<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<p>Thanks, Jason: that's a good first response. <br>
</p>
<p>FWIW, I still work on the assumption that email obfuscation
works, although whenever I've looked for systematic research on
the question I've found very little, and what there is is not
recent. Anecdotally, my experience is that addresses with a mildly
inconvenient level of obfuscation (character entities in the
address, mailto link generated by a script) receive little to no
spam. <br>
</p>
<p>A question that's always worth addressing for contact
directories, though, is "What are the circumstances that would
mean somebody would want to email one of these people without
first reading more information about them, such as would be found
on their webpage (which will provide a way to email them in any
case)?" I took the email addresses off a local staff directory
page some years ago for this reason: I couldn't see it being
useful for anything *except* scraping for spam targets. <br>
</p>
<p>Best<br>
James</p>
<div class="moz-cite-prefix">On 27 Nov 17 20:01, Gallo, Jason A
wrote:<br>
</div>
<blockquote type="cite"
cite="mid:2f69b4c0a73e40f2b6738100282d2116@EXCH13-M2.ida.org">
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 15 (filtered
medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:Helvetica;
panose-1:2 11 6 4 2 2 2 2 2 4;}
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
{font-family:Verdana;
panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
{font-family:"Helvetica Neue";
panose-1:0 0 0 0 0 0 0 0 0 0;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p.msonormal0, li.msonormal0, div.msonormal0
{mso-style-name:msonormal;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
span.apple-converted-space
{mso-style-name:apple-converted-space;}
span.apple-style-span
{mso-style-name:apple-style-span;}
span.EmailStyle20
{mso-style-type:personal;
font-family:"Calibri",sans-serif;
color:windowtext;}
span.EmailStyle21
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
<div class="WordSection1">
<p class="MsoNormal"><span style="color:#1F497D">I just did some
quick triage and turned off the display of email addresses
on the page. The page itself is still public but the
addresses should no longer show.<o:p></o:p></span></p>
<p class="MsoNormal"><a name="_MailEndCompose"
moz-do-not-send="true"><span style="color:#1F497D"><o:p> </o:p></span></a></p>
<p class="MsoNormal"><span style="color:#1F497D">Tom raises a
good point about modernizing the site and the utility of
having an up-to-date public directory.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">Best,<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">Jason<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<div>
<div style="border:none;border-top:solid #E1E1E1
1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b>From:</b> Members
[<a class="moz-txt-link-freetext" href="mailto:members-bounces@lists.sigcis.org">mailto:members-bounces@lists.sigcis.org</a>]
<b>On Behalf Of </b>Thomas Haigh<br>
<b>Sent:</b> Monday, November 27, 2017 2:53 PM<br>
<b>To:</b> 'members' <a class="moz-txt-link-rfc2396E" href="mailto:members@sigcis.org"><members@sigcis.org></a><br>
<b>Subject:</b> [SIGCIS-Members] SIGCIS member directory
listings are intentionally public, thus harvestable<o:p></o:p></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">The mail is clearly not coming via the
SIGCIS list. Indeed the sender is not even bothering to fake
it – the sender identifies itself as<o:p></o:p></p>
<p class="MsoNormal">>> <span
style="font-family:"Helvetica Neue",serif">SIGCIS
<<a href="mailto:mekesb@kobatti.net"
moz-do-not-send="true">mekesb@kobatti.net</a>><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-family:"Helvetica
Neue",serif">so is not even bothering to fake the
sigcis.org domain or the correct user name of “members.”<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-family:"Helvetica
Neue",serif"><o:p> </o:p></span></p>
<p class="MsoNormal">Harvesting the names does not require a
“back door” into the directory – the directory is a public web
page. So presumably some spam engine harvesting names and
emails has stumbled across it. (Sidenote: I know some people
still try to avoid this by writing out the “at” in their
address or adding spaces, but I suspect any self-respecting
script creator would long ago have automated the harvesting of
names in these formats).<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Thus the possibility of getting spammed is
