Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > linux.debian.user > #183530

Re: stop your mail

From Sébastien Gautrin <sebastien.gautrin@gmail.com>
Newsgroups linux.debian.user
Subject Re: stop your mail
Date 2017-07-10 17:20 +0200
Message-ID <u1IDE-6HQ-39@gated-at.bofh.it> (permalink)
References <u10jf-42Y-1@gated-at.bofh.it> <u121H-59Q-7@gated-at.bofh.it> <u12bo-5cW-1@gated-at.bofh.it> <u1eYW-4Px-5@gated-at.bofh.it>
Organization linux.* mail to news gateway

Show all headers | View raw


-------- Original Message --------
Subject: Re: stop your mail
From: Andy Smith <andy@strugglers.net>
To: debian-user@lists.debian.org
Date: 2017-07-09

> Hello,
> 
> On Sat, Jul 08, 2017 at 07:50:38PM +0200, Nicolas George wrote:
>> These messages are the spam, themselves. The pretend "leave me
>> alone" prologue is just to disguise that status and attract your
>> attention until you read the quoted text.
> 
> I think it is far more likely that these people are responding to
> spam that has been sent to them with the list's address as the from
> address. The recipients do not know or care that the from address of
> an email is not trustworthy¹, nor that they should not respond to
> spam, so they just reply to express their anger.

The "stop your mail" and "PLEASE STOP YOUR MAILS" messages are 
definitely not created by the owners of the email, though it might be 
done by a mobile app as suggested.

The proof of this is that they all have nearly the exact same content 
(some add the list mail, some don't), all being HTML messages formatted 
the same way.

To be noted that the last two the list received are from email users of 
Orange France, thus most likely French, and that it is clear from the 
wording of those messages that they very unlikely to have been written 
by a French person.

The source of those emails also clearly show that they are not sent by a 
traditional mailer, but most likely by a java-written automated program 
on windows, as seen in the message id, which for this last one was

773946604.1112.1499496543913.JavaMail.www@wwinf1f28

In this we can see that the system user sending this mail with JavaMail 
is “www” and that the server sending the message is name “wwinf1f28”. 
The previous mail of such type (PLEASE STOP YOUR MAILS) was sent by the 
exact same server, with the following message id:

1662938282.1128.1499496664949.JavaMail.www@wwinf1f28

We can thus definitely conclude that those requests to unsubscribe are 
indeed spam themselves, though it is still really unclear what their 
true purpose are.

Back to linux.debian.user | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread


Thread

stop your mail PM <ph.massiani@orange.fr> - 2017-07-08 09:10 +0200
  Re: stop your mail Jamie White <jatos.software@gmail.com> - 2017-07-08 17:00 +0200
    Re: stop your mail "Thomas Schmitt" <scdbackup@gmx.net> - 2017-07-08 17:20 +0200
      Re: stop your mail <tomas@tuxteam.de> - 2017-07-08 17:30 +0200
      Re: stop your mail Fungi4All <fungilife@protonmail.com> - 2017-07-08 18:00 +0200
        Re: stop your mail Michael Fothergill <michael.fothergill@gmail.com> - 2017-07-08 19:00 +0200
        Re: stop your mail "Thomas Schmitt" <scdbackup@gmx.net> - 2017-07-08 19:50 +0200
          Re: stop your mail Nicolas George <george@nsup.org> - 2017-07-08 20:00 +0200
            Re: stop your mail Andy Smith <andy@strugglers.net> - 2017-07-09 09:40 +0200
              Re: stop your mail "Thomas Schmitt" <scdbackup@gmx.net> - 2017-07-09 11:50 +0200
                Re: stop your mail <tomas@tuxteam.de> - 2017-07-09 12:10 +0200
                Re: stop your mail Fungi4All <fungilife@protonmail.com> - 2017-07-09 12:10 +0200
              Re: stop your mail Ángel <debian-user@debian.16bits.net> - 2017-07-10 04:20 +0200
              Re: stop your mail Sébastien Gautrin <sebastien.gautrin@gmail.com> - 2017-07-10 17:20 +0200
                Re: stop your mail Andy Smith <andy@strugglers.net> - 2017-07-11 00:20 +0200
                Re: stop your mail <tomas@tuxteam.de> - 2017-07-11 09:50 +0200
                Re: stop your mail Fungi4All <fungilife@protonmail.com> - 2017-07-11 13:50 +0200
                Re: stop your mail Greg Wooledge <wooledg@eeg.ccf.org> - 2017-07-11 14:20 +0200
                Re: stop your mail Fungi4All <fungilife@protonmail.com> - 2017-07-11 17:20 +0200
                Re: stop your mail David Wright <deblis@lionunicorn.co.uk> - 2017-07-11 20:30 +0200
                Re: stop your mail Fungi4All <fungilife@protonmail.com> - 2017-07-11 21:00 +0200
                Re: stop your mail Brian <ad44@cityscape.co.uk> - 2017-07-11 21:20 +0200
                Re: stop your mail Joe Pfeiffer <pfeiffer@cs.nmsu.edu> - 2017-07-11 21:20 +0200
                Re: stop your mail Fungi4All <fungilife@protonmail.com> - 2017-07-11 22:10 +0200
                Re: stop your mail Latincom <latincom@vcn.bc.ca> - 2017-07-12 13:40 +0200
                Re: stop your mail Andy Smith <andy@strugglers.net> - 2017-07-12 15:10 +0200

csiph-web