SIGCIS member directory listings are intentionally public, thus harvestable
The mail is clearly not coming via the SIGCIS list. Indeed the sender is not even bothering to fake it – the sender identifies itself as
SIGCIS <mekesb@kobatti.net <mailto:mekesb@kobatti.net> >
so is not even bothering to fake the sigcis.org domain or the correct user name of “members.” Harvesting the names does not require a “back door” into the directory – the directory is a public web page. So presumably some spam engine harvesting names and emails has stumbled across it. (Sidenote: I know some people still try to avoid this by writing out the “at” in their address or adding spaces, but I suspect any self-respecting script creator would long ago have automated the harvesting of names in these formats). Thus the possibility of getting spammed is inherent in having a public member directory. We used to make efforts to keep the directory up to date and produce a print version of those attending SHOT to help members get to know each other without spending the whole lunch meeting on introductions. But that practice has lapsed, and in the age of mobile devices would be of questionable usefulness today. It’s probably been something like seven years since we made a serious effort to edit profiles and reach out to members whose entries were out of date. It might be time to either modernize the directory or take it down entirely. A few years ago some volunteers talked about developing a media availability list on the site, to help direct journalists to subject matter experts willing to give a quick turnaround with quotes. Replacing the current directory with an up to date and focused list of this kind might be a good idea, if anyone is willing to revive the project. Best wishes, Tom From: Members [mailto:members-bounces@lists.sigcis.org] On Behalf Of Paul Edwards Sent: Monday, November 27, 2017 1:32 PM To: members <members@sigcis.org> Subject: [SIGCIS-Members] more SIGCIS spam Importance: High Hi all - I’ve received one spam email from this person via SIGCIS, and now s/he is following up with another. Anyone else being harassed by him/her — or possibly “it”? Given the other recent spam, it’s looking like there is some back door to the member directory. Best, Paul Begin forwarded message: From: "Alexa Austin" < <mailto:alexa.a@telemarketingtech.com> alexa.a@telemarketingtech.com> Subject: RE: SIGCIS Date: November 27, 2017 at 10:02:47 PST To: < <mailto:pne@umich.edu> pne@umich.edu> Hi, Any updates for me on below? Await for your reply. Thanks & Regards, Alexa Austin L i s t | A p p e n d | C a m p a i g n Append Test : Send us 25 to 50 contacts in an excel sheet from your in-house database with missing email address, telephone numbers, fax numbers or mailing addresses, we can append it for you at free of cost, this will help you check the quality of our services. From: Alexa Austin Sent: Monday, November 20, 2017 2:39 PM Subject: SIGCIS Hi, I found that you are a member of “The Special Interest Group for Computers, Information, and Society Directory”. We are the global database service provider. Would you be interested in acquiring potential clients list to market your products and services as per your required location? Would it be Ok if I send you a list of some sample contacts? If yes, please give me your requirement below, and I’ll send you the list for a review. Target Industry? ___________ Target Job titles? ___________ Target locations? ___________ Alternatively please forward this email to the right person in case you are not in charge. Looking forward to see a good client relationship. Thanks & Regards, Alexa Austin L I S T | A P P E N D | C A M P A I G N If you wish not to hear from us again, reply “STOP” in subject line. ————————————————— Paul N. Edwards William J. Perry Fellow in International Security <http://cisac.fsi.stanford.edu/> Center for International Security and Cooperation Stanford University Professor of <http://www.si.umich.edu> Information and <http://lsa.umich.edu/history/> History University of Michigan Contact: m: <mailto:pedwards@stanford.edu> pedwards@stanford.edu w: <http://pne.people.si.umich.edu> pne.people.si.umich.edu
I just did some quick triage and turned off the display of email addresses on the page. The page itself is still public but the addresses should no longer show. Tom raises a good point about modernizing the site and the utility of having an up-to-date public directory. Best, Jason From: Members [mailto:members-bounces@lists.sigcis.org] On Behalf Of Thomas Haigh Sent: Monday, November 27, 2017 2:53 PM To: 'members' <members@sigcis.org> Subject: [SIGCIS-Members] SIGCIS member directory listings are intentionally public, thus harvestable The mail is clearly not coming via the SIGCIS list. Indeed the sender is not even bothering to fake it – the sender identifies itself as
SIGCIS <mekesb@kobatti.net<mailto:mekesb@kobatti.net>> so is not even bothering to fake the sigcis.org domain or the correct user name of “members.”