inherent in having a public member directory. We used to make
efforts to keep the directory up to date and produce a print
version of those attending SHOT to help members get to know
each other without spending the whole lunch meeting on
introductions. But that practice has lapsed, and in the age of
mobile devices would be of questionable usefulness today.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">It’s probably been something like seven
years since we made a serious effort to edit profiles and
reach out to members whose entries were out of date. It might
be time to either modernize the directory or take it down
entirely.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">A few years ago some volunteers talked
about developing a media availability list on the site, to
help direct journalists to subject matter experts willing to
give a quick turnaround with quotes. Replacing the current
directory with an up to date and focused list of this kind
might be a good idea, if anyone is willing to revive the
project.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Best wishes,<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Tom<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<div style="border:none;border-top:solid #E1E1E1
1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b>From:</b> Members [<a
href="mailto:members-bounces@lists.sigcis.org"
moz-do-not-send="true">mailto:members-bounces@lists.sigcis.org</a>]
<b>On Behalf Of </b>Paul Edwards<br>
<b>Sent:</b> Monday, November 27, 2017 1:32 PM<br>
<b>To:</b> members <<a href="mailto:members@sigcis.org"
moz-do-not-send="true">members@sigcis.org</a>><br>
<b>Subject:</b> [SIGCIS-Members] more SIGCIS spam<br>
<b>Importance:</b> High<o:p></o:p></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Hi all - I’ve received one spam email from
this person via SIGCIS, and now s/he is following up with
another. <o:p></o:p></p>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">Anyone else being harassed by him/her —
or possibly “it”?<o:p></o:p></p>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">Given the other recent spam, it’s
looking like there is some back door to the member
directory.<o:p></o:p></p>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">Best,<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">Paul<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<p class="MsoNormal" style="margin-bottom:12.0pt"><o:p> </o:p></p>
<blockquote style="margin-top:5.0pt;margin-bottom:5.0pt">
<div>
<p class="MsoNormal">Begin forwarded message:<o:p></o:p></p>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<p class="MsoNormal"><b><span
style="font-family:"Helvetica
Neue",serif">From: </span>
</b><span style="font-family:"Helvetica
Neue",serif">"Alexa Austin" <</span><a
href="mailto:alexa.a@telemarketingtech.com"
moz-do-not-send="true"><span
style="font-family:"Helvetica
Neue",serif">alexa.a@telemarketingtech.com</span></a><span
style="font-family:"Helvetica
Neue",serif">></span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><b><span
style="font-family:"Helvetica
Neue",serif">Subject: RE: SIGCIS</span></b><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><b><span
style="font-family:"Helvetica
Neue",serif">Date: </span>
</b><span style="font-family:"Helvetica
Neue",serif">November 27, 2017 at 10:02:47
PST</span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><b><span
style="font-family:"Helvetica
Neue",serif">To: </span>
</b><span style="font-family:"Helvetica
Neue",serif"><</span><a
href="mailto:pne@umich.edu"
moz-do-not-send="true"><span
style="font-family:"Helvetica
Neue",serif">pne@umich.edu</span></a><span
style="font-family:"Helvetica
Neue",serif">></span><o:p></o:p></p>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<div>
<p class="MsoNormal"><span
style="font-size:9.0pt;font-family:"Verdana",sans-serif;color:#1F497D">Hi,</span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span
style="font-size:9.0pt;font-family:"Verdana",sans-serif;color:#1F497D"> </span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span
style="font-size:9.0pt;font-family:"Verdana",sans-serif;color:#1F497D">Any
updates for me on below?</span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span
style="font-size:9.0pt;font-family:"Verdana",sans-serif;color:#1F497D"> </span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span
style="font-size:9.0pt;font-family:"Verdana",sans-serif;color:#1F497D">Await
