rty opened this issue on Feb 16, 2007 · 130 posts
rty posted Fri, 16 February 2007 at 2:00 PM
Mail adresses used on this site, and only (exclusively) on this site (not only me, I know about two other cases), have started to recieve spam. What happened?
The spam (always the same), comes from "Walinda Textile lilewoo_md@yahoo.com.cn", and goes like this:
"Dear Sir/Madam,
It is my pleasure to write you in respect of our Company Wujiang Wanlida Textile Co., Ltd.
Based No.6 The Third District Nanshan Road, Shengze, Wujiang City, Jiangsu Province. China. We are experts in the sale of Textile materials; we export into the Canada/America and parts Europe. We are searching for representatives who can help us establish a medium of getting our funds from our costumers in these areas..."
and so on, a classic scam know as nigerian scam (we need someone to handle money for us, you'll get some, but you'll have to pay some unexpected expenses).
The question is, how have those scammers got hold of addresses only Renderosity is supposed to know?
XENOPHONZ posted Fri, 16 February 2007 at 2:04 PM
Professional spammers only have about a gazillion different methods of getting their grubby little hands onto your e-mail address. Not all of those methods involve hacking a website.
BTW - that sounds like a great deal to me! Where do I sign up?
rty posted Fri, 16 February 2007 at 2:09 PM
Funny, but the question is, how did they get their "grubby little hands" on an address specially created for Rendo, on private mail servers, and only used here?
XENOPHONZ posted Fri, 16 February 2007 at 2:25 PM
Anytime that e-mail is used, it makes its way over many different servers before it arrives at its destination. The e-mail address in question can be "collected" at any of those points along the way. Not to mention that the content of the e-mail itself can be read by who-knows-who.
I've heard it said that e-mail is a postcard. And the address on the card is not hidden from anyone who bothers to look at it.
Encryption might help to keep the contents of an e-mail private. But I know of no way to encrypt an e-mail's address -- outside of spoofing an account or else zombifiying other machines. In which case the e-mail address hasn't been encrypted -- it's just been stolen.
matrix03 posted Fri, 16 February 2007 at 2:25 PM
I got one of these today myself and posted a thread about it prior to seeing this one.
I set up an email address specifically to be used for my account here at rendo.
how is it possible for a spammer to obtain our email addresses if they are hidden without someone hacking this site?
BAR-CODE posted Fri, 16 February 2007 at 2:42 PM
How to get a email adres ... well 1000.000 ways without hacking this site..
Even when you made a email adres specialy for this site ..
That will not say that your emails to and from this site can not be rerouted to other servers not in control by R'O.
Simply your ISP can use a router server that is using a leaking system..
For a example : i had some email adresses with Tiscali.. Tiscali is a REAL big ISP in the world.
Now i get email "spam" true a tiscali server Tiscali.IT ..but tiscali cant help that and its not even tiscali who is sending them true to me...
So before you say R'o is hacked or leaking or what ever you try to tell ...check that you know enough of the technical mater to state this kind of things..
R'O leaking the emails is like killing your golden chicken...
R'O being hacked ... well i think when that is the case we will get noticed within a Hour...
Chris
EDIT and i forgot ..maybe you got spyware on your computer ....
IF YOU WANT TO CONTACT BAR-CODE SENT A PM to 26FAHRENHEIT "same person"
Chris
JenX posted Fri, 16 February 2007 at 2:46 PM
Quote - Anytime that e-mail is used, it makes its way over many different servers before it arrives at its destination. The e-mail address in question can be "collected" at any of those points along the way. Not to mention that the content of the e-mail itself can be read by who-knows-who.
This is how points up at quoted section.
When you receive an email, or ebot, etc., it starts...let's say on a Rendo machine.
Then, it journeys to the local ISP (if you're lucky).
Depending on where in the world you are from there, it could hit hundreds of places before it gets to you.
And, those hit points...they don't have to delete your email if they don't have a policy to do so (most ISP's, in fact, don't).
However, yes, it is possible (though not probable) that someone hacked rendo simply to spam people. In any case, just flag the email as spam, and delete it. Because, in all reality, it's only a matter of time before they create viable "autodialers" for emails.
Sitemail | Freestuff | Craftythings | Youtube|
Knowledge is knowing a tomato is a fruit. Wisdom is not putting it
into a fruit salad.
Hawkfyr posted Fri, 16 February 2007 at 3:52 PM
When I moved here (North Carolina) I had to get a new ISP (Cable).
I had to create a username and password.
That username became my e-mail address...(Username@newisp.net) because it was required by my ISP to set up my Broadband Service
But I've had my own domain since....what...1998?...maybe 1999? (I've moved from Maryland...to Connecticut, then to NC in that time...yet my E-mail address has remained the same)
So I didn't need that e-mail address from the ISP...so I NEVER used it...Not once did I send an e-mail through that account, nor did I use it to sign up at any site.
I never even gave that e-mail address to anyone(Verbally or Non-Verbally)...It only existed because my ISP required it to set up my internet service.
But it is set up in Outlook, although It doesn't really need to be...I just keep it alive in the event my ISP decides to send me information regarding my account...(after all.."THEY" are the only ones who have that address...Right?)
So that ISP account gets checked along with every other e-mail account I have set up such as "My" domain e-mail addresses...and some client's account's (Webmaster@Clients_domain.com for example.) and filtered appropriately to their respective folders.
But guess what?...even though I've never used my ISP provided e-mail address... Never Sent, E-mail from it...Never used it to sign-up at any site...nor verbally / non-verbally gave it to anyone...."I Still Get SPAM sent to that E-Mail address"...And have since I was "required" to have it in order to get service over 3 years ago.
So...here is an e-mail address..that was "NEVER USED"...yet still gets SPAM.
SO...as mentioned by many in this thread...there are thousands of ways for your e-mail address finds it's way into a spammers database.
Perhaps the other possibilities should have been researched further before posting the question.
The title of this thread, even though phrased as a question, is a bit "Sensationalistic" IMHO.
Tom
“The fact that no one understands you…Doesn’t make you an artist.”
Hawkfyr posted Fri, 16 February 2007 at 4:03 PM
Sorry for multiple edits to that last post...Font sizes and typefaces took on a life of thier own for some reason.
Tom
“The fact that no one understands you…Doesn’t make you an artist.”
gillbrooks posted Fri, 16 February 2007 at 4:54 PM
Dear Sir/Madam,
It is my pleasure to write you in respect of our Company Wujiang
Wanlida Textile Co., Ltd.
Based No.6 The Third District Nanshan Road, Shengze, Wujiang City,
Jiangsu Province. China. We are experts in the sale of Textile
materials;
we export into the Canada/America and parts Europe.
We are searching for representatives who can help us establish a medium
of getting our funds from our costumers in these areas as well as
making payments through you to us.
Please if interested in transacting business in view helpings us, so
our clients could make payment to you being a representative for us we
will be very glad and compensations will be given and as well as other
benefits.
Subject to your satisfaction you will be given the opportunity to
negotiate your mode of which we will pay for your services as our
representative/agent in Canada, America, and Europe.
BELOW IS OUR COMPANY HEADQUARTER
Wujiang Wanlida Textile Co., Ltd.
