Re: Thinking outside the box

On March 18, 2013 at 20:38 [email protected] (Martijn Grooten) wrote:
 > > I believe Mailman will optionally insert something like [PHRASE] in subject
 > > lines, such as
 > >
 > >      Subject: [ASRG] Thinking outside the box
 > >
 > > I don't think I've ever seen counterfeiting of that and in the case of widely
 > > subscribed mailing lists it's exceedingly simple.
 > 
 > It's probably not worth their effort. Big lists are still small from a spammer's point of view. I guess it would be much easier for them to just subscribe to the list.

Any one list is small, but if it were a widely adopted convention (and
I believe among mailing lists it is) and could be reaped they might
get millions of (recipient,[PHRASE]) pairs. Maybe that's still not
enough, but the point is it's easy to fake yet I've never heard of
anyone faking it.

 > But - and I apologise for repeating myself - why not use the sender's email address as a unique password-like identifier? And put that in a header. Call it 'From'. Works rather well.

You haven't seen From fraud?

I get spam "from" myself all the time.

That's trivial to script.


-- 
        -Barry Shein

The World              | [email protected]           | http://www.TheWorld.com
Purveyors to the Trade | Voice: 800-THE-WRLD        | Dial-Up: US, PR, Canada
Software Tool & Die    | Public Access Internet     | SINCE 1989     *oo*