Harvesting the names does not require a “back door” into the directory – the directory is a public web page. So presumably some spam engine harvesting names and emails has stumbled across it. (Sidenote: I know some people still try to avoid this by writing out the “at” in their address or adding spaces, but I suspect any self-respecting script creator would long ago have automated the harvesting of names in these formats). Thus the possibility of getting spammed is inherent in having a public member directory. We used to make efforts to keep the directory up to date and produce a print version of those attending SHOT to help members get to know each other without spending the whole lunch meeting on introductions. But that practice has lapsed, and in the age of mobile devices would be of questionable usefulness today. It’s probably been something like seven years since we made a serious effort to edit profiles and reach out to members whose entries were out of date. It might be time to either modernize the directory or take it down entirely. A few years ago some volunteers talked about developing a media availability list on the site, to help direct journalists to subject matter experts willing to give a quick turnaround with quotes. Replacing the current directory with an up to date and focused list of this kind might be a good idea, if anyone is willing to revive the project. Best wishes, Tom From: Members [mailto:members-bounces@lists.sigcis.org] On Behalf Of Paul Edwards Sent: Monday, November 27, 2017 1:32 PM To: members <members@sigcis.org<mailto:members@sigcis.org>> Subject: [SIGCIS-Members] more SIGCIS spam Importance: High Hi all - I’ve received one spam email from this person via SIGCIS, and now s/he is following up with another. Anyone else being harassed by him/her — or possibly “it”? Given the other recent spam, it’s looking like there is some back door to the member directory. Best, Paul Begin forwarded message: From: "Alexa Austin" <alexa.a@telemarketingtech.com<mailto:alexa.a@telemarketingtech.com>> Subject: RE: SIGCIS Date: November 27, 2017 at 10:02:47 PST To: <pne@umich.edu<mailto:pne@umich.edu>> Hi, Any updates for me on below? Await for your reply. Thanks & Regards, Alexa Austin L i s t | A p p e n d | C a m p a i g n Append Test : Send us 25 to 50 contacts in an excel sheet from your in-house database with missing email address, telephone numbers, fax numbers or mailing addresses, we can append it for you at free of cost, this will help you check the quality of our services. From: Alexa Austin Sent: Monday, November 20, 2017 2:39 PM Subject: SIGCIS Hi, I found that you are a member of “The Special Interest Group for Computers, Information, and Society Directory”. We are the global database service provider. Would you be interested in acquiring potential clients list to market your products and services as per your required location? Would it be Ok if I send you a list of some sample contacts? If yes, please give me your requirement below, and I’ll send you the list for a review. Target Industry? ___________ Target Job titles? ___________ Target locations? ___________ Alternatively please forward this email to the right person in case you are not in charge. Looking forward to see a good client relationship. Thanks & Regards, Alexa Austin L I S T | A P P E N D | C A M P A I G N If you wish not to hear from us again, reply “STOP” in subject line. ————————————————— Paul N. Edwards William J. Perry Fellow in International Security Center for International Security and Cooperation<http://cisac.fsi.stanford.edu/> Stanford University Professor of Information<http://www.si.umich.edu> and History<http://lsa.umich.edu/history/> University of Michigan Contact: m: pedwards@stanford.edu<mailto:pedwards@stanford.edu> w: pne.people.si.umich.edu<http://pne.people.si.umich.edu>
Thanks, Jason: that's a good first response. FWIW, I still work on the assumption that email obfuscation works, although whenever I've looked for systematic research on the question I've found very little, and what there is is not recent. Anecdotally, my experience is that addresses with a mildly inconvenient level of obfuscation (character entities in the address, mailto link generated by a script) receive little to no spam. A question that's always worth addressing for contact directories, though, is "What are the circumstances that would mean somebody would want to email one of these people without first reading more information about them, such as would be found on their webpage (which will provide a way to email them in any case)?" I took the email addresses off a local staff directory page some years ago for this reason: I couldn't see it being useful for anything *except* scraping for spam targets. Best James On 27 Nov 17 20:01, Gallo, Jason A wrote:
I just did some quick triage and turned off the display of email addresses on the page. The page itself is still public but the addresses should no longer show.