If interested forward information below to us
1.FULL NAMES: 2.RESIDENTIAL ADDRESS:
3.SEX: 4.AGE:
5.PHONE NUMBER: 6.FAX NUMBER(IF ANY):
7.OCCUPATION: 8.COMPANY NAME:
9.COMPANY ADDRESS: 10.NATIONALITY:
11.PRESENT COUNTRY: 12.STATE/PROVINCE:
13.Zip Code:
Reply to Company:lilewoo_md@yahoo.com.cn
Note that no form of payment will be requested upfront in this
endeavor.
On our receipt of the above details we shall forward to our
customer/clients to immediately contact you with the mode of payment.
Kindest Regards,
Mr.Lile Woo,
Company Directors.
Gill
rty posted Fri, 16 February 2007 at 5:14 PM
So before you say R'o is hacked or leaking or what ever you try to tell ...check that you know
enough of the technical mater to state this kind of things..
Well, I probably know enough given it's with computers and networks that i make my living and finance my Poser addiction. And that's over 10 years I'm doing this; So I probably know as much, if not more, than most people here.
Anyway, before we drift OT to "mine is bigger than your's" type discussions - my question is:
How comes several different people, using different domains (most private), recieve the same day the same spam mail on the address they only use for Renderosity mail?
And Hawkfyr, I admit the title is made to catch attention. Because, while I don't really care if my Renderosity address is spammed (I can make a dozen new ones in the time it takes to telnet to my mail servers), if (that's an "if" (means I'm worried, in case people didn't notice)) there is a problem with Renderosity, it could mean much worse thing than just recieving a chinese 419ers e-mail.
rty posted Fri, 16 February 2007 at 5:20 PM
I have had 2 of these today
gillbrooks, thank you. Makes 5 cases of people who recieved the same spam mail on a Renderosity-only address today.
Spyware, huh?
Well, I wonder what spyware can be trimmed to steal Renderosity-specific addresses only...
gillbrooks posted Fri, 16 February 2007 at 5:25 PM
Yep, a rendo exclusive email address that is not on any readme or given out to anyone.
Gill
XENOPHONZ posted Fri, 16 February 2007 at 5:33 PM
And as has been pointed out by several already -- there are lotsa ways for 5 people to get the same spammer's e-mail. Ways which have nothing to do with the website being hacked.
I wouldn't jump to conclusions. Certainly not off of the example of 5 people out of 1000's. Those Nigerian scam e-mails have managed to find their way into the mailboxes of millions.
I once had an e-mail account which was somehow spoofed by spammers. I knew because I started receiving rejected mail back -- mail which I had never sent out. Usually mail advertising stuff. Needless to say, I canceled that account.
rty posted Fri, 16 February 2007 at 6:01 PM
And as has been pointed out by several already -- there are lotsa ways for 5 people to get the
same spammer's e-mail.
Yes, XENOPHONZ, it has been "pointed out", but not explained. Still waiting for an explanation which actually tries to explain something, and which goes further than the good old "it's you computer"... :-D
I don't jump to conclusions, I just try to understand; If I was jumping to conclusions I would be phoning my bank, killing my credit card and waiting till the decontamination crew has gone through the site...
But the coincidence is disturbing. One account can be compromised. But (at least) five? No, it's not the usual "spam happens" explanation here.
Khai posted Fri, 16 February 2007 at 6:08 PM
you got 'Shotgunned'
the spammer's gone onto an unsecured mail server or their own, with a little program that sends out the spam to a@a.com. a@b.com etc etc etc until say zzzzzzzzzzzzzzz@zzzzzzzzzzzzzzz.com
they got you on the way thats all... they don't care if the account is actually in existance.. the bounces hardly ever get back to them anyway. don't cost them anything to send a few million emails at a time...
JHoagland posted Fri, 16 February 2007 at 6:11 PM
Another way for spammers to get your address is to legitamately purchase it. They buy a list which was purchased from a site who purchased it from a site who bought it from Yahoo or Hotmail.
After all, one of the biggest assets for sites like Yahoo, MSN, and Hotmail is their list of active, real e-mail addresses. If they can get even 5 cents per e-mail, they could probably get $200,000 or more... which always makes the accounting people very happy.
VanishingPoint... Advanced 3D Modeling Solutions
rty posted Fri, 16 February 2007 at 6:20 PM
the spammer's gone onto an unsecured mail server or their own, with a little program that sends
out the spam to a@a.com. a@b.com etc etc etc until say zzzzzzzzzzzzzzz@zzzzzzzzzzzzzzz.com
Could have been, but in this case wasn't. Because I administer 6 domains, with as many spam filters (and a minimum of a score users in each), and nobody else than my Renderosity address got this specific spam. But - Other people, strangers, on other servers, on other domains, got the same mail, but also only on their Renderosity account.
So your explanation reads "with a little program that sends out the spam from a@a.com to z@z.com, only if the resulting random address is valid on Renderosity". Quite a clever proggy, isn't it...
No, there are 3 points which make the whole thing look strange:
Khai posted Fri, 16 February 2007 at 6:23 PM
ok your in a bad mood. fine. but please take out one someone else, I just love attitude. sorry for trying to help.
rty posted Fri, 16 February 2007 at 6:25 PM
Another way for spammers to get your address is to legitamately purchase it. They buy a list
which was purchased from a site who purchased it from a site who bought it from Yahoo or
Hotmail.
Yes, you're right of course, but please, people, read the question before replying... sigh
We're speaking about private domains, owned and managed by the users themselves (at least in 3 of the 5 cases), not about some Hotmail accounts. I'm quite sure I didn't sell my private domain's e-mail addresses to anybody, and I can say as much for two others.
rty posted Fri, 16 February 2007 at 6:30 PM
ok your in a bad mood. fine. but please take out one someone else, I just love attitude.
sorry for trying to help.
I am indeed in a bad mood, and I apologise for it. But I am submitting a problem to the general community, and all I get is answers which tend to prove that nobody reads what I wrote.
Yes, I know the 1001 ways to get spammed. What i want to know is why Renderosity-only adresses got this spam.
gillbrooks posted Fri, 16 February 2007 at 7:15 PM
Quote - Another way for spammers to get your address is to legitamately purchase it. They buy a list which was purchased from a site who purchased it from a site who bought it from Yahoo or Hotmail.
After all, one of the biggest assets for sites like Yahoo, MSN, and Hotmail is their list of active, real e-mail addresses. If they can get even 5 cents per e-mail, they could probably get $200,000 or more... which always makes the accounting people very happy.
Mine is not a yahoo/hotmail addy either - it is renderosity@mysite.com
'mysite' being one of the 5 domains I currently own.
Gill
JenX posted Fri, 16 February 2007 at 8:46 PM
well, before you go off the handle, rty, I have 3 non-Rendo email addresses, that are used only for specific clients, that got that spam message.
So, no, I still don't think that rendo got hacked.
Sitemail | Freestuff | Craftythings | Youtube|
Knowledge is knowing a tomato is a fruit. Wisdom is not putting it
into a fruit salad.
JeniferC posted Fri, 16 February 2007 at 8:49 PM
Attached Link: http://www.renderosity.com/homepage.php
Did you know that from the artist homepages anyone can send you an email? It could be that, or many other possibilities.
XENOPHONZ posted Fri, 16 February 2007 at 11:47 PM
I've got the feeling that the only answer which will satisfy here is: "Yes! Renderosity got hacked! Let's all panic together now!"
Spam don't bother me none. It just goes into the "Junk" folder. The spam comes in such a myriad of different ways that I'm not going to kick off by making assumptions about the source -- or about how they obtained my e-mail address.
