Guest Visitors  can view our profiles and send us emails !! what ?  - Page 1
Forum section: electronics / general

author: Kiriakos-GR
author_rank: Super Contributor
timestamp: November 05, 2011, 11:14:04 pm
content: Believe it or not , I never had visit the local stats link , so to see who is online .And I did today, and at my surprise there was 30 of the 70 Guests that was viewing the profiles of the registered members.And my curiosity made me to log out and see what a Guest can see.They can see everything .. other than the email address, but still are capable to send you an email with out to even log in,and the sender address shows as :example@mail.comm [dave@eevblog.comm]extra m added to confuse bots.The senders email it could be even fake, because the email comes from the EEV server to you , and it up to any one to write as sender email address what ever he likes.And the point is that I did receive an spam email with this characteristics, and I did reported it publicly.Well I do not wish my profile to be that public.Every one can see my stats / my posts / or contact me / or spam my email box/ or have fun with it.

author: EEVblog
author_rank: Unknown
timestamp: November 05, 2011, 11:27:40 pm
content: I've now disabled the ability of Guests to see profiles.I don't see an option for anything to do with sending messages...Dave.

author: Unknown
author_rank: Unknown
timestamp: November 06, 2011, 01:06:52 am
content: Quote from: EEVblog on November 05, 2011, 11:27:40 pmControl of messages in an individual thing set up in each users profile. Each user can manage how and from who the receive PMs or emails.There has been a lot of guest activity scanning profiles. Most will be spam bot. If people don't want their email to be public they shouldn't have made it available in the first place.Sometimes you must wonder if your running a forum or a creche.

author: Simon
author_rank: Unknown
timestamp: November 06, 2011, 11:34:49 am
content: there is an option in your profile to hide the email address. Personally I have left mine visible and have not had any serious spam issues. You will get some spam not matter what you do because the bots will also just send to any random combination that makes up an email address nothing to do with this forum. unfortunately forum software is not always a breeze to manage and some options that you would hope are sensible to have set often are not by default. self awareness is the best tool against spam.If you are whittling about one spam email i suggest you grow up and understand what being n the internet entails, personally i am getting pissed off with antispam measures as i often get my emails rejected as spam when I am trying to contact friends.I'd love to see some collective government action on the internet and spam as a lot of the issues on the net rely on the perpetrator operating out of a country that don't give a rats ass that it's citizens are international criminals on the net.

author: Kiriakos-GR
author_rank: Super Contributor
timestamp: November 06, 2011, 02:24:20 pm
content: Quote from: EEVblog on November 05, 2011, 11:27:40 pmThanks Dave.

author: Bored@Work
author_rank: Super Contributor
timestamp: November 06, 2011, 02:35:15 pm
content: Quote from: Simon on November 06, 2011, 11:34:49 amGiven that something like 80% to 90% of all emails on the Internet are spam you would be much more annoyed without anti spam measure. You would literally beg people to put them back if they all would be turned off at once.

author: Simon
author_rank: Unknown
timestamp: November 06, 2011, 02:42:14 pm
content: yes but when I can't reply to an email a friend sends me we have sort of defeated the object ! something should be done about the people sending the messages not just the emails. we have gone from blacklisting to white listing. this means that you have to get recognised before you can email rather than you will just get banished if your a known spammer. I have had no end of "fun" with all microsoft run email services and declare them the biggest assholes around as they have totally the wrong approach. I am not the only person to have this problem with them, sadly all of my friends have hotmail and live email addresses. I don't get loads of spam on my own emails that are off my own domains and no issues on my yahoo account, so what the hell is microsfts problem ? apart from damned incompetence

author: Balaur
author_rank: Unknown
timestamp: November 06, 2011, 02:48:07 pm
content: Quote from: BoredAtWork on November 06, 2011, 02:35:15 pmI have never received several important messages from specific legitimate senders because of aReverse DNS Checkwhich is a common anti-spam technique (our server was configured like this). Moreover, the sender wasn't noticed. This caused some troubles, unfortunately.The same configuration forbade me to send mails whenever I was in some public networks, forcing me to use VPN.I feel that a content filtering system that adds the SPAM tag(s) in the message header is much more useful since I can control the way my mailbox deals with the emails, as opposed to the server taking the decision to transparently reject the email instead.

author: ivan747
author_rank: Super Contributor
timestamp: November 06, 2011, 02:51:33 pm
content: Quote from: BoredAtWork on November 06, 2011, 02:35:15 pmNope. Even if they put them back, it would be too late. Your email would be floating around the internet.

