[Chapter-delegates] [Internet Policy] Fwd: an unforgettable place

[John Levine]

In article <7D61820B-5944-4279-94A4-E26E8D39F4C9 at isoc.org> you write:
>-=-=-=-=-=-
>-=-=-=-=-=-
>Hi all
>I'm looking into this.  May not be until Monday before I can resolve but rest assured we'll figure out how it
>happened!!

Hi.  I can tell you what happened -- admin at mbsaeger.com is a
subscriber to the list, a message came from that address so it was
posted like any other member message.

Without access to all the message headers it's hard to tell whether
that person's mail account was compromised, or it was an address book
attack, i.e., someone had an address book stolen with both that
address and the list.

His mail is hosted at Google, so I think it's more likely an address
book attack, but I would suggest suspending mail from (not to) him and
see if he complains.  I don't recall him sending anything legit in a
long time if ever.

In the longer run, we're all going to need to put phish filters in
front of our mailing lists because it's only going to get worse.

R's,
John

PS: Had a highly productive call with Brian on Friday, talking to Liz
and the other Brian on Monday.  Brian C. quickly got the point that
this is far more complex and risky than people have been saying it is.