Now if strange charges from Brazil or Thailand start appearing on your CC -- I'd say that then you'd have something to worry about.
gillbrooks posted Sat, 17 February 2007 at 5:41 AM
Quote - Did you know that from the artist homepages anyone can send you an email? It could be that, or many other possibilities.
Yes, there is that possiblitly - so I have just created a new email account on one of my other domains and changed it in my profile - so if I continue to get these spam mails to my old rosity email address it would rule that out.
Gill
DonaldZ posted Sat, 17 February 2007 at 6:59 AM
If Rosity got hacked for its email addresses you would think they would use more than five to send spam to.
gillbrooks posted Sat, 17 February 2007 at 8:08 AM
I'm sure they're sending to many if not all, but how many people here use the same email for everything? They wouldn't notice because they no doubt get spam from everywhere else.
There may be more than 5 people - not everyone subscribes to or reads forums. There are probably onloy a small number of people who create specific accounts for use with this website only.
Also, further to my last post - I'm getting ebots to my newly created address now, but I am STILL getting those spam messages to my old account - the latest being telling me I've won the lottery. Therefore, this discounts the idea that someone is spamming us through the 'send email' option on this site.
Gill
Khai posted Sat, 17 February 2007 at 2:26 PM
"
so if I continue to get these spam mails to my old rosity email address it would rule that out."
erm no... flawed logic there old chap. they have that address.. so they'll keep spamming it. so, getting emails to that address only proves they are still spamming.. not that they used the Send Email option... (if they used the send email option, not using it, proves they ain't been to your profile yet...)
gillbrooks posted Sat, 17 February 2007 at 4:00 PM
Quote - "
so if I continue to get these spam mails to my old rosity email address it would rule that out."erm no... flawed logic there old chap. they have that address.. so they'll keep spamming it. so, getting emails to that address only proves they are still spamming.. not that they used the Send Email option... (if they used the send email option, not using it, proves they ain't been to your profile yet...)
I was replying to the suggestion of spammers coming to this site and using the send mail option on artists homepages and as that now sends to my newly created account then I am correct and it does rule out that possiblity. They could not have got my address by using the send mail option - that was my point.
Ooh, and I ain't that old and certainly not a chap LMAO!!!
Gill
rty posted Sun, 18 February 2007 at 7:41 AM
I have 3 non-Rendo email addresses, that are used only for specific clients, that got that spam
message.
Email adresses from private servers you manage yourself, or ISP addresses? Many ISPs (may their souls burn in hell) resell their client's adresses...
I've got the feeling that the only answer which will satisfy here is: "Yes! Renderosity got hacked!
Let's all panic together now!"
No, the only answer which will satisfy here is one explaining that coincidence. The "hacking" headline was just to attract attention, as I said; I don't believe it. It's more likely a case of an intern misusing the client e-mail database or somesuch; I've already seen this.
I don't believe Rosity might have the stupid idea selling it's client's database, as that would be shooting their own leg - with an RPG (that's a Rocket Propelled Grenade, not a Role Playing Game...).
As about you people not minding spammers - You are apparently quite new to internet. We'll talk again when you reach the point of recieving several hundred spams/day, and you have to invest thousands of dollars in hard & software to keep your company's e-mails halfway useable... Spam severity always increases, as spammers exchange their victim's adresses (which makes that you might recieve the same spam a dozen times in a row, if your address was included in a dozen CDs). Once an address is compromised, you can only delete it and create another. :-/
JenX posted Sun, 18 February 2007 at 8:24 AM
Or, you can quit freaking out about spam, get a spam filter, or just delete it.
Here's the thing. I know at least 6 guys that work in IT. They all complain about work when we hang out...then again, who doesn't? ...anyway, spam is usually not among their big complaints of server and/or speed drainage. It's usually the idiot in Finance who's been playing Neopets all day, or the lady in collections who forwards 90 emails a day.
as for my addresses...one is a web-based email, one is a private server-based email, and the final is the email address housed at the client where I'm working for the next few months. None of them have ever had anything to do with renderosity, and I've gotten both emails listed here.
So, my theory? IT's just another spam going around. Delete it, move on, and you'll have lower blood pressure.
Sitemail | Freestuff | Craftythings | Youtube|
Knowledge is knowing a tomato is a fruit. Wisdom is not putting it
into a fruit salad.
rty posted Sun, 18 February 2007 at 8:36 AM
Or, you can quit freaking out about spam, get a spam filter
I have 2: One on my mail servers, one on my computer. :-p
JenX posted Sun, 18 February 2007 at 9:11 AM
Well, then I don't know what to tell you. Looks like you have a problem either way. In that case, it must suck to be you, to have THIS big of a problem with spam.
Sitemail | Freestuff | Craftythings | Youtube|
Knowledge is knowing a tomato is a fruit. Wisdom is not putting it
into a fruit salad.
rty posted Sun, 18 February 2007 at 9:37 AM
Aw c'mon, I'm asking if someone has an explanation for a strange and disturbing problem, and all I get is replies like "it's normal", "you're just an idiot", and "get over it".
Nobody even tried to understand what the issue is.
No it's not spam.
No, it's not hacking.
No, it's not me being stupid.
Sorry for having posted it in the first place; Feel free to delete that thread.
Yes, it sucks indeed to be someone who believes in "Community"!
Have a good day.
JenX posted Sun, 18 February 2007 at 9:59 AM
Ok, so maybe a rephrase?
You come in, your title says that you suspect rendo was hacked. People pointed out that it has nothing to do with rendo, and that it's general, every day spam.
So....what is the answer you're looking for? Maybe, if we knew that, we'd be closer to your answer. But, like most of us have said, it's spam. You can either dwell on it, and eventually (if you don't already) need medicine for stress and/or blood pressure, or, you can delete it, and get on with your day. It's an annoyance. But, freaking out about it, as if Rendo has any way to combat spam on a global level, is like using a 9mm to get rid of flies.
Sitemail | Freestuff | Craftythings | Youtube|
Knowledge is knowing a tomato is a fruit. Wisdom is not putting it
into a fruit salad.
gillbrooks posted Sun, 18 February 2007 at 10:39 AM
Quote - Ok, so maybe a rephrase?
You come in, your title says that you suspect rendo was hacked. People pointed out that it has nothing to do with rendo, and that it's general, every day spam.
So....what is the answer you're looking for? Maybe, if we knew that, we'd be closer to your answer. But, like most of us have said, it's spam. You can either dwell on it, and eventually (if you don't already) need medicine for stress and/or blood pressure, or, you can delete it, and get on with your day. It's an annoyance. But, freaking out about it, as if Rendo has any way to combat spam on a global level, is like using a 9mm to get rid of flies.
No one is 'freaking out about it' except you.
What the majority here don't seem to understand it is that an email account that under no circumstances should be available for 'harvesting' is receiving spam. THAT is the issue.
I have been using the same email account here for some years and until 2 days ago had never had anything come into it other than ebots and newsletters, plus the odd mail from vendors using the 'mail all buyers' option.
I know which of my accounts to expect it on - and with some getting hundreds PER DAY I am used to dealing with it.
Gill
JenX posted Sun, 18 February 2007 at 10:59 AM
And, I don't think anyone is disputing that, Gill. No email address should be susceptible to harvesting. And, at no time, did I freak out. So, read whatever you want into my posts. All I said is that I have 3 email addresses, all of which have NEVER had anything to do with rendo, receive that email. Disputing the assumption that it was, in any way, rendo's fault.
