--- In [email protected], "Ron en Jits" <meij0461@...> wrote:
addresses. That would be against their explicit privacy policy.
They're a multi-billion $ company. They aren't going to jeapordize
their business for a few extra bucks trying to sell something that's
easy enough to get for free anyway.
All the malcreants have to do is scan the groups for those that have
the largest memberships (so to make their operation more efficient),
and flag those for joining using bogus member profiles. They join the
group, either by automated or manual means, and then run a bot to
quickly scrape the email addresses off the members list, if it isn't
set to be hidden by the owner/moderator(s).
There is a recent member in this group I would suspect of being one
of these: "aaaa16369a". I have groups of my own and get members very
much like this join quite frequently. They never participate in the
group, and eventually end up in the Bounce list, before either I
remove them or Y! disables their acct. [If 'aaa16369a' is actually a
legit person, I apologize! No offense intended - I'm just goiong by
personal experience.]
Gerry's machine doesn't have to be infected at all to spoof him.
Actually, it depends on if Y! is validating the user account domain
with the mail server host it is being recieved from. That would be
considered the right thing to do, but managing registered exceptions
might be such a nighmare that they might not. If they aren't, you
just need your own SMTP server pushing out messages with falsified
FROM identities in teh message headers. If you have different
messages with the needed header history info intact it's easy to tell
if this is going on.
Of course, I'm not ruling out an infected machine either. You should
be looking at more than just anti-virus and firewalls. Check for
adware and spyware and rootkits as well. For free AV, I've been
recommending AVG to my friends and family. They make others too for
spyware and root kits. I get some pretty potent, commercial tools
because of my work (legally!), but if I needed free tools these'd be
in my bag of tricks. If you're using a 3rd-party firewall, remember
to setup for outgoing, as well as incoming traffic. Also, it's very
imformative to run the Microsoft Baseline Security Analyzer (MBSA) on
your machine to see where you might have hidden vulnerabilities.
Advanced users can make use of the Security Policy Editor MMC snap-in
to fine-tune their system's security surface area. (How many programs
run, and how many apps are installed are big contributors to this
footprint as well.) Windows 2003 SP1 and later have a handy tool
called Security Configuration Wizard that greatly simplifies managing
your surface area. Use a process manager, either the built-in
TaskManager, or better yet, Process Manager and Process Explorer from
SysInternals, to get familiar with what normally is running on your
machine. If you can put up with the tedium, some sort of system-guard
utility can be helpful too, that warns you anytime changes to your
system registry are made, and that makes snap-shots so you can backup
to a last-known-good point (LKG) if you do get an infection not
easily extracted. Something to remember is that, besides setting
themselves up to auto-start as a normal user proc, or replace
existing trusted binaries with their own infected version, allot of
these virals these days are setting themselves up as hidden services,
so they actually run as SYSTEM, and they are not listed in the
Services applet. But rootkits are the worst - I hope you don't get
one of those.
Sorry for going so long. And sorry my first post wasn't about
LaserTank. To introduce myself: I joined because I was intrigued
about the group, and the game, out of the apparent similatities in
graphics and concept between one form of "Laser Chess" and this. I
haven't actually played Laser Tank yet, and was going to hold off on
posting until I'd had the chance to make some time for it.
-mwirkk :)
>[mwirkk] Good suggestions Ron! :) But I sure Yahoo! isn't selling the
> I have also Vista, I use Avast (for free) download this, let him
> work to find the problem. I have also Zonealarm ( zonelabs) for
> the Firewall (also for free). You are member of Yahoo-groups and
> I have the idea Yahoo sells adresses to e.g. Russians (I get lots
> of spam). Furthermore, do not open mails from strangers, before
> you know it you've a "worm" etc. in the message.
>
> Good luck, Ron Meijer
addresses. That would be against their explicit privacy policy.
They're a multi-billion $ company. They aren't going to jeapordize
their business for a few extra bucks trying to sell something that's
easy enough to get for free anyway.
All the malcreants have to do is scan the groups for those that have
the largest memberships (so to make their operation more efficient),
and flag those for joining using bogus member profiles. They join the
group, either by automated or manual means, and then run a bot to
quickly scrape the email addresses off the members list, if it isn't
set to be hidden by the owner/moderator(s).
There is a recent member in this group I would suspect of being one
of these: "aaaa16369a". I have groups of my own and get members very
much like this join quite frequently. They never participate in the
group, and eventually end up in the Bounce list, before either I
remove them or Y! disables their acct. [If 'aaa16369a' is actually a
legit person, I apologize! No offense intended - I'm just goiong by
personal experience.]
Gerry's machine doesn't have to be infected at all to spoof him.
Actually, it depends on if Y! is validating the user account domain
with the mail server host it is being recieved from. That would be
considered the right thing to do, but managing registered exceptions
might be such a nighmare that they might not. If they aren't, you
just need your own SMTP server pushing out messages with falsified
FROM identities in teh message headers. If you have different
messages with the needed header history info intact it's easy to tell
if this is going on.
Of course, I'm not ruling out an infected machine either. You should
be looking at more than just anti-virus and firewalls. Check for
adware and spyware and rootkits as well. For free AV, I've been
recommending AVG to my friends and family. They make others too for
spyware and root kits. I get some pretty potent, commercial tools
because of my work (legally!), but if I needed free tools these'd be
in my bag of tricks. If you're using a 3rd-party firewall, remember
to setup for outgoing, as well as incoming traffic. Also, it's very
imformative to run the Microsoft Baseline Security Analyzer (MBSA) on
your machine to see where you might have hidden vulnerabilities.
Advanced users can make use of the Security Policy Editor MMC snap-in
to fine-tune their system's security surface area. (How many programs
run, and how many apps are installed are big contributors to this
footprint as well.) Windows 2003 SP1 and later have a handy tool
called Security Configuration Wizard that greatly simplifies managing
your surface area. Use a process manager, either the built-in
TaskManager, or better yet, Process Manager and Process Explorer from
SysInternals, to get familiar with what normally is running on your
machine. If you can put up with the tedium, some sort of system-guard
utility can be helpful too, that warns you anytime changes to your
system registry are made, and that makes snap-shots so you can backup
to a last-known-good point (LKG) if you do get an infection not
easily extracted. Something to remember is that, besides setting
themselves up to auto-start as a normal user proc, or replace
existing trusted binaries with their own infected version, allot of
these virals these days are setting themselves up as hidden services,
so they actually run as SYSTEM, and they are not listed in the
Services applet. But rootkits are the worst - I hope you don't get
one of those.
Sorry for going so long. And sorry my first post wasn't about
LaserTank. To introduce myself: I joined because I was intrigued
about the group, and the game, out of the apparent similatities in
graphics and concept between one form of "Laser Chess" and this. I
haven't actually played Laser Tank yet, and was going to hold off on
posting until I'd had the chance to make some time for it.
-mwirkk :)