Is this still necessary? Are bots still farming email addresses from Usenet like they have done traditionally?
Alan B <[email protected]> wrote:
Is this still necessary? Are bots still farming email addresses from Usenet >> like they have done traditionally?
Hard to tell, but I've seen a substantial uptick of late of 'invoice' spam
to the address I post to Usenet with. Who is to say when they harvested
that address though.
According to haveibeenpwned.com, the address is in this breach:
NemoWeb: In September 2016, almost 21GB of data from the French website used for "standardised and decentralized means of exchange for publishing newsgroup articles" NemoWeb was leaked from what appears to have been an unprotected Mongo DB. The data consisted of a large volume of emails sent to the service and included almost 3.5M unique addresses, albeit many of them auto-generated. Multiple attempts were made to contact the operators of NemoWeb but no response was received.
Compromised data: Email addresses, Names
so it's not just a problem from decades ago. The address I used in the
early 2000s is in these breaches:
Data Enrichment Exposure From PDL Customer: In October 2019, security researchers Vinny Troia and Bob Diachenko identified an unprotected Elasticsearch server holding 1.2 billion records of personal data.
Onliner Spambot (spam list): In August 2017, a spambot by the name of
Onliner Spambot was identified by security researcher Benkow moʞuƎq.
Verifications.io: In February 2019, the email address validation service verifications.io suffered a data breach.
which are all recent, even if I haven't used the address for 15 years or more.
There� Ts a debate going on at eternal-september.support which has
touched on this issue. I get the feeling that Mr Banana is not
really in favour on munging. However I won� Tt make any changes
here until I� Tm told to do so.
Alan B wrote:
Thereƒ Ts a debate going on at eternal-september.support which has
touched on this issue. I get the feeling that Mr Banana is not
really in favour on munging. However I wonƒ Tt make any changes
here until Iƒ Tm told to do so.
I think it is more to do with some idiot using @eternal-september.org
as his "munged" email address, rather than Ray Banana not being in
favour of munged email addresses.
Is this still necessary? Are bots still farming email addresses from Usenet like they have done traditionally?
Is this still necessary? Are bots still farming email addresses from Usenet like they have done traditionally?
On 15 Jun 2022, Alan B wrote
(in article<t8c8q0$grm$[email protected]>):
Is this still necessary? Are bots still farming email addresses from Usenet >> like they have done traditionally?
An excellent question indeed. In my case, so many bots have farmed my email address in the past 15+ years that I frankly don’t care anymore.
Give those anti-spam mail filters a chance :-)
More seriously, the main issue these days is identity theft (i.e. sending emails as if they come from you), especially if you’re using your own (school, university, business...) mail server, which may not have adequate protection in place.
Besides that, well... I’m personally more annoyed by SMS text spam, since there are far less tools that filter those out a priori. Afterwards you can always block the origin, of course.
Just my, uh, 2 Bitcoin cents.
Just my, uh, 2 Bitcoin cents.
- Gwyn
| Sysop: | Keyop |
|---|---|
| Location: | Huddersfield, West Yorkshire, UK |
| Users: | 715 |
| Nodes: | 16 (2 / 14) |
| Uptime: | 144:35:54 |
| Calls: | 12,089 |
| Calls today: | 2 |
| Files: | 15,000 |
| Messages: | 6,517,491 |