So, yeah, Gill, I understand. Spam is annoying. It's like a zit on your ass. Sitting in here, complaining that it's potentially rendo's fault not only does nothing to solve the problem, it has nothing to do with the problem. You can either overreact to spam, or you can delete it and ignore it. But, saying that the rest of us are putting you down, overreacting, or 'net newbys because we don't freak out at spam...it's silly. We understand that you're frustrated. But the orignal post wasn't "Don't you understand that I'm frustrated???" It was "ok, I got spammed, and somehow, Rendo's involved!!!" So, for those of us who look at spam realistically, and not as a personal affront to our nethood...yeah, we roll our eyes, and post to the contrary.
The email we all got, it was a new version of the Nigerian Scam email. Congratulations, it was probably a newish one. Is it rendo's fault? Nope. So one is trying to negate the fact that you're frustrated. Go ahead, be frustrated. It's your right as a human being. I choose not to be frustrated over spam.
Sitemail | Freestuff | Craftythings | Youtube|
Knowledge is knowing a tomato is a fruit. Wisdom is not putting it
into a fruit salad.
gillbrooks posted Sun, 18 February 2007 at 12:53 PM
I've had that same email go to several other addresses - all of which get spam on a vast scale and I fully expect it. None of those addresses are anything to do with rendo - they're probably on the same list that my now changed rendo was on that has been harvested or sold.
I'm not freaking out because I got spam - I'm merely pointing out that there is no way the spammers could have got that address.
I don't get spam on the accounts I created to use at DAZ, Poser Pros or RDNA, nor the general 'shopping' email I use for my groceries, CD's and other nicer goodies from anywhere else.
I DO get spam on any I have listed on my web pages, those that are listed on certain wallpaper sites and the ones that have been in previously submitted readme's before the rules on that changed. I expect that. I use mailwasher and have done since I had my first website - it's a neccessity.
I'm not being arsy with anyone and don't want to make any enemies over this. It's just that the point that I and several others are trying to get accross isn't making it
Gill
Hawkfyr posted Sun, 18 February 2007 at 2:28 PM
***"So your explanation reads "with a little program that sends out the spam from a@a.com to z@z.com, only if the resulting random address is valid on Renderosity". Quite a clever proggy, isn't it...
No, there are 3 points which make the whole thing look strange:
"Only" Renderosity accounts?...I think it's been mentioned that "Others" get that spam on non-Renderosity account's.
"-Same Spam/Same Time" simply tells me that the spam was mass deployed and it would only make sense that it would be the "Same Spam" at the Same Time. To expect otherwise would imply that the spammer took the time to "Personally" E-mail that spam to his/her list, one at a time.(Not Likely)
"I apologise for it. But I am submitting a problem to the general community, and all I get is answers which tend to prove that nobody reads what I wrote.
"Yes, I know the 1001 ways to get spammed. What i want to know is why Renderosity-only adresses got this spam."
"Nobody" Read what you wrote?
Although I agree that many times,people reply before "Really Reading" the post(s) they are replying too.
(I call that the "Fire,Aim,Ready" Reply)
But I think in this case, most did, (For example...I noticed the "question marks"(???) in the title, thus being sure to not say you were making declarations of Rosity being hacked, but rather inquiring that as a possibility)I tend to re-read post's (sometimes several times) before replying to make sure I'm understanding the post correctly.
Perhaps we can examine a nutshell version of the thread
Your Initial Post (A question...not an accusation) Essentially read as follows:
Subject: Leaks - Renderosity got hacked???
Mail adresses used on this site, and only (exclusively) on this site (not only me, I know about two other cases), have started to recieve spam. What happened?
Followed by a clip of the spam and your knowledge of how it's a classic.
The question is, how have those scammers got hold of addresses only Renderosity is supposed to know?
Then in your second post...you reveal these are "Private Mail Servers".**
More Replies followed with possible explanations,and a question from matrix asking "how is it possible for a spammer to obtain our email addresses if they are hidden without someone hacking this site?"
(Xenophonz, Bar-code, and JenX specifically offered up evidently "Unacceptable" possibilities)
Then my story of how an address "Never Used" manages to get Spam,followed by a nod in agreement to those who mention that there are thousands of ways to end up on a spam list and my "Opinion" (See"IMHO") as to how further research could have been done prior to posting, as well as a mention of the "Sensationalistic Nature of the title.
Your next post addresses several of the prior posts attempting to explain possibilities.
Also... mention that you work in the computer industry and how you probably have more knowledge than most people here.
STOP:...okay..What was your motivation for starting this ( admittedly "Intentionally" sensationalistic ) thread?
If your opinion is that "You know more than most people here" why then post publicly at all?
After all, it would be a waste of time asking "The Membership" to solve such a riddle...
Wouldn't it be more appropriate to e-mail a Site Administrator, and/or possibly the site Programmer?
Maybe getting together with the handful of others this is happening too, in the interest of ruling out possibilities,
and/or perhaps finding a "Common Element" that points to a possible "acceptable" reason this is happening.
That is...if it was truly your motive to seek "Help" and come to a "Reasonable, Acceptable Understanding" of why this happened.
Perhaps it's because "I'm worried, in case people didn't notice"
Anyway..moving on... You list a few reasons as to why the replies from those "taking time to help you, on limited information, given piecemeal as the thread progresses" are not acceptable solutions.
***"- The relay server? Nope - would be different for each victim.
Now...for someone who is as educated as you, and "Probably" knows more than most others here. Don't you think you would have provided more information in your first post?. Such as your "Experience" as well as other information regarding the research listed above, or that you have already done, that is only revealed in drips and drabs?...That certainly would have ruled out possible reasons as to why this is happening (according to your research), as well as saved those "Trying To Help" time, by not posting "Non-Acceptable" possibilities.
Then...More Post's mentioning that there are thousands of scenarios that could be causing this.
Khai then provides another possibility, An application designed specifically to acquire possible e-mail addresses (whether they exist or not)
Followed by another post from you shooting those down as a possibilities. (More research and knowledge on your part that could have been provided originally to again" save those "Trying To Help" time, by not posting "Non-Acceptable" possibilities.
Your next few posts shows frustration that nobody is "Reading" your questions, nor are they providing an acceptable solution as to why this is happening.and the question again "What i want to know is why Renderosity-only adresses got this spam."
Then...JeniferC "CEO of Renderosity" steps in to offer up a what could be considered, a quite plausible reason, as to how these E-mail address's may have ended up on a spammers list.
NOTE: this could have, and probably has, happened to more people than only the handful of "Known Cases"...My Opinion is that those handful, are the only ones to have noticed it, because as mentioned...People have different ways of managing spam, and may not have noticed it happening to them. For example...I set up "Rules" in my E-mail reader to handle spam....when one comes through...I immediately make a "Rule" that states that when an e-mail comes in from this domain (and/ or other criteria), "Delete it from the Server", that way..it never even gets downloaded.Thus...I wouldn't even know if or when I got that Spam.(Unless I went to my domain control panel and sorted through history logs, but...I simply am not that passionate about it to do that).
Your next Post...Doesn't even mention that what "JeniferC "CEO of Renderosity" posted. (So...Who's not "Reading" Whom?)
But you did say "The only answer which will satisfy here is one explaining that coincidence."
You also managed to imply that a less than scrupulous person that has access to the Renderosity Database is behind this.
