<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:Helvetica;
panose-1:2 11 6 4 2 2 2 2 2 4;}
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
{font-family:Verdana;
panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
{font-family:"Helvetica Neue";
panose-1:0 0 0 0 0 0 0 0 0 0;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p.msonormal0, li.msonormal0, div.msonormal0
{mso-style-name:msonormal;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
span.apple-converted-space
{mso-style-name:apple-converted-space;}
span.apple-style-span
{mso-style-name:apple-style-span;}
span.EmailStyle20
{mso-style-type:personal;
font-family:"Calibri",sans-serif;
color:windowtext;}
span.EmailStyle21
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal"><span style="color:#1F497D">I just did some quick triage and turned off the display of email addresses on the page. The page itself is still public but the addresses should no longer show.<o:p></o:p></span></p>
<p class="MsoNormal"><a name="_MailEndCompose"><span style="color:#1F497D"><o:p> </o:p></span></a></p>
<p class="MsoNormal"><span style="color:#1F497D">Tom raises a good point about modernizing the site and the utility of having an up-to-date public directory.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">Best,<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">Jason<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<div>
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b>From:</b> Members [mailto:members-bounces@lists.sigcis.org]
<b>On Behalf Of </b>Thomas Haigh<br>
<b>Sent:</b> Monday, November 27, 2017 2:53 PM<br>
<b>To:</b> 'members' <members@sigcis.org><br>
<b>Subject:</b> [SIGCIS-Members] SIGCIS member directory listings are intentionally public, thus harvestable<o:p></o:p></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">The mail is clearly not coming via the SIGCIS list. Indeed the sender is not even bothering to fake it – the sender identifies itself as<o:p></o:p></p>
<p class="MsoNormal">>> <span style="font-family:"Helvetica Neue",serif">SIGCIS <<a href="mailto:mekesb@kobatti.net">mekesb@kobatti.net</a>><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-family:"Helvetica Neue",serif">so is not even bothering to fake the sigcis.org domain or the correct user name of “members.”<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-family:"Helvetica Neue",serif"><o:p> </o:p></span></p>
<p class="MsoNormal">Harvesting the names does not require a “back door” into the directory – the directory is a public web page. So presumably some spam engine harvesting names and emails has stumbled across it. (Sidenote: I know some people still try to avoid
this by writing out the “at” in their address or adding spaces, but I suspect any self-respecting script creator would long ago have automated the harvesting of names in these formats).<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Thus the possibility of getting spammed is inherent in having a public member directory. We used to make efforts to keep the directory up to date and produce a print version of those attending SHOT to help members get to know each other
without spending the whole lunch meeting on introductions. But that practice has lapsed, and in the age of mobile devices would be of questionable usefulness today.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">It’s probably been something like seven years since we made a serious effort to edit profiles and reach out to members whose entries were out of date. It might be time to either modernize the directory or take it down entirely.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">A few years ago some volunteers talked about developing a media availability list on the site, to help direct journalists to subject matter experts willing to give a quick turnaround with quotes. Replacing the current directory with an
up to date and focused list of this kind might be a good idea, if anyone is willing to revive the project.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Best wishes,<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Tom<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b>From:</b> Members [<a href="mailto:members-bounces@lists.sigcis.org">mailto:members-bounces@lists.sigcis.org</a>]
<b>On Behalf Of </b>Paul Edwards<br>
<b>Sent:</b> Monday, November 27, 2017 1:32 PM<br>
<b>To:</b> members <<a href="mailto:members@sigcis.org">members@sigcis.org</a>><br>
<b>Subject:</b> [SIGCIS-Members] more SIGCIS spam<br>
<b>Importance:</b> High<o:p></o:p></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Hi all - I’ve received one spam email from this person via SIGCIS, and now s/he is following up with another. <o:p></o:p></p>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">Anyone else being harassed by him/her — or possibly “it”?<o:p></o:p></p>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">Given the other recent spam, it’s looking like there is some back door to the member directory.<o:p></o:p></p>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">Best,<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">Paul<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<p class="MsoNormal" style="margin-bottom:12.0pt"><o:p> </o:p></p>
<blockquote style="margin-top:5.0pt;margin-bottom:5.0pt">
<div>
<p class="MsoNormal">Begin forwarded message:<o:p></o:p></p>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<p class="MsoNormal"><b><span style="font-family:"Helvetica Neue",serif">From: </span>
</b><span style="font-family:"Helvetica Neue",serif">"Alexa Austin" <</span><a href="mailto:alexa.a@telemarketingtech.com"><span style="font-family:"Helvetica Neue",serif">alexa.a@telemarketingtech.com</span></a><span style="font-family:"Helvetica Neue",serif">></span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><b><span style="font-family:"Helvetica Neue",serif">Subject: RE: SIGCIS</span></b><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><b><span style="font-family:"Helvetica Neue",serif">Date: </span>
</b><span style="font-family:"Helvetica Neue",serif">November 27, 2017 at 10:02:47 PST</span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><b><span style="font-family:"Helvetica Neue",serif">To: </span>
</b><span style="font-family:"Helvetica Neue",serif"><</span><a href="mailto:pne@umich.edu"><span style="font-family:"Helvetica Neue",serif">pne@umich.edu</span></a><span style="font-family:"Helvetica Neue",serif">></span><o:p></o:p></p>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<div>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Verdana",sans-serif;color:#1F497D">Hi,</span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Verdana",sans-serif;color:#1F497D"> </span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Verdana",sans-serif;color:#1F497D">Any updates for me on below?</span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Verdana",sans-serif;color:#1F497D"> </span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Verdana",sans-serif;color:#1F497D">Await for your reply.</span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Verdana",sans-serif;color:#1F497D"> </span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Verdana",sans-serif;color:#1F497D">Thanks & Regards,</span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Verdana",sans-serif;color:#1F497D">Alexa Austin</span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Verdana",sans-serif;color:#365F91">L i s t | A p p e n d | C a m p a i g n</span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Verdana",sans-serif;color:#1F497D"> </span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Verdana",sans-serif;color:#1F497D">Append Test : Send us 25 to 50 contacts in an excel sheet from your in-house database with missing email address, telephone numbers, fax numbers or mailing addresses,
