, 27 Aug 2002 14:33:21 -0700 (PDT) Received: from posti.pp.htv.fi (posti.pp.htv.fi [212.90.64.50]) by mx1.FreeBSD.org (Postfix) with ESMTP id 7943A43E42 for ; Tue, 27 Aug 2002 14:33:20 -0700 (PDT) (envelope-from Petri.Riihikallio@Metis.fi) Received: from [192.168.0.2] ([212.90.71.47]) by posti.pp.htv.fi (8.11.1/8.11.1) with ESMTP id g7RLXM613930 for ; Wed, 28 Aug 2002 00:33:22 +0300 (EETDST) Mime-Version: 1.0 X-Sender: metis@pop.clinet.fi Message-Id: In-Reply-To: References: Date: Wed, 28 Aug 2002 00:33:17 +0300 To: security@FreeBSD.ORG From: Petri Riihikallio Subject: Re: Administrivia: Discussion - Making this list subscriber-only Content-Type: text/plain; charset="us-ascii" ; format="flowed" Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org >I would very much like to make this list subscriber-only. This will >cut down dramatically on spam and the inevitable misdirected >'subscribe' postings. >Comments? Suggestions? (Keep it brief and focussed, folks!) Do you know what the black hats are up to? I occasionally page through some UCE. I have seen many offers for mass-email software that can subscribe to mailing lists from a temporary address to do their dirty work. Temporary addresses are available from the web-mail providers on short notice. The subscription would need to employ some tricks to avoid subscription robots. (E.g "reverse the characters in this confirmation string and append a capital E to the end.) These excercises would no doubt frustrate several real subscribers as well. To add to the pain: The new "List-Subscribe: "-header makes it trivial to locate lists with search engines. -- Cheers, Petri Metis / Petri Riihikallio GSM: +358 400 505 939 FAX: +358 9 777 3028 To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message