Tom raises a good point about modernizing the site and the utility of having an up-to-date public directory.
Best,
Jason
*From:* Members [mailto:members-bounces@lists.sigcis.org] *On Behalf Of *Thomas Haigh *Sent:* Monday, November 27, 2017 2:53 PM *To:* 'members' <members@sigcis.org> *Subject:* [SIGCIS-Members] SIGCIS member directory listings are intentionally public, thus harvestable
The mail is clearly not coming via the SIGCIS list. Indeed the sender is not even bothering to fake it – the sender identifies itself as
SIGCIS <mekesb@kobatti.net <mailto:mekesb@kobatti.net>>
so is not even bothering to fake the sigcis.org domain or the correct user name of “members.”
Harvesting the names does not require a “back door” into the directory – the directory is a public web page. So presumably some spam engine harvesting names and emails has stumbled across it. (Sidenote: I know some people still try to avoid this by writing out the “at” in their address or adding spaces, but I suspect any self-respecting script creator would long ago have automated the harvesting of names in these formats).
Thus the possibility of getting spammed is inherent in having a public member directory. We used to make efforts to keep the directory up to date and produce a print version of those attending SHOT to help members get to know each other without spending the whole lunch meeting on introductions. But that practice has lapsed, and in the age of mobile devices would be of questionable usefulness today.
It’s probably been something like seven years since we made a serious effort to edit profiles and reach out to members whose entries were out of date. It might be time to either modernize the directory or take it down entirely.
A few years ago some volunteers talked about developing a media availability list on the site, to help direct journalists to subject matter experts willing to give a quick turnaround with quotes. Replacing the current directory with an up to date and focused list of this kind might be a good idea, if anyone is willing to revive the project.
Best wishes,
Tom
*From:* Members [mailto:members-bounces@lists.sigcis.org] *On Behalf Of *Paul Edwards *Sent:* Monday, November 27, 2017 1:32 PM *To:* members <members@sigcis.org <mailto:members@sigcis.org>> *Subject:* [SIGCIS-Members] more SIGCIS spam *Importance:* High
Hi all - I’ve received one spam email from this person via SIGCIS, and now s/he is following up with another.
Anyone else being harassed by him/her — or possibly “it”?
Given the other recent spam, it’s looking like there is some back door to the member directory.
Best,
Paul
Begin forwarded message:
*From: *"Alexa Austin" <alexa.a@telemarketingtech.com <mailto:alexa.a@telemarketingtech.com>>
*Subject: RE: SIGCIS*
*Date: *November 27, 2017 at 10:02:47 PST
*To: *<pne@umich.edu <mailto:pne@umich.edu>>
Hi,
Any updates for me on below?
Await for your reply.
Thanks & Regards,
Alexa Austin
L i s t | A p p e n d | C a m p a i g n
Append Test : Send us 25 to 50 contacts in an excel sheet from your in-house database with missing email address, telephone numbers, fax numbers or mailing addresses, we can append it for you at free of cost, this will help you check the quality of our services.
*From:*Alexa Austin *Sent:*Monday, November 20, 2017 2:39 PM *Subject:*SIGCIS
Hi,
I found that you are a member of*“**The Special Interest Group for Computers, Information, and Society Directory”.*We are the global database service provider. Would you be interested in acquiring potential clients list to market your products and services as per your required location? Would it be Ok if I send you a list of some sample contacts? If yes, please give me your requirement below, and I’ll send you the list for a review.
*Target Industry? ___________*
*Target Job titles? ___________*
*Target locations? ___________*
Alternatively please forward this email to the right person in case you are not in charge.
Looking forward to see a good client relationship.
Thanks & Regards,
Alexa Austin
L I S T | A P P E N D | C A M P A I G N
If you wish not to hear from us again, reply “STOP” in subject line.