"It's more likely a case of an intern misusing the client e-mail database or somesuch;"
.(Such a Dirty Rat...We knew there had to be some kind of conspiracy behind this)
So...is it your intent to have "The membership" (You know...Those whom You, have superior knowledge over) provide for you an acceptable answer?
Shall we go over the thousands of possible scenarios one by one until it's "Acceptable" to you?
Is there a particular reason you ignore totally "the only post"* *thus far, by a Representative of Renderosity?
(And not just "Any" Representative.)
"Nobody even tried to understand what the issue is.
2 Pages of "Nobody even Trying"?
Well consider This Post is my effort of "Understanding what the Real issue is".
**
Yes, it sucks indeed to be someone who believes in "Community"!**
You mean that community that most of which"You Know as much,if not more, than"?
I know I've asked several questions in this thread,but really only want to know the answer to one.
So I'll ask it again...
What was your motivation for starting this ( admittedly "Intentionally" sensationalistic ) thread?
Tom
“The fact that no one understands you…Doesn’t make you an artist.”
pjz99 posted Sun, 18 February 2007 at 6:54 PM
Quote - Did you know that from the artist homepages anyone can send you an email? It could be that, or many other possibilities.
That is very clearly not what is happening, because when one sends email via a homepage form here, the email has blatant headers that show it came from renderosity - unlike these spams, which are extensively forged, and contain no forwarding history from Renderosity.
Received: from www.renderosity.com (unverified [66.18.106.212])
by bondware.com (SurgeMail 3.8f3) with ESMTP id 9274214-1804893
for xxx@xxx.net; Sun, 18 Feb 2007 18:50:07 -0600
I too think it is likely that the breach came from here. Do I need to change my credit card number, or only my email address?
pjz99 posted Sun, 18 February 2007 at 6:57 PM
Cherry picking from your huge summary, much of which I don't care about and frankly causes me pain to look at:
Quote - Then...JeniferC "CEO of Renderosity" steps in to offer up a what could be considered, a quite plausible reason, as to how these E-mail address's may have ended up on a spammers list.
Not plausible at all, it's off the mark as a passing glance shows (doesn't anyone test any damn thing any more?) Jenifer probably should have checked this before offering it up.
Hawkfyr posted Sun, 18 February 2007 at 8:19 PM
Think about how painful it is to write.
To expose one (Or several) of trying to sensationalize something, while at the same time, wasting the time of "Everyone Involved".(except for those participating in the Sensationalizing that is)
Yeah...we agree on something...It's painful to look at alright.
I ran a test by sending an email to myself via my profile page.
The picture attached is the header I received.
I was going to go check out my E-mail logs to check out the E-mail history...to see who the recipient was.....but..cha know what?...It's clear that Either "We" are the ones being scammed in this thread, or it's legit, but no explanation will suffice, and any help goes un-appreciated..
Either way...I've decided It simply isn't worth my time to help solve anymore.. Especially to those who have no interest other than conspiracies, and have no appreciation of those attempting to help.
So....I've lost interest in playing the game...
Figure it out yourselves.
Tom
“The fact that no one understands you…Doesn’t make you an artist.”
Hawkfyr posted Sun, 18 February 2007 at 8:40 PM
Oops..Forgot to Add:
Let's suppose that my Subject Read:
Someone has replied to"Leaks - Renderosity got hacked???" on Renderosity.com
And the Body read:
This is a notification that hawkfyr has replied to the thread "Leaks - Renderosity got hacked???" in the Community Center forum. Click here to view this message or here to visit the forum.
You can edit your options here. You can also unsubscribe from this thread directly by clicking here.
Would you surgically go through the Properties of an E-mail like this automatically?
Is it "Possible"You might not notice the From: and To: in the header?
Or would you simply click on the link to go see the reply?
(Well...we know you might not rush to see a reply from "Me" as this Mock E-Mail suggests, but lets just say it said "This is a notification that rty has replied to the thread......)
After all..these are "Dedicated" E-mail addresses...Specific to Renderosity....why would one feel that it's anything but a legit E-Bot at first Glance?
Tom
“The fact that no one understands you…Doesn’t make you an artist.”
matrix03 posted Sun, 18 February 2007 at 10:06 PM
I set up an email to be strictly used with my account here and others have to are receiving this same Spam. what I suggest renderosity to do is investigate this thoroughly.
pjz99 posted Sun, 18 February 2007 at 10:26 PM
Quote - I ran a test by sending an email to myself via my profile page.The picture attached is the header I received.
No sir, that is not the headers, it is merely the to: and from: fields. The headers would resemble more along these lines (although note I have obscured my own email address and IP/domain info):
Return-path: xxx@xxx.net
Envelope-to: xxx@xxx.net
Received: from xxx.xxx.net ([999.999.999.999] helo=xxx.xxx.com)
by xxx.xxx.com with esmtp (Exim 4.51)
id 1HIwjm-0005E0-45
for xxx@xxx.net; Sun, 18 Feb 2007 19:50:38 -0500
Received: from xxx.xxx.net (xxx.xxx.net [999.999.999.999])
by xxx.xxx.com (MOS 3.8.2-GA)
with ESMTP id BDP17855;
Sun, 18 Feb 2007 19:51:52 -0500 (EST)
X-Commtouch-Virus-Threat: Unknown
X-Commtouch-Class: Unknown
**Received: from [66.18.106.211] ([66.18.106.211:35041] helo=mail.bondware.com)
by xxx.xxx.net (ecelerity 2.1.1.13 r(14827M)) with ESMTP
** id C7/B7-08371-844F8D54 for xxx@xxx.net; Sun, 18 Feb 2007 19:50:36 -0500
**Received: from www.renderosity.com (unverified [66.18.106.212])
by bondware.com (SurgeMail 3.8f3) with ESMTP id 9274214-1804893
** for xxx@xxx.net; Sun, 18 Feb 2007 18:50:07 -0600
Date: Sun, 18 Feb 2007 18:50:09 -0600
To: xxx@xxx.net
From: "xxx@xxx.net" xxx@xxx.net
Subject: test
Message-ID: f003c4405f1b41e054571433e577b5d0@www.renderosity.com
X-Priority: 3
X-Mailer: PHPMailer [version 1.73]
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="b1_f003c4405f1b41e054571433e577b5d0"
Hawkfyr posted Sun, 18 February 2007 at 11:34 PM
"Would you surgically go through the Properties of an E-mail like this automatically?"
So...I suppose you are paranoid enough to.
Fair enough.....No help for someone that paranoid as to check the "Properties" of each and every E-mail they receive.
You Win.
8 )
Tom
“The fact that no one understands you…Doesn’t make you an artist.”
Hawkfyr posted Sun, 18 February 2007 at 11:53 PM
"I set up an email to be strictly used with my account here and others have to are receiving this same Spam. what I suggest renderosity to do is investigate this thoroughly."
My Point Exactly... Why would one take it to "The Membership" to investigate a problem...only Renderosity can solve?
Unless they had another motivation.
This Thread reads more like a riddle, in which the one asking the question,already knows the answer,but reveals clues and information along the way,
Tom
“The fact that no one understands you…Doesn’t make you an artist.”
matrix03 posted Mon, 19 February 2007 at 12:02 AM
Quote - My Point Exactly... Why would one take it to "The Membership" to investigate a problem...only Renderosity can solve?
Tom
exactly, but they've locked the thread which I started on Friday and all I posted was:
"has anyone received SPAM today that resembles this?"
