Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.user > #183430

Re: stop your mail

Show all headers | View raw

Hello,

On Sat, Jul 08, 2017 at 07:50:38PM +0200, Nicolas George wrote:
> These messages are the spam, themselves. The pretend "leave me
> alone" prologue is just to disguise that status and attract your
> attention until you read the quoted text.

I think it is far more likely that these people are responding to
spam that has been sent to them with the list's address as the from
address. The recipients do not know or care that the from address of
an email is not trustworthy¹, nor that they should not respond to
spam, so they just reply to express their anger.

I further hypothesise that this is not actually targeted behaviour
to inconvenience the mailing list specifically. I suspect that
massive lists of real email addresses have been harvested from
public mailing list archives and compromised address books etc and
these are used as from addresses on a random basis. Though it would
have to be one address per spam run rather than a different address
for each individual email, as these seem to come in bursts.

The spammers' motivation is to use an address that is not associated
with them but is a real address so cannot be easily blocked on the
basis of from address alone.

I don't think they care who receives the blowback.

Cheers,
Andy

¹ barring any of the other trusted identity schemes like SPF, DKIM,
  DMARC or crypto signed email.

-- 
https://bitfolk.com/ -- No-nonsense VPS hosting

Please consider the environment before reading this e-mail.
 — John Levine

Back to linux.debian.user | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

stop your mail PM <ph.massiani@orange.fr> - 2017-07-08 09:10 +0200
  Re: stop your mail Jamie White <jatos.software@gmail.com> - 2017-07-08 17:00 +0200
    Re: stop your mail "Thomas Schmitt" <scdbackup@gmx.net> - 2017-07-08 17:20 +0200
      Re: stop your mail <tomas@tuxteam.de> - 2017-07-08 17:30 +0200
      Re: stop your mail Fungi4All <fungilife@protonmail.com> - 2017-07-08 18:00 +0200
        Re: stop your mail Michael Fothergill <michael.fothergill@gmail.com> - 2017-07-08 19:00 +0200
        Re: stop your mail "Thomas Schmitt" <scdbackup@gmx.net> - 2017-07-08 19:50 +0200
          Re: stop your mail Nicolas George <george@nsup.org> - 2017-07-08 20:00 +0200
            Re: stop your mail Andy Smith <andy@strugglers.net> - 2017-07-09 09:40 +0200
              Re: stop your mail "Thomas Schmitt" <scdbackup@gmx.net> - 2017-07-09 11:50 +0200
                Re: stop your mail <tomas@tuxteam.de> - 2017-07-09 12:10 +0200
                Re: stop your mail Fungi4All <fungilife@protonmail.com> - 2017-07-09 12:10 +0200
              Re: stop your mail Ángel <debian-user@debian.16bits.net> - 2017-07-10 04:20 +0200
              Re: stop your mail Sébastien Gautrin <sebastien.gautrin@gmail.com> - 2017-07-10 17:20 +0200
                Re: stop your mail Andy Smith <andy@strugglers.net> - 2017-07-11 00:20 +0200
                Re: stop your mail <tomas@tuxteam.de> - 2017-07-11 09:50 +0200
                Re: stop your mail Fungi4All <fungilife@protonmail.com> - 2017-07-11 13:50 +0200
                Re: stop your mail Greg Wooledge <wooledg@eeg.ccf.org> - 2017-07-11 14:20 +0200
                Re: stop your mail Fungi4All <fungilife@protonmail.com> - 2017-07-11 17:20 +0200
                Re: stop your mail David Wright <deblis@lionunicorn.co.uk> - 2017-07-11 20:30 +0200
                Re: stop your mail Fungi4All <fungilife@protonmail.com> - 2017-07-11 21:00 +0200
                Re: stop your mail Brian <ad44@cityscape.co.uk> - 2017-07-11 21:20 +0200
                Re: stop your mail Joe Pfeiffer <pfeiffer@cs.nmsu.edu> - 2017-07-11 21:20 +0200
                Re: stop your mail Fungi4All <fungilife@protonmail.com> - 2017-07-11 22:10 +0200
                Re: stop your mail Latincom <latincom@vcn.bc.ca> - 2017-07-12 13:40 +0200
                Re: stop your mail Andy Smith <andy@strugglers.net> - 2017-07-12 15:10 +0200

csiph-web