author: Simon
author_rank: Unknown
timestamp: November 06, 2011, 02:59:54 pm
content: listen my address is simon at simons photography.org.uk, now the flipping bots come across my domain and then try every combination of address on that domain so it is not exactly a secret, I don't know what measures are currently in place obviously there is the black list system that stops any known crap from getting to me and i get a bit of junk each day, given the amount of stuff I'm signed up for I have more of a chance that my email address was leaked anyway. I would totally be against my provider putting a whitelist system in place, it would completely defeat the object of having an email address. If other providers can get it pretty good why do microsoft have to do their usual - do it different and worse ! I have to continually get my addresses approved by microsoft and have to hope that my hosting company have done their home work

author: Kiriakos-GR
author_rank: Super Contributor
timestamp: November 06, 2011, 03:43:59 pm
content: Well there is always the other side of the same coin, speaking about personal data of forum members.I can say that I have fall as span victim from two Greek forum communities, their despaired for cash owners, sold out the members email database,to greedy marketers.The result .. they turnfromhigh populated forums in to a desert area, in just two weeks.

author: Bored@Work
author_rank: Super Contributor
timestamp: November 06, 2011, 03:51:04 pm
content: Maybe I am old fashioned. I don't believe important messages belong in e-mail. Consequently I have no qualms filtering on my primary e-mail addresses. I have whole geographical regions, like Eastern Europe and China, blacklisted.And I also believe those who don't manage to set up their server in line with what is custom on the Internet should not operate a server. If they try, natural selection will sooner or later get them. I.e. the weak will perish.

author: Simon
author_rank: Unknown
timestamp: November 06, 2011, 04:03:08 pm
content: well given the amount of exposure my email address has I only get a small amount of spam by comparison. I have a moderate spam filter setting on my incomming emails and let thunderbird do the rest.

author: GeoffS
author_rank: Unknown
timestamp: November 06, 2011, 11:55:42 pm
content: I try to use a unique email address for every forum I I sign up for . That way, when I get spam, I can track down where it's coming from (well not the actual sender but where the email address was harvested).

author: Balaur
author_rank: Unknown
timestamp: November 07, 2011, 12:12:00 am
content: Quote from: GeoffS on November 06, 2011, 11:55:42 pmGmail has a quite useful feature where you can use "address+something@gmail.com" as an alias to your main "address@gmail.com" account.Example:"superman+eevblog@gmail.com" is equivalent to "superman@gmail.com"You can then use filters on your messages to put the emails on the relevant folders.When you create or modify on a site/forum/whatever, use the superman+eevblog@gmail.com. This way, it becomes very easy to discover which of the sites has distributed your email address since if you will receive the spams addressed to that specific address.Cheers,Dan

author: Unknown
author_rank: Unknown
timestamp: November 07, 2011, 12:43:46 am
content: Until enough people start doing this so it becomes worthwhile for the spammers to just strip everything after the plus or change it to some random string.

author: IanB
author_rank: Super Contributor
timestamp: November 07, 2011, 03:19:56 am
content: Quote from: Balaur on November 07, 2011, 12:12:00 amThis would be fantastic, except clueless morons have since taken over the Internet. I have a hard enough time with the message:Error! Email addresses may not contain "."--which often happens when I try to enter firstname.lastname@somedomain.comSo you can imagine the following message is rather ubiquitous:Error! Email addresses may not contain any punctuation! You cannot use "+" in your email address! It is invalid!Sometimes I wish I could get hold of the morons who write online software and strangle them.

author: Simon
author_rank: Unknown
timestamp: November 07, 2011, 08:00:46 am
content: Quote from: alm on November 07, 2011, 12:43:46 amwell they probably already do that, like i said I'm sure much of my spam is people who have gotten hold of the domain name and are just putting every possibly name in front and then trying any other random combination.

author: Unknown
author_rank: Unknown
timestamp: November 07, 2011, 09:39:48 pm
content: Quote from: IanB on November 07, 2011, 03:19:56 amI sometimes cite the last chapter of Mastering Regular Expressions 1st edition which features an extremely long regular expression (800 characters?) which validates e-mail addresses according to the applicable RFC. Yes, it's stupid to do this kind of verification, since you can easily send a verification e-mail and do a much more thorough check.Quote from: Simon on November 07, 2011, 08:00:46 amI mean changing simon+eevblog@example.com to simon@example.com or simon+info@example.com, which would defeat any eevblog-specific filters.