I indicated nothing about hacking when I originally posted, but it's a strong possibility just like
it's a stong possibility that they have someone in their employment who doesn't have high integrity.
had this been an email address that I'd had for five years I wouldn't think anything of it, but I set up this account on December 26, 2006 and for the sole purpose of using here. I don't use it for anything else , nor have I given it out to anyone.
the original intent of changing my address had nothing to do with spam, but I wanted to have my weekly newsletters go to specific email accounts and not the same one. one for daz and one for here.
Hawkfyr posted Mon, 19 February 2007 at 12:42 AM
Ah...the Poser forum...no wonder I missed that one. Although I check it from time to time,It's not one I check regularly.
Thanks for the Link...I just read it...Now "That's" a typical "Fire, Aim, Ready" thread...
Were you wondering why it was locked?
I have "Special" E-mail accounts too...I don't think anyone is challenging the intent of having them...but to expect that they are somehow invincible to being discovered, is simply a lofty expectation.
And as we all know..."A Disappointment,is only an Unfulfilled Expectation".
Tell me...When you receive an E-Bot...do you click on the link? (See "Router's" theory)
Do You know if your domain has "Catch All" enabled by default?
Someone could send an E-mail to hawkfyrisanasshole@mydomain.com, and I'd still get it. ( Oh Gawd...Now I need to make another "rule"....lol)
This could go on forever.
But it's typically the "Accuser" who has the Burden Of Proof.
Tom
“The fact that no one understands you…Doesn’t make you an artist.”
pjz99 posted Mon, 19 February 2007 at 1:56 AM
Quote - My Point Exactly... Why would one take it to "The Membership" to investigate a problem...only Renderosity can solve?
You know, that applies equally to your own posts. Maybe you should quiet down and let the site admin team answer this. At the very least ease up on the rudeness and melodrama, this isn't a friggin soap opera. I'm concerned about my credit card info, not counting coup with you.
Hawkfyr posted Mon, 19 February 2007 at 2:45 AM
"Quote - "My Point Exactly... Why would one take it to "The Membership" to investigate a problem...only Renderosity can solve?"
***"You know, that applies equally to your own posts. ***
Uhh..Did I "Start" this thread? Last time I recall "Brining anything to the staff" was done via E-mail...Not Publicly.
*** Maybe you should quiet down and let the site admin team answer this. ***
So..Suddenly I don't qualify to reply to a "Public" Post?... An Admin "Did" reply...but went ignored for the most part.
If this was an "Admins Only Reply" thread...I wasn't aware...Perhaps it should have been mentioned in the original post as well.
***At the very least ease up on the rudeness and melodrama, this isn't a friggin soap opera. ***
Rudeness, and Melodrama?...Okay..I got a belly laugh out of that one...Perhaps you should re-read the thread to see where the "Drama" is.
I am sorry if it pains you to read facts..But as they say."The Truth Hurts" (Who the hell is "They" anyway?)
In no way did My posts, describe anything other than what can be confirmed in this very thread...and at no time did I fabricate,or misrepresent anything or anyone...I only offered up fact's and "My Opinions". If you think those opinions are rude..I apologize...but I do try my best to give the benefit of the doubt, before it becomes "Evident to me" otherwise.
Then..and only then...Do I call a Spade A Spade. (Again...Perhaps I fall short sometimes...but I do try)
In fact...I did fall short...I was in the middle of going to check my history logs and writing a reply(The Oops .. Forgot To Add Reply), when I saw your Post which revealed to me that no explanation or help would suffice. That Post was originally going to be an explanation of "How" your E-Mail address was acquired...Not that the Spammer sent the E-mail via your Home page.(That Email address could have been harvested weeks ago...but only Deployed recently)
So I failed to finish my effort...and for that..I apologize.
Additionally..It was not my intent to imply that Matrix "Caused" the Poser forum thread to be locked...but rather the direction the "Replies"were going was a possible cause. I Believe that "Some" here are genuinely concerned about this, but not all are motivated by "concern" in they're replies, but rather choose to cover they're ears, and closing they're eyes, while shaking they're head saying "La La La La La La La".....when possible explanations are expressed.
I'm concerned about my credit card info, not counting coup with you."
So...Do you make a habit of taking your Credit Card concerns to a public forum,rather than with the Administration?
Tom
“The fact that no one understands you…Doesn’t make you an artist.”
Hawkfyr posted Mon, 19 February 2007 at 3:06 AM
Crap..My Spell Checker changed all of my "their" To "they're"..too late to edit.
“The fact that no one understands you…Doesn’t make you an artist.”
JenX posted Mon, 19 February 2007 at 4:19 AM
So, when people try to make explainations for something that seems out of the ordinary....it's melodramatic? If you're talking about the way Tom posts...well, uh, he's always posted that way. It's like I said about my own posts...if you're reading more into it than there actually is, it's not his fault.
So, the thread in the Poser forum was locked. Karen gave a good reason. Because folk are hashing it out Here. Not some super-secret FBI lockdown, no scammers involved, just a simple "let's keep it all in one place".
So, instead of going on and on about EACH OTHER and how much we're all annoyed by each other, we can either figure out the problem, or we can point fingers. One is productive, one isn't.
Also, getting a spam email has NO bearing on your credit card information. I worked for years in Security for Mastercard, and I can tell you that you put your credit card at more risk when you use it at the grocery store than you do when you use it online. And, besides, once your information is input to the stores' system, it is highly encrypted. The only information the store gets is that a sale is made, and by whom. The only time they get your address is when they need to send something to you. "But why is it input?" you ask? Excellent question. It's one of the things that's automatically checked by the issuing bank when you make a purchase. If the info doesn't match, the transaction is declined.
Anyway, really, people have disputed that the spam is only coming to Renderosity-linked addresses. It's not. Is it a coincidence? Yes, and a hell of a coincidence. Does that irrefutably mean that Rendo is at fault, or, even more suspicious, selling our email addresses? No. It means that a hell of a lot of people were hit with spam.
Also, last point...it was brought to attention in the Poser Forum thread that some people never sent out of their old email, so it shouldn't be a problem. If you get spam once, and it doesn't "bounce back", you will get more spam. Why? You didn't reply out of that email address, right? Well, if your email didn't bounce back as an unuseable email address, that means you're golden. It works, so here comes the spam.
Sitemail | Freestuff | Craftythings | Youtube|
Knowledge is knowing a tomato is a fruit. Wisdom is not putting it
into a fruit salad.
vince3 posted Mon, 19 February 2007 at 6:29 AM
i didn't get this spam and i don't actually get any spam, but was curious to know if anyone knows where my spam might be in my email options, if it had been filtered, was wondering if it is automatically destroyed or if it is stored anywhere that i should probally check and destroy if i found any, or would it tell me that i had some or not.
pjz99 posted Mon, 19 February 2007 at 11:45 AM
Hawkfyr:
Quote - To expose one (Or several) of trying to sensationalize something, while at the same time, wasting the time of "Everyone Involved".(except for those participating in the Sensationalizing that is)
Melodramatic and rude.
Quote - Either way...I've decided It simply isn't worth my time to help solve anymore.. Especially to those who have no interest other than conspiracies, and have no appreciation of those attempting to help.
So....I've lost interest in playing the game...
Melodramatic (and misinformed, as I pointed out to you earlier).
Quote - My Point Exactly... Why would one take it to "The Membership" to investigate a problem...only Renderosity can solve?
Unless they had another motivation.
Melodramatic and rude.
