Re: OT GCI E-Mail


Subject: Re: OT GCI E-Mail
From: Greg Jetter (greg@lazymountain.com)
Date: Wed Apr 30 2003 - 19:21:18 AKDT


On Wednesday April 30 2003 11:31 am, Adam Elkins wrote:
> Hey Greg, you should change the character code in KMail, were getting a=
lot
> of extra =3D and 20's...

what do i change it to ?

Greg

>
> Adam
>
>
> On Wed, 30 Apr 2003 09:48:57 -0800
>
> Greg Jetter <greg@lazymountain.com> wrote:
> > On Wednesday April 30 2003 12:03 am, gaijin@gci.net wrote:
> > > On Tue, 29 Apr 2003, Greg Jetter wrote:
> > > > On Tuesday April 29 2003 11:17 am, Adam Elkins wrote:
> > > > > Is anyone eles getting slammed with Viagira spam? I get about 1=
0 a
> > > > > =3D
> >
> > day
> >
> > > > > =3D3D
> > > >
> > > > now,
> > > >
> > > > > time to filter...
> > > > >
> > > > > Adam
> > > > >
> > > > > ---------
> > > > > To unsubscribe, send email to <aklug-request@aklug.org>
> > > > > with 'unsubscribe' in the message body.
> > > >
> > > > yes me as well it seem that GCI has been selling e-mail addres=
ses
> > > > to=3D3D20 spammers , or so=3D3D20
> > > > I've heard , when I've recieved then it has been as one of man=
y
> > > > =3D3D=3D
> >
> > 20
> >
> > > > recipenants in the to: header all ending with @gci.net. I don'=
t
> > > > kn=3D
> >
> > ow
> >
> > > > w=3D3D hat=3D3D20
> > > > to do besides setting up a filter. Since GCI spends the majority=
 of
> > > > thei=3D3D r=3D3D20
> > > > time rebooting , or fixing problems (my e-mail account has been
> > > > dow=3D
> >
> > n
> >
> > > > fo=3D3D r=3D3D20
> > > > days at a time) I suppose the next thing is to report them to sp=
am
> > > > c=3D
> >
> > op.
> >
> > > > Greg
> > >
> > > I didn't see an emoticon, so I am forced to conclude you are not
> > > kiddin=3D
> >
> > g.
> >
> > > Calculate the unit price on an email address @ $30/million, and
> > > multipl=3D
> >
> > y
> >
> > > that by the estimated number of customers [1], and voila, GCI's
> > > estimat=3D
> >
> > e
> >
> > > price point: About $2.50 per copy of the list sold.
> > >
> > > Contrast that with the costs of employee time, servers, support
> > > contrac=3D
> >
> > ts
> >
> > > with software providers, circuits, and the costs of transit to thei=
r
> > > upstreams, and explain to me how GCI will make money on that deal.
> > >
> > > Or, we can look at the simple explanation: a spammer buys a list, o=
r
> > > performs an address harvesting attack to obtain his list, and then
> > > proceeds to send out his bulk mail. Chances are his software will =
be
> > > written to maximize the number of recipients, and minimize the tran=
smit
> > > time. So, instead of sending out 1 unique message per recipient
> > > increasing the amount of data sent (1 set of headers for 1 recipien=
t,
> > > o=3D
> >
> > r 1
> >
> > > set of headers for many recipients), the software will probably sen=
d
> > > to=3D
> >
> > as
> >
> > > many recipients as the server will accept per message, and allows t=
he
> > > receiving server to perform the work of generating the copies for t=
he
> > > recipients.
> > >
> > > Your logic seems to fail under scrutiny, Mr. Jetter.
> >
> > well I don't clame to be Mr Spock , and I did say in my post that "I
> > had=3D =3D20
> > heard a rummor that" GCI was selling e-mails ,=3D20
> >
> > > With regards to your "solution" - have you checked the header of th=
e
> > > sent message (s)? Did the originating IP's come from GCI networks?=
=3D20
> >
> > looks like it to me...
> >
> > Did
> >
> > > you contact their security team and say "Hey, this spam came from y=
our
> > > network!"?
> > >
> > > My guess is no.
> >
> > no I didn't bother to contact them , I figured that if a no body li=
ke
> > m=3D yself =3D20
> > could kind of figure the spam was comming from an account on their
> > ser=3D vice=3D20
> > , it would be a known value to any Syst Admin doing his job
> > correctly.=3D =3D20
> > Nothing was stoping me from contacting them but I don't have the ti=
me
> > t=3D o=3D20
> > fight with them to correct the matter , I can always filter the stuf=
f
> > ou=3D t on=3D20
> > my local box befor I read it. I was however responding to a post=20
> > aski=3D ng=3D20
> > if I was receiving spam about viagera , hell I not only get that =
one
> > =3D but=3D20
> > , that guy in nigera been after me to help him get his money out of
> > thos=3D e =3D20
> > swiss bank accounts for about a year now , I wonder if he ever got it=
=2E..
> >
> > Greg
> >
> > > Insert Occam's Razor here.
> >
> > ---------
> > To unsubscribe, send email to <aklug-request@aklug.org>
> > with 'unsubscribe' in the message body.
>
> ---------
> To unsubscribe, send email to <aklug-request@aklug.org>
> with 'unsubscribe' in the message body.

---------
To unsubscribe, send email to <aklug-request@aklug.org>
with 'unsubscribe' in the message body.



This archive was generated by hypermail 2a23 : Wed Apr 30 2003 - 19:18:19 AKDT