full-disclosure - Re: SPAM with a PGP signature?

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <20030721210903.5834716F0E@jmason.org>
From: jm at jmason.org (Justin Mason)
Subject: Re: SPAM with a PGP signature? 

Jedi/Sector One writes:
>  Speaking of spammers, I just received a spam whoose recipient was
>minidentd@...nbsd.c9x.org . What's wrong with it? Nothing except that this
>has never been a real mail address and I've never filled any form with
>anything similar.
>
>  The host name is the reverse DNS name assigned to the IP of my gateway.
>  "minidentd" is a generic fake user name sent by my identd server and
>nothing else.
>
>  It looks like spammers are always experimenting new silly ways of guessing
>valid email addresses.

btw it's unlikely this is picked up from an ident scanner -- IMO, more
likely an MTA somewhere did an ident lookup, put it in the Received
headers, and that got archived somewhere on the web where a spambot
then picked it up.

--j.