Dude, really, you don't have any secret gossipy dirt here, you're just showing your ignorance of how mail works. It's okay to not understand how email works, but it's not okay to blab at length about it when you don't. You threatened to take your ball and go home a long time ago, remember?
edit:
Quote - In no way did My posts, describe anything other than what can be confirmed in this very thread...and at no time did I fabricate,or misrepresent anything or anyone...
Obviously mistaken as your quotes above show. I mean, unless you're telepathic across global distances, which would be quite impressive.
pjz99 posted Mon, 19 February 2007 at 11:46 AM
Jenx
Quote - So, when people try to make explainations for something that seems out of the ordinary....it's melodramatic? If you're talking about the way Tom posts...well, uh, he's always posted that way. It's like I said about my own posts...if you're reading more into it than there actually is, it's not his fault.
His explanation is demonstrably wrong. And as I've told you before, I have little interest in your history of people kowtowing to you, or his. If you're rude, I will feel entirely comfortable to call you on it, thanks.
JenX posted Mon, 19 February 2007 at 11:52 AM
Quote - Jenx
Quote - So, when people try to make explainations for something that seems out of the ordinary....it's melodramatic? If you're talking about the way Tom posts...well, uh, he's always posted that way. It's like I said about my own posts...if you're reading more into it than there actually is, it's not his fault.
His explanation is demonstrably wrong. And as I've told you before, I have little interest in your history of people kowtowing to you, or his. If you're rude, I will feel entirely comfortable to call you on it, thanks.
Oh, but if we were to do the same, you'd pitch the same fit you have in EVERY thread I've ever encountered you in.
Whatever.
IMHO, YOU are the one being rude. (no one else, btw. tom may have been being facetious, but pissing you off doesn't equate to being rude.)
Anyway, suggestions were made. Those who made those suggestions were told they were wrong, said to not know wtf they were talking about, etc. But, of course, that's not rude. Especially in a 'talking down to you' manner.
Really, you get bent out of shape too easily. A deep breath before getting pissed works wonders.
Sitemail | Freestuff | Craftythings | Youtube|
Knowledge is knowing a tomato is a fruit. Wisdom is not putting it
into a fruit salad.
pjz99 posted Mon, 19 February 2007 at 12:06 PM
If you are rude in every thread I encounter you in, yes, I might do that.
JenX posted Mon, 19 February 2007 at 12:14 PM
whatever.
pjz99 ftw.
again.
Sitemail | Freestuff | Craftythings | Youtube|
Knowledge is knowing a tomato is a fruit. Wisdom is not putting it
into a fruit salad.
XENOPHONZ posted Mon, 19 February 2007 at 12:21 PM
"Disagreement" and "Rudeness" are not synonyms. They don't mean the same thing.
Making a sharp (and very obvious) point doesn't comprise "rudeness", either.
Rudeness would be exemplified by engaging in name-calling. Not by pointing out to someone where they are wrong about something.
But -- accusing people of being "rude" is one method of attempting to shame one's opponent into shutting up -- when you don't like to hear the things that they are saying. The accusation of "rudeness" (in this context) doesn't address the facts of the case.
Not to mention the additional fact that Tom was in no way, shape, or form being "rude". He was just being right -- which, admittedly, can be extremely irritating to some. And they might interpret their internal irritation over being wrong to mean that the other person in the discussion is being "rude" to them.
StaceyG posted Mon, 19 February 2007 at 12:23 PM
This thread needs to be kept on topic of the original post and not go down the path of personal issues or it will end up being locked. Please keep on topic and leave the personal out of the discussions.
pjz99 posted Mon, 19 February 2007 at 1:30 PM
Quote - He was just being right -- which, admittedly, can be extremely irritating to some.
Pardon me, but Hawkfyr's info is largely wrong. Thanks.
XENOPHONZ posted Mon, 19 February 2007 at 1:48 PM
Some of it might be a matter of opinion. And that's the rub, isn't it?
But he was most definitely spot-on with his comments in regards to attitudes.
pjz99 posted Mon, 19 February 2007 at 1:52 PM
And much of it is simply in error, not a matter of opinion. Thanks.
StaceyG posted Mon, 19 February 2007 at 1:57 PM
That is your view pjz99 but that doesn't make your comments fact either, everyone is entitiled to their view or opinion .. Please keep this thread on topic of the ORIGINAL post.
Thanks
Hawkfyr posted Mon, 19 February 2007 at 5:05 PM
You are certainly entitled to your personal opinion of me...so I have no argument's with most of your post.
Apparently we have differing views on what "Rude and Melodramatic" are.
However
Dude, really, you don't have any secret gossipy dirt here,
Not sure where Gossip entered the picture here..but...Perhaps you can enlighten me.
You're just showing your ignorance of how mail works. It's okay to not understand how email works...
...Said the one with the Spam Problem, and offers nothing more than copies of E-mail Properties.
BTW..When's the last time "You" ran a site even close to this size?
but it's not okay to blab at length about it when you don't.
You are right..It's not okay....But ...I didn't
I Blabbed" at length about the dynamics of the thread...I only began to explore the "Possibility" of JeniferC's Post after it went ignored,and stopped halfway through after realizing it would be fruitless,and that no amount of "Proof" (Which BTW...you have offered up NONE to the contrary) will satisfy those hell bent on conspiracy.
Again I'll ask When's the last time "You" ran a site even close to this size? There comes a point when it becomes evident that some folks are simply "Un-Pleas-Able".
"You threatened to take your ball and go home a long time ago, remember?"
No...I don't remember that... However...I do recall saying I was not going to further any attempt's to "Help Solve" the riddle.
Perhaps that is what you are referring too.
If it is...I'll quote myself.(At least "I" know it's accurate)
"Either way...I've decided It simply isn't worth my time to help solve anymore.. Especially to those who have no interest other than conspiracies, and have no appreciation of those attempting to help.
So....I've lost interest in playing the game...
Figure it out yourselves."
If that is in fact what you were referring too....Did you read what was written?...or are you the one of those with telepathic abilities? If you are...than your telepathy was way off...because I only wrote what I meant...Not what "You Think" I meant.
Another shining example of JenX's mention of "Reading More" into what was actually written perhaps?
So...My mention that I was not going to continue attempts to help solve the problem...somehow equals that I'm excluded from participating in the thread?
It Seems to me that You must really want me out of this thread pretty bad.( Notice "It Seems to Me..." ya see..that's an "Opinion",..not a declaration of truth...just so you might see the difference in the future)
If you don't like me, or disagree with what I write...Simply scroll past my post...if I bother you that bad. It's really quite simple.
I will not take offense if I end up on your ignore list,as I tend to be pretty thick skinned when it comes to thing like that.
However...I'll go out on a limb here and "assume" that you will not care either way if I'm offended.
If I don't bother you that bad...then by all means...offer up your personal opinions of me...Who knows...perhaps I'll learn and grow from your observations.
Now..an example of "Rudeness" to me might go something like this:
"Cherry picking from your huge summary, much of which I don't care about and frankly causes me pain to look at:"
This..After I never once mentioned you personally, or quoted anything you typed on this topic.
I also apologized (twice) for falling short, and giving up on helping.
Dang...I even said "You Win"... and moved on discussing the dynamics of the thread...what more do you want?
So yeah...We evidently have differing opinions of what Drama and Rudeness are.
Out of Curiosity...Have you solved the riddle?...Have you made any more attempts to solve it, or gather proof of foul play?
Or are you going to just going to continue to sit there accusing the site of selling your e-mail address?
