Date: Sun, 27 Oct 2002 22:53:02 -0800 (PST) From: Marty Combs <martycombs@127.0.0.1> To: freebsd-gnats-submit@FreeBSD.org Subject: misc/44554: GNATS regularly mined by spammers for e-mail addresses Message-ID: <200210280653.g9S6r29d013447@www.freebsd.org>
next in thread | raw e-mail | index | archive | help
>Number: 44554 >Category: misc >Synopsis: GNATS regularly mined by spammers for e-mail addresses >Confidential: no >Severity: non-critical >Priority: medium >Responsible: freebsd-bugs >State: open >Quarter: >Keywords: >Date-Required: >Class: change-request >Submitter-Id: current-users >Arrival-Date: Sun Oct 27 23:00:03 PST 2002 >Closed-Date: >Last-Modified: >Originator: Marty Combs >Release: 4.7 >Organization: >Environment: FreeBSD localhost.localdomain 4.7-RELEASE FreeBSD 4.7-RELEASE #0: Wed Oct 9 15:08:34 GMT 2002 root@builder.freebsdmall.com:/usr/obj/usr/src/sys/GENERIC i386 >Description: Within 1 week of someone replying to a comment I made on GNATS about a potential bug (Problem ID#39148), spammers mined the To: or From: fields left in the e-mail by GNATS and began sending spam to that e-mail address. Obviously the e-mail address listed is invalid, but can be determined by looking at the original GNATS problem ID# listed above. >How-To-Repeat: Create an e-mail address, make a comment on any bug listed in GNATS and wait a week or two. >Fix: Set up GNATS to filter out all From, To, or Cc header fields replacing them with generic ones. Users interested in a particular bug can opt in to receive e-mails about that bug much like bugzilla. >Release-Note: >Audit-Trail: >Unformatted: To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-bugs" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200210280653.g9S6r29d013447>