—————————————————
Paul N. Edwards
William J. Perry Fellow in International Security
Center for International Security and Cooperation <http://cisac.fsi.stanford.edu/>
Stanford University
Professor of Information <http://www.si.umich.edu> and History <http://lsa.umich.edu/history/>
University of Michigan
Contact:
m: pedwards@stanford.edu <mailto:pedwards@stanford.edu>
w: pne.people.si.umich.edu <http://pne.people.si.umich.edu>
_______________________________________________ This email is relayed from members at sigcis.org, the email discussion list of SHOT SIGCIS. Opinions expressed here are those of the member posting and are not reviewed, edited, or endorsed by SIGCIS. The list archives are at http://lists.sigcis.org/pipermail/members-sigcis.org/ and you can change your subscription options at http://lists.sigcis.org/listinfo.cgi/members-sigcis.org
Now is a good time to be asking these questions as we are in the midst of a moving the SIGCIS web site to an updated version of the Drupal platform. The member profile data is easy to migrate - but I leave it to the community (and perhaps the SIGCIS executive committee) to establish whether the directory should be kept, removed, or reimagined. On a more practical note - it may be the case that the spammers (or spam bots) are harvesting e-mail addresses from the public archives for the members list. These e-mails are very mildly obfuscated, but this could easily be worked around. This could explain why some folks have gotten spam in e-mail addresses different from what is in the directory. Brent ________________________________ From: Members <members-bounces@lists.sigcis.org> on behalf of James Sumner <james.sumner@manchester.ac.uk> Sent: Monday, November 27, 2017 3:36 PM To: members@lists.sigcis.org Subject: Re: [SIGCIS-Members] SIGCIS member directory listings are intentionally public, thus harvestable Thanks, Jason: that's a good first response. FWIW, I still work on the assumption that email obfuscation works, although whenever I've looked for systematic research on the question I've found very little, and what there is is not recent. Anecdotally, my experience is that addresses with a mildly inconvenient level of obfuscation (character entities in the address, mailto link generated by a script) receive little to no spam. A question that's always worth addressing for contact directories, though, is "What are the circumstances that would mean somebody would want to email one of these people without first reading more information about them, such as would be found on their webpage (which will provide a way to email them in any case)?" I took the email addresses off a local staff directory page some years ago for this reason: I couldn't see it being useful for anything *except* scraping for spam targets. Best James On 27 Nov 17 20:01, Gallo, Jason A wrote: I just did some quick triage and turned off the display of email addresses on the page. The page itself is still public but the addresses should no longer show. Tom raises a good point about modernizing the site and the utility of having an up-to-date public directory. Best, Jason From: Members [mailto:members-bounces@lists.sigcis.org] On Behalf Of Thomas Haigh Sent: Monday, November 27, 2017 2:53 PM To: 'members' <members@sigcis.org><mailto:members@sigcis.org> Subject: [SIGCIS-Members] SIGCIS member directory listings are intentionally public, thus harvestable The mail is clearly not coming via the SIGCIS list. Indeed the sender is not even bothering to fake it – the sender identifies itself as
SIGCIS <mekesb@kobatti.net<mailto:mekesb@kobatti.net>> so is not even bothering to fake the sigcis.org domain or the correct user name of “members.”