we can append it for you at free of cost, this will help you check the quality of our services.</span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span style="color:#1F497D"> </span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span style="color:#1F497D"> </span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><b><span style="font-size:10.0pt;font-family:"Tahoma",sans-serif">From:</span></b><span class="apple-converted-space"><span style="font-size:10.0pt;font-family:"Tahoma",sans-serif"> </span></span><span style="font-size:10.0pt;font-family:"Tahoma",sans-serif">Alexa
Austin<br>
<b>Sent:</b><span class="apple-converted-space"> </span>Monday, November 20, 2017 2:39 PM<br>
<b>Subject:</b><span class="apple-converted-space"> </span>SIGCIS</span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"> <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">Hi,<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"> <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">I found that you are a member of<span class="apple-converted-space"> </span><b>“</b><b><span style="font-size:9.0pt;font-family:"Verdana",sans-serif">The Special Interest Group for Computers, Information, and Society Directory</span>”.</b><span class="apple-converted-space"> </span>We
are the global database service provider. Would you be interested in acquiring potential clients list to market your products and services as per your required location? Would it be Ok if I send you a list of some sample contacts? If yes, please give me your
requirement below, and I’ll send you the list for a review.<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"> <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><b>Target Industry? ___________</b><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><b>Target Job titles? ___________<span class="apple-converted-space"> </span></b><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><b>Target locations? ___________<span class="apple-converted-space"> </span></b><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"> <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Verdana",sans-serif">Alternatively please forward this email to the right person in case you are not in charge.</span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"> <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">Looking forward to see a good client relationship.<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"> <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">Thanks & Regards,<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">Alexa Austin<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span style="color:#365F91">L I S T | A P P E N D | C A M P A I G N</span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span style="color:#365F91"> </span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:10.0pt">If you wish not to hear from us again, reply “STOP” in subject line.</span><o:p></o:p></p>
</div>
</div>
</blockquote>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Arial",sans-serif;color:black">—————————————————<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Arial",sans-serif;color:black">Paul N. Edwards<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Arial",sans-serif;color:black">William J. Perry Fellow in International Security<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><a href="http://cisac.fsi.stanford.edu/"><span style="font-size:9.0pt;font-family:"Arial",sans-serif">Center for International Security and Cooperation</span></a><span style="font-size:9.0pt;font-family:"Arial",sans-serif;color:black"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Arial",sans-serif;color:black">Stanford University<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Arial",sans-serif;color:black"><o:p> </o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Arial",sans-serif;color:black">Professor of </span><a href="http://www.si.umich.edu"><span style="font-size:9.0pt;font-family:"Arial",sans-serif">Information</span></a><span style="font-size:9.0pt;font-family:"Arial",sans-serif;color:black"> and </span><a href="http://lsa.umich.edu/history/"><span style="font-size:9.0pt;font-family:"Arial",sans-serif">History</span></a><span style="font-size:9.0pt;font-family:"Arial",sans-serif;color:black"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Arial",sans-serif;color:black">University of Michigan<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Arial",sans-serif;color:black"><o:p> </o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Arial",sans-serif;color:black">Contact:<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Arial",sans-serif;color:black">m: </span><a href="mailto:pedwards@stanford.edu"><span style="font-size:9.0pt;font-family:"Arial",sans-serif">pedwards@stanford.edu</span></a><span style="font-size:9.0pt;font-family:"Arial",sans-serif;color:black"> <o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Arial",sans-serif;color:black">w: </span><a href="http://pne.people.si.umich.edu"><span style="font-size:9.0pt;font-family:"Arial",sans-serif">pne.people.si.umich.edu</span></a><span style="font-size:9.0pt;font-family:"Arial",sans-serif;color:black"><o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal" style="margin-bottom:12.0pt"><span style="font-size:9.0pt;font-family:"Helvetica",sans-serif;color:black"><br>
<br>
<br>
<br>
<br>
<br>
<br>
<o:p></o:p></span></p>
</div>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Helvetica",sans-serif;color:black"><o:p> </o:p></span></p>
</div>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Helvetica",sans-serif;color:black"><o:p> </o:p></span></p>
</div>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Helvetica",sans-serif;color:black"><o:p> </o:p></span></p>
</div>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Helvetica",sans-serif;color:black"><o:p> </o:p></span></p>
</div>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Arial",sans-serif;color:black"><o:p> </o:p></span></p>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
<p class="MsoNormal"><span style="color:black"><o:p> </o:p></span></p>
</div>
<p class="MsoNormal"><span style="color:black"><o:p> </o:p></span></p>
</div>
<p class="MsoNormal"><span style="color:black"><o:p> </o:p></span></p>
</div>
<p class="MsoNormal"><span style="color:black"><o:p> </o:p></span></p>
</div>
<p class="MsoNormal" style="margin-bottom:12.0pt"><o:p> </o:p></p>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</div>
</div>
</div>
</body>
</html>