for your reply.</span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span
style="font-size:9.0pt;font-family:"Verdana",sans-serif;color:#1F497D"> </span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span
style="font-size:9.0pt;font-family:"Verdana",sans-serif;color:#1F497D">Thanks
& Regards,</span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span
style="font-size:9.0pt;font-family:"Verdana",sans-serif;color:#1F497D">Alexa
Austin</span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span
style="font-size:9.0pt;font-family:"Verdana",sans-serif;color:#365F91">L
i s t | A p p e n d | C a m p a i g n</span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span
style="font-size:9.0pt;font-family:"Verdana",sans-serif;color:#1F497D"> </span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span
style="font-size:9.0pt;font-family:"Verdana",sans-serif;color:#1F497D">Append
Test : Send us 25 to 50 contacts in an excel
sheet from your in-house database with missing
email address, telephone numbers, fax numbers
or mailing addresses, we can append it for you
at free of cost, this will help you check the
quality of our services.</span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span style="color:#1F497D"> </span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span style="color:#1F497D"> </span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><b><span
style="font-size:10.0pt;font-family:"Tahoma",sans-serif">From:</span></b><span
class="apple-converted-space"><span
style="font-size:10.0pt;font-family:"Tahoma",sans-serif"> </span></span><span
style="font-size:10.0pt;font-family:"Tahoma",sans-serif">Alexa
Austin<br>
<b>Sent:</b><span
class="apple-converted-space"> </span>Monday,
November 20, 2017 2:39 PM<br>
<b>Subject:</b><span
class="apple-converted-space"> </span>SIGCIS</span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"> <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">Hi,<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"> <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">I found that you are a member
of<span class="apple-converted-space"> </span><b>“</b><b><span
style="font-size:9.0pt;font-family:"Verdana",sans-serif">The
Special Interest Group for Computers,
Information, and Society Directory</span>”.</b><span
class="apple-converted-space"> </span>We are
the global database service provider. Would you
be interested in acquiring potential clients
list to market your products and services as per
your required location? Would it be Ok if I send
you a list of some sample contacts? If yes,
please give me your requirement below, and I’ll
send you the list for a review.<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"> <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><b>Target Industry?
___________</b><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><b>Target Job titles?
___________<span class="apple-converted-space"> </span></b><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><b>Target locations?
___________<span class="apple-converted-space"> </span></b><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"> <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span
style="font-size:9.0pt;font-family:"Verdana",sans-serif">Alternatively
please forward this email to the right person
in case you are not in charge.</span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"> <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">Looking forward to see a good
client relationship.<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"> <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">Thanks & Regards,<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">Alexa Austin<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span style="color:#365F91">L
I S T | A P P E N D | C A M P A I G N</span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span style="color:#365F91"> </span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span
style="font-size:10.0pt">If you wish not to
hear from us again, reply “STOP” in subject
line.</span><o:p></o:p></p>
</div>
</div>
</blockquote>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<p
class="MsoNormal"><span
style="font-size:9.0pt;font-family:"Arial",sans-serif;color:black">—————————————————<o:p></o:p></span></p>
</div>
<div>
<p
class="MsoNormal"><span
style="font-size:9.0pt;font-family:"Arial",sans-serif;color:black">Paul
N. Edwards<o:p></o:p></span></p>
</div>
<div>
<p
class="MsoNormal"><span
