full-disclosure - Implications of outsourcing email

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

From: VineMT at Corning.com (Vine, Matthew T)
Subject: Implications of outsourcing email

I recently received an email from Best Buy telling me that this was a spoof.

-----Original Message-----
From: Roy S. Rapoport [mailto:full-disclosure@....inorganic.org] 
Sent: Monday, June 23, 2003 2:40 PM
To: full-disclosure@...ts.netsys.com
Subject: Re: [Full-Disclosure] Implications of outsourcing email

On Mon, Jun 23, 2003 at 01:02:54PM -0400, Gabe Arnold wrote:
> I got this too, and agree it looks sketchy, pehaps someone got hold of
> their list and wants to see what e-mails are still 'alive'? And what
> people are prone to click on everything they see.

It isn't -- I mean, I agree that it's reasonable to feel that it's sketchy,
but I'm on Best Buy's promo email list, and all my emails come from
postfuture.  I suspect BB outsourced their mass mail operations and didn't
quite understand the implications of sending security alerts through the
same service.   The issue is complicated by dealing with the URLs through
the same source (probably for link tracking).

-roy
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html