Re: Key search interface and email address harvesting

On Tue, Feb 08, 2005 at 09:16:43AM +0100, Reimer Karlsen-Masur, DFN-CERT wrote:
> Hi Teun,
> 
> Teun Nijssen wrote:
> | Hi Reimer,
> |
> | Reimer Karlsen-Masur, DFN-CERT wrote on 2005-02-07 15:40:
> |
> |>
> |> The reason behind this is that obviously some spammer harvested an 
> |> emailaddress from a PGP keyserver. Since this email address was 
> |> specifically created as a bait for keyserver mailaddress harvester 
> |> it seems that spammers are crawling through (the wildcard) search 
> |> of PGP keyserver.
> ...
> |> I would like to hear from you how you are dealing with this kind of
> |> threat?
> |
> |
> | not.... The only problem that you are not mentioning is that unless
> | *all* keyservers implement exact matches, any measure does not work. I
> | don't see that happening soon....
> 
> yep, I thought of this one - but forgot to put it explicitly into the mail...
> 
> On the other hand, it is one of the reason for me to direct these questions
> to many PGP keyserver operators via the list :-)
> 
> Cheers
> 
> Reimer

How do you know one of the sync servers isn't a spammer's agent?

I wonder why they even target pgp users -- seriously, do they think we 
actually buy their suger-laden pharmaceuticals and knock-off 
timekeepers?

-- 
Seth Alan Woolley [seth at positivism.org], SPAM/UCE is unauthorized
Key id EF10E21A = 36AD 8A92 8499 8439 E6A8  3724 D437 AF5D EF10 E21A
Security Team Leader Source Mage GNU/Linux http://www.sourcemage.org

_______________________________________________
pgp-keyserver-folk mailing list
[email protected]
http://lists.kjsl.com/mailman/listinfo/pgp-keyserver-folk

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.0 (GNU/Linux)

iD8DBQFCCHjdej9tPAC6OvMRAsTIAJ9CVxyYqxuj37jt0kTGHpR5/CvjUwCfQSaF
sd7RQOyKJq9t6AoAZEOcH6s=
=519t
-----END PGP SIGNATURE-----