style="font-size:9.0pt;font-family:"Arial",sans-serif;color:black">William
J. Perry
Fellow in
International
Security<o:p></o:p></span></p>
</div>
<div>
<p
class="MsoNormal"><a
href="http://cisac.fsi.stanford.edu/" moz-do-not-send="true"><span
style="font-size:9.0pt;font-family:"Arial",sans-serif">Center
for
International
Security and
Cooperation</span></a><span
style="font-size:9.0pt;font-family:"Arial",sans-serif;color:black"><o:p></o:p></span></p>
</div>
<div>
<p
class="MsoNormal"><span
style="font-size:9.0pt;font-family:"Arial",sans-serif;color:black">Stanford
University<o:p></o:p></span></p>
</div>
<div>
<p
class="MsoNormal"><span
style="font-size:9.0pt;font-family:"Arial",sans-serif;color:black"><o:p> </o:p></span></p>
</div>
<div>
<p
class="MsoNormal"><span
style="font-size:9.0pt;font-family:"Arial",sans-serif;color:black">Professor
of </span><a
href="http://www.si.umich.edu"
moz-do-not-send="true"><span
style="font-size:9.0pt;font-family:"Arial",sans-serif">Information</span></a><span
style="font-size:9.0pt;font-family:"Arial",sans-serif;color:black"> and </span><a
href="http://lsa.umich.edu/history/" moz-do-not-send="true"><span
style="font-size:9.0pt;font-family:"Arial",sans-serif">History</span></a><span
style="font-size:9.0pt;font-family:"Arial",sans-serif;color:black"><o:p></o:p></span></p>
</div>
<div>
<p
class="MsoNormal"><span
style="font-size:9.0pt;font-family:"Arial",sans-serif;color:black">University
of Michigan<o:p></o:p></span></p>
</div>
<div>
<p
class="MsoNormal"><span
style="font-size:9.0pt;font-family:"Arial",sans-serif;color:black"><o:p> </o:p></span></p>
</div>
<div>
<p
class="MsoNormal"><span
style="font-size:9.0pt;font-family:"Arial",sans-serif;color:black">Contact:<o:p></o:p></span></p>
</div>
<div>
<p
class="MsoNormal"><span
style="font-size:9.0pt;font-family:"Arial",sans-serif;color:black">m: </span><a
href="mailto:pedwards@stanford.edu" moz-do-not-send="true"><span
style="font-size:9.0pt;font-family:"Arial",sans-serif">pedwards@stanford.edu</span></a><span
style="font-size:9.0pt;font-family:"Arial",sans-serif;color:black"> <o:p></o:p></span></p>
</div>
<div>
<p
class="MsoNormal"><span
style="font-size:9.0pt;font-family:"Arial",sans-serif;color:black">w: </span><a
href="http://pne.people.si.umich.edu" moz-do-not-send="true"><span
style="font-size:9.0pt;font-family:"Arial",sans-serif">pne.people.si.umich.edu</span></a><span
style="font-size:9.0pt;font-family:"Arial",sans-serif;color:black"><o:p></o:p></span></p>
</div>
</div>
<p
class="MsoNormal"
style="margin-bottom:12.0pt"><span
style="font-size:9.0pt;font-family:"Helvetica",sans-serif;color:black"><br>
<br>
<br>
<br>
<br>
<br>
<br>
<o:p></o:p></span></p>
</div>
<p
class="MsoNormal"><span
style="font-size:9.0pt;font-family:"Helvetica",sans-serif;color:black"><o:p> </o:p></span></p>
</div>
<p class="MsoNormal"><span
style="font-size:9.0pt;font-family:"Helvetica",sans-serif;color:black"><o:p> </o:p></span></p>
</div>
<p class="MsoNormal"><span
style="font-size:9.0pt;font-family:"Helvetica",sans-serif;color:black"><o:p> </o:p></span></p>
</div>
<p class="MsoNormal"><span
style="font-size:9.0pt;font-family:"Helvetica",sans-serif;color:black"><o:p> </o:p></span></p>
</div>
<p class="MsoNormal"><span
style="font-size:9.0pt;font-family:"Arial",sans-serif;color:black"><o:p> </o:p></span></p>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
<p class="MsoNormal"><span style="color:black"><o:p> </o:p></span></p>
</div>
<p class="MsoNormal"><span style="color:black"><o:p> </o:p></span></p>
</div>
<p class="MsoNormal"><span style="color:black"><o:p> </o:p></span></p>
</div>
<p class="MsoNormal"><span style="color:black"><o:p> </o:p></span></p>
</div>
<p class="MsoNormal" style="margin-bottom:12.0pt"><o:p> </o:p></p>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</div>
</div>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
This email is relayed from members at sigcis.org, the email discussion list of SHOT SIGCIS. Opinions expressed here are those of the member posting and are not reviewed, edited, or endorsed by SIGCIS. The list archives are at <a class="moz-txt-link-freetext" href="http://lists.sigcis.org/pipermail/members-sigcis.org/">http://lists.sigcis.org/pipermail/members-sigcis.org/</a> and you can change your subscription options at <a class="moz-txt-link-freetext" href="http://lists.sigcis.org/listinfo.cgi/members-sigcis.org">http://lists.sigcis.org/listinfo.cgi/members-sigcis.org</a></pre>
</blockquote>
<br>
</body>
</html>