Harvesting the names does not require a “back door” into the directory – the directory is a public web page. So presumably some spam engine harvesting names and emails has stumbled across it. (Sidenote: I know some people still try to avoid this by writing out the “at” in their address or adding spaces, but I suspect any self-respecting script creator would long ago have automated the harvesting of names in these formats). Thus the possibility of getting spammed is inherent in having a public member directory. We used to make efforts to keep the directory up to date and produce a print version of those attending SHOT to help members get to know each other without spending the whole lunch meeting on introductions. But that practice has lapsed, and in the age of mobile devices would be of questionable usefulness today. It’s probably been something like seven years since we made a serious effort to edit profiles and reach out to members whose entries were out of date. It might be time to either modernize the directory or take it down entirely. A few years ago some volunteers talked about developing a media availability list on the site, to help direct journalists to subject matter experts willing to give a quick turnaround with quotes. Replacing the current directory with an up to date and focused list of this kind might be a good idea, if anyone is willing to revive the project. Best wishes, Tom From: Members [mailto:members-bounces@lists.sigcis.org] On Behalf Of Paul Edwards Sent: Monday, November 27, 2017 1:32 PM To: members <members@sigcis.org<mailto:members@sigcis.org>> Subject: [SIGCIS-Members] more SIGCIS spam Importance: High Hi all - I’ve received one spam email from this person via SIGCIS, and now s/he is following up with another. Anyone else being harassed by him/her — or possibly “it”? Given the other recent spam, it’s looking like there is some back door to the member directory. Best, Paul Begin forwarded message: From: "Alexa Austin" <alexa.a@telemarketingtech.com<mailto:alexa.a@telemarketingtech.com>> Subject: RE: SIGCIS Date: November 27, 2017 at 10:02:47 PST To: <pne@umich.edu<mailto:pne@umich.edu>> Hi, Any updates for me on below? Await for your reply. Thanks & Regards, Alexa Austin L i s t | A p p e n d | C a m p a i g n Append Test : Send us 25 to 50 contacts in an excel sheet from your in-house database with missing email address, telephone numbers, fax numbers or mailing addresses, we can append it for you at free of cost, this will help you check the quality of our services. From: Alexa Austin Sent: Monday, November 20, 2017 2:39 PM Subject: SIGCIS Hi, I found that you are a member of “The Special Interest Group for Computers, Information, and Society Directory”. We are the global database service provider. Would you be interested in acquiring potential clients list to market your products and services as per your required location? Would it be Ok if I send you a list of some sample contacts? If yes, please give me your requirement below, and I’ll send you the list for a review. Target Industry? ___________ Target Job titles? ___________ Target locations? ___________ Alternatively please forward this email to the right person in case you are not in charge. Looking forward to see a good client relationship. Thanks & Regards, Alexa Austin L I S T | A P P E N D | C A M P A I G N If you wish not to hear from us again, reply “STOP” in subject line. ————————————————— Paul