You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@spamassassin.apache.org by bu...@bugzilla.spamassassin.org on 2008/06/14 08:12:30 UTC
[Bug 5921] New: HABEAS_ACCREDITED_COI in spam
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=5921
Summary: HABEAS_ACCREDITED_COI in spam
Product: Spamassassin
Version: 3.2.5
Platform: Other
OS/Version: Linux
Status: NEW
Severity: normal
Priority: P2
Component: Rules
AssignedTo: dev@spamassassin.apache.org
ReportedBy: craig@myittybitty.com
CC: craig@myittybitty.com
See attached.
--
Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
[Bug 5921] HABEAS_ACCREDITED_COI in spam
Posted by bu...@bugzilla.spamassassin.org.
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=5921
--- Comment #5 from Sidney Markowitz <si...@sidney.com> 2008-06-18 16:04:31 PST ---
I found a hole ArcaMax's double-opt-in subscription procedure that would have
allowed OriginData to sign you up without your knowledge. Considering that
OriginData's web site sys that they are in the business of getting leads for
marketing companies, that is not so far fetched.
The hole is that when you log in to ArcaMax's site you can change your email
address with no confirmation/activation request sent to the new address. At
least when I tested that just now I received none. I won't know for sure that I
am receiving Arcamax newsletter mail to the new address until probably some
time tomorrow.
In any case, this is something you can bring to Habeas' attention so they can
work it out with ArcaMax and/or ReturnPath (the PostmasterDirect people who
apparently manage ArcaMax's mail services).
--
Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
[Bug 5921] HABEAS_ACCREDITED_COI in spam
Posted by bu...@bugzilla.spamassassin.org.
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=5921
Theo Van Dinter <fe...@apache.org> changed:
What |Removed |Added
----------------------------------------------------------------------------
Status|NEW |RESOLVED
Resolution| |INVALID
--- Comment #3 from Theo Van Dinter <fe...@apache.org> 2008-06-14 12:25:36 PST ---
Bugzilla is not the reporting agency for Habeas. Please use
http://seal.habeas.com/Company_Feedback.php or send the mails to
complaints@habeas.com.
Based on my past experience (having met their folks personally) and recent
bugs/mail threads where they were responsive, things appear to be working as
intended.
--
Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
[Bug 5921] HABEAS_ACCREDITED_COI in spam
Posted by bu...@bugzilla.spamassassin.org.
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=5921
--- Comment #4 from Craig Shaver <cr...@myittybitty.com> 2008-06-18 13:07:37 PST ---
This is spam and I have followed up with Habeas. Not a spamassassin problem.
FYI, Habeas is being used as cover for a spammer. Here is the proof:
Mandy Fu wrote:
> Hello Craig,
>
> My apologies for assuming everyone understands all this bulk mailers
> lexicon...
>
> Basically the sender is stating that you did opt in for the email
> communication via a 3rd party registration. And you opted in for it on
> 6/7/2008 9:52:31 PM and the IP address you were using during the
> registration is 216.27.67.70. The 3rd party where Arcamax received the
> subscriber (that's you) information from is at the Postmaster Direct
> network (http://www.postmasterdirect.com/signup_page.html). The
> Postmaster Direct network confirms all subscribers requests, which means
> you had to confirm via an email that you did indeed opted in to received
> the initial abuse message you've reported.
>
> However if the information is incorrect, you will work with Arcamax on
> correcting it.
>
> Kind regards,
> Mandy
To which I replied:
>Bogus alert!
>
>This address was never seen by me at any time. I did not confirm this
>subscription.
>
>216.27.67.70 is 70.67.27.216.in-addr.arpa domain name pointer
>leadgen01.origindata.com
>
>The email that was used is craig@progroup.com, which is no longer in active
>use for real mail. It has become a honey pot so to speak.
>
>Why would leadgen01 subscribe me to arcamax.com? Do they get paid for lead >generation by arcamax.com? I still think arcamax.com is a spammer and you are >being used to cover for them.
>
>This is spam and I never signed up for it. Please remove them from your >accreditation service.
>
>Thank you Mandy! :)
This is spam and I have followed up with Habeas. Not a spamassassin problem.
--
Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
[Bug 5921] HABEAS_ACCREDITED_COI in spam
Posted by bu...@bugzilla.spamassassin.org.
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=5921
--- Comment #6 from Craig Shaver <cr...@myittybitty.com> 2008-06-20 11:10:06 PST ---
Habeas has contacted arcamax and arcamax has implemented ??? to prevent abuse.
Per Mandy Fu at Habeas:
Hi Craig,
Thank you again for providing valuable feedbacks on your observations.
Arcamax has implemented some tools to further prevent abuse and better
list management. Please feel free to send suspected spam again to
complaints@habeas.com and we'll investigate and take appropriate
actions.
Kind regards,
Mandy
-----Original Message-----
From: Mandy Fu
Sent: Thursday, June 19, 2008 12:04 AM
To: 'craig@MyIttyBitty.Com'
Subject: RE: [Fwd: [Bug 5921] HABEAS_ACCREDITED_COI in spam]
Thanks Craig. We are working with Arcamax on securing their opt-in
process and in addition 3rd co-registrations. We kindly thank you for
all this information and will update you on the progress of this.
Kind regards,
Mandy
-----Original Message-----
From: Craig Shaver [mailto:craig@MyIttyBitty.Com]
Sent: Wednesday, June 18, 2008 4:33 PM
To: Mandy Fu
Subject: [Fwd: [Bug 5921] HABEAS_ACCREDITED_COI in spam]
FYI
-- Craig Shaver, My Itty Bitty Dot Com 140 Acalanes Dr. #125, Sunnyvale, CA
94086, 650-390-0654 http://www.myittybitty.com/ mailto:craig@myittybitty.com
--
Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
[Bug 5921] HABEAS_ACCREDITED_COI in spam
Posted by bu...@bugzilla.spamassassin.org.
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=5921
--- Comment #7 from Sidney Markowitz <si...@sidney.com> 2008-06-20 15:37:00 PST ---
(in reply to comment #6)
> and arcamax has implemented ??? to prevent abuse
It doesn't seem fixed yet, as I just changed an email address again and it
changed with no confirming email. I have also sent a complaint to Habeas with
details about how I was able to subscribe one test email address with no
confirmation by using another test email address and a change of email address
request, referencing this bug report. I'll test again when there is some
response.
--
Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
[Bug 5921] HABEAS_ACCREDITED_COI in spam
Posted by bu...@bugzilla.spamassassin.org.
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=5921
--- Comment #1 from Sidney Markowitz <si...@sidney.com> 2008-06-14 06:07:12 PST ---
The attachment seems not to gave made it here.
--
Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
[Bug 5921] HABEAS_ACCREDITED_COI in spam
Posted by bu...@bugzilla.spamassassin.org.
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=5921
--- Comment #2 from Craig Shaver <cr...@myittybitty.com> 2008-06-14 11:03:10 PST ---
Created an attachment (id=4330)
--> (https://issues.apache.org/SpamAssassin/attachment.cgi?id=4330)
another HABEAS_ACCREDITED_COI in spam
Lots more in my accumulated FN file.
--
Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.