N. Edwards William J. Perry Fellow in International Security Center for International Security and Cooperation<http://secure-web.cisco.com/1KRs4dZRZVLQdQW2_vY5UY-ihaYEM2QLFHf6RiAcXxs3i6oX5UwJD16bZIaIXE1b7535aQrSnJ_td4pQqSE5TLk-ue4yR1CGrUq5IVdicbU_9jn0XKaVqB4hhduznQtMVLtolFCoZoY2xPF41utweUPF7ss6iVUJvq6F1PZl6kbWPXKiYDcascet9-_8ryPCsc2JlwUCI2iV4QyGASm133mk30lZLxFon95xnMqb4fvMXkJz0w3FVRHo56B4ww7mNv3WsSoIKMpG3ZcC_Ye4CnDItycZf3mc-kRDpsAgG77EV58p2UtKQ031Y_evN7cFp53ADuhwd5BUOkvkqJ2898JCXD0tP6KSb6mUeeGcgidg/http%3A%2F%2Fcisac.fsi.stanford.edu%2F> Stanford University Professor of Information<http://secure-web.cisco.com/1qW1YGq5vAlUdkvg_Te2ESLASxEF5Wv_ij8w05RAB2yHblb5Pc3UfFAls9BWJOH_GEb3leBVvEGIDaNWAjry-NYdLkst0eAplKvbr7nxLN2ckA82mqDtf8ufMHGuDLx2MxAyzuhavW08S6yOKH-36EAcAolxFd00rRrTGimkdcT3A_u3atxc8mnsXqgmPmW9rUlhas9MlGVKZ2b4kJqcItOMAxj9DacX1Y34uqFHbKghm6CIKoPrLEunQ3Ovlz7g64Vq_i4ah6xVwHaC-4eF4DdJW9n-gy0ar4lE7r0wIawXcya0jBMni8lmE2aruwloK26zpwG1Lk__dUs8Mu9rPz3b-O7md72F1sapKaNPw5PY/http%3A%2F%2Fwww.si.umich.edu> and History<http://secure-web.cisco.com/12J16UxBylPbMha525dxRRiDDPeOMHVCzQWJer-chwRuuEIlIs_moForkqCXBwg9uyIMCE1WgiGHdIXpP2RCXPmf0lIKgpFzeRP4InnJT5pEPwWtcKUnJ1r6vMioJ60wTH_6kY0CXAh1DEqVRT4kSQ6e00GYeIc-J-Tq69o5phKFoIoOmqmzIiZh_NO-UxcFZFLaYNMqzg58voHMAPrmSjJjOft-9G_6hP94oUXsIuD8Ow2C0reJAvLNoniLojae9n2k2aMJK0M7w5Udb6Ax-ri68rL_qgJ09L_8q-wdzCxTgftqbdAYXO70TFQk-sojSNNaDGbk_rW_vr41HAHfhpnlI7Ca7lbzl2eYFiGVex-Y/http%3A%2F%2Flsa.umich.edu%2Fhistory%2F> University of Michigan Contact: m: pedwards@stanford.edu<mailto:pedwards@stanford.edu> w: pne.people.si.umich.edu<http://secure-web.cisco.com/1_BGyDQb2HHLjmX-rCs2mc-OBMg_F0JO5b4YY4lB1j0d6rFMTYXE2uErYqOk9eCvO1rBGhIbEcc21CqM9XuoJtAjuPEPxZEVaiFQ5Bxq8gwJrtISoPYvT01ywDZbfIdL52AwWUoZ0KqKek9i0CxuyjhsahtgjLDqNj29h5ivB1NXCAnynuvyui6zXNl86uTWyIo17pcAQ2lgZTt5FQDz5tWn7DiKRUDkPvghilTiBjJ4o9eVpSNpDTvhlrWFS5T6Q7ZPoqFLDTYy4r36hfZhi7OjDrOWDkXBwEl59_RBSlAriCai955gblAGXIFugzE0t4irKAOw3N7U4Qc8m3E-8Y5F1at0ZpJQKr6pJGdkN8BI/http%3A%2F%2Fpne.people.si.umich.edu> _______________________________________________ This email is relayed from members at sigcis.org, the email discussion list of SHOT SIGCIS. Opinions expressed here are those of the member posting and are not reviewed, edited, or endorsed by SIGCIS. The list archives are at http://lists.sigcis.org/pipermail/members-sigcis.org/<http://secure-web.cisco.com/1SDZ7b_DznltjKoLVz9D9jvGuupFtuHq0NkQkmBZkE7712SE5MOhE5-hoROfDk_7IrYM-FHjKtX4ze6Nd8EylxDXFzWGfALr1OhibCrHo3wA7U4-BCbrH5p90vkUEUJVuw9PNxkDZq0e4Fy3C7bAbRQqB3OokxVQM6JzOhXMIaHBbdLhXwn693hTgzbvYUuoQC_FufVMZSHqeUoXidMo1Kn2-e3lv2YB75rxgM5hSQttX3fww4El9pjFyQhliSLz-o4UHSRHD18qdaK1RUsqJPMtdIODEGGaNJa5_QjG4kO1xxjaChrQSPzERHOqASjxAlpULeFil_DMCDMHcsE2PpQfCEizgpm3GBriy6xnbh6I/http%3A%2F%2Flists.sigcis.org%2Fpipermail%2Fmembers-sigcis.org%2F> and you can change your subscription options at http://lists.sigcis.org/listinfo.cgi/members-sigcis.org<http://secure-web.cisco.com/1MVsvJeo9v5zeb6pJV7iEVIKAn7cDSI4I3Y78DUTpRS3iAp0rxNic8ZZofpKQTMvvrJ_ny0f-w99iFLU5adNoxtWuyhGMYRYIFB8AJ8FriTfarUaXy8XhoqyAnbMFUXFVoR7l8U2LmUb9tCLd8WyoUVhUIsl2ASk4YoXxiihDFe3DuFgBRn07TSezY6ikFuOBKGtm-28RyADOVl99N1ob0MS_QRdZpfMJLDAsVeYzeydab7T_IHAkuJEjsYhGXM8DnQq6d8ThI6udIe0ClBBaP_nOh7uwC8dBxvL6GQJ1gRiCvhZQBoLHlFt29A_0AqzsWY4m1v19cpaneHWdroX0VhsRLY0oge_bFYUkf2yIG_w/http%3A%2F%2Flists.sigcis.org%2Flistinfo.cgi%2Fmembers-sigcis.org>
participants (4)
-
Gallo, Jason A -
James Sumner -
Jesiek, Brent K -
Thomas Haigh