"I'd gotten one the other day, now I've just gotten a second one. It'd be either Rendo or DAZ that sold my address out."
Sorry...I had to go to the other thread to gather that quote...which..incidentally was your very first line ..of your very first post in that thread.
Some..unsolicited advice for you (as you seem to have no problem dolling it out)
Before jumping to conclusions...be sure to take note of how high the ceiling is.
Tom
“The fact that no one understands you…Doesn’t make you an artist.”
Hawkfyr posted Mon, 19 February 2007 at 5:23 PM
"Please keep this thread on topic of the ORIGINAL post"
Sorry bout that Stacey
I replied on Page 2 where my E-bot took me, before even continuing on to page 3...I didn't see your Post(s) prior to replying.
Interestingly enough though...Is that I'm just not sure what the topic of the original post is...which was why I asked of the motivation behind it, expressed my observations and opinions, and was the very point I was trying to make.
8 )
Tom
“The fact that no one understands you…Doesn’t make you an artist.”
pjz99 posted Mon, 19 February 2007 at 6:55 PM
Quote - It Seems to me that You must really want me out of this thread pretty bad.
Not as such, I really just want your 100-line "slam dunk" line-by-line badly-formatted thinly-veiled flaming out of the thread.
And PS you're hardly sorry, or you would have trimmed or deleted your previous post.
StaceyG posted Mon, 19 February 2007 at 6:57 PM
Let's drop the personal issue now please and stick to the topic about the emails or move on.
Hawkfyr posted Mon, 19 February 2007 at 10:37 PM
Okay...I'll back-paddle a bit and try to explain what my attempt to explore the plausibility of JeniferC's post involved.
(In the interest of staying on topic of what may or my not be the original post)
8 )
BTW...I didn't Say anything remotely close to:. "That's it..She's Right..Problem Solved"...but rather mentioned that "she steps in to offer up a what could be considered, a quite plausible reason, as to how these E-mail address's may have ended up on a spammers list.(Notice the bold type)
I then decided to test and explore it myself, to see what I might uncover.(Yes...even as stupid as I am about it, I still made an effort)
Jen offers up that an E-mail feature exists that might be a way of someone sending an E-Mail....(She didn't make a declaration that this was the source of the problem...but rather "Asked" if it was known, and that it "Could" be that, as well as many other possibilities).
Okay...lets say I have a dedicated E-mail address that is used solely for the use here. (Or Not) I may or may not have "Rules"in my E-Mail client redirecting E-mail meeting certain criteria.to certain folders. "Rules"(filters) that may or may not make it more obvious if a Mock Ebot came through depending on each users method of filtering E-Mail (Which BTW...might be a way of those "Known Cases" to compare notes, and maybe narrow down possibilities, and/or finding "Common Elements")
Someone could send me an e-mail from this site via that Profile feature... correct?
Okay..if it's my friend..no biggie..but it still went out to me, and thus has a possibility of being intercepted and Harvested at any given point along the way.(Routing Points..etc.)...Incidentally..Even a legitimate Ebot has to make its way to you via these points.
Lets say it's not my friend...but a Harvester.
The harvester sends a relatively convincing replica of a typical Ebot to me Via the Profile page.(Not Hard...it's only text and links)
Not being one who check's the properties "Headers" of every E-mail to check it's origin,path, etc....I Don't notice the To and From: line is different from the typical EBot...I'm in a hurry...or multi-tasking, and simply click on the link.(Or..my filter takes it somewhere else and I don't even know about it,and thus...never gets bounced)
The harvester then goes to his Server's Logs and/or Properties to see where that e-mail was ultimately sent.
It was at this point I gave up helping...so I don't know if my logs would show it but It might...As my screen capture showed it was sent "From:Me..To: Me" just not through my E-mail Client as a "Sent Item" (Profile Feature does not launch senders E-Mail Client)...So..as the "Sender"(Harvester) I have nothing in my Sent Items to check the 'Properties" Headers, So I'd have to go to my server logs to check....again...I abandoned efforts before going to check my server logs on my test effort
If the log does show the complete path ...Harvester now has a new E-mail address to add to his collection.
Let's Imagine also...that the scammer is patient, and has been "Collecting" E-mail addresses in this, or similar way for several months...But waits until he has enough to compile a CD to sell.(A CD with guaranteed "Real" E-mail addresses, that might fetch a good price).
The CD would then be sold...and then "Deployed" by the buyer...So the Harvesting of the E-Mail addresses would take place over months before the actual "Deployment" (Which would explain why the recipients would receive the "Same Spam" on the "Same Day").
Those of us without a dedicated E-Mail address probably wouldn't notice, because we're used to getting spam on those accounts.In fact..it would likely be noticed by only those that "Do" have dedicated E-Mail accounts.
When Jen Posted...my first thought wasn't that said SPAM was being sent via the Profile feature here,..but rather it was possibly a "Vehicle", or "Tool" used by a Harvester to acquire E-Mail addresses.
So..what I was trying to Illustrate..is that either way...Friend or Foe...that E-mail feature "Could Possibly" be a way, of an E-mail address being compromised.
(I may never know for sure..because as mentioned...I've given up on efforts to help)
So hey...I may not be the geniuses some of you are when it comes to E-mail...but I try to Open-minded enough to at least "Consider Alternatives" to conspiracies,and not simply dismiss them without a second thought.
So...That "was going to be" my attempt at exploring a "Possibility" that I abandoned when it became evident to me, that no explanation would suffice.
It may have even sparked "discussion" of why it is "Possible" or 'Impossible" Ruling it in..or Out..as a possibility.
It may be right,or it may be wrong...After all...I don't know the E-Mail configurations of those 'Known Cases".
Additionally...I don't know about the rest of the world...but it was a Weekend the past couple of days around here. I suspect that the Staff is likely looking into possibilities on thier end now... I would imagine also, if it's discovered that a security hole exists, that is with thier power to fix, they will likely find it and fix it.
BTW...Now *"That's"...*Blabbering on about what I don't understand.
8 )
[Disclaimer] Any Drama and/or Rudeness found in the above post is Purely Unintentional.
Tom
“The fact that no one understands you…Doesn’t make you an artist.”
gradient posted Mon, 19 February 2007 at 11:27 PM
Although I fully agree with Hawk here that it is very likely that the addy could have been intercepted at many points along a path of travel...the thing that interests me here is that out of over 70 replies to this post, there has really been only one official response from Rendo staff that directly addressed the issue. That was the response from JeniferC....and it basically just said that it could have happened a number of different ways...which in fairness to the original poster, isn't much of a response.
So, why don't we ask these questions:
Is Renderosity investigating the OP's concerns further?...YES...or...NO
If as Hawk suggests they may be...then will the results of their review be made public here?
In youth, we learn....with age, we understand.
DarkStarRising posted Mon, 19 February 2007 at 11:31 PM
**HA i get that email all the time on my Yahoo LOL dont get it on HotMail at all, very rarley do i get spam on there, Yahoo is a magnet for Spam. It dont matter if your email is hidden but for one place, you will get gumph like this through because Spam bots and idiots will always find something or somway to send rubbish! It doesnt matter if its only for Rosity, or DAZ or wherever, you WILL get some sort of spam.
Dont blame rosity, it aint there fault, blame those idiots who send rubbish like this.**
In the words of DarkStarRising:
"Sadness within sadness,
Darkness within darkness,
a shadow of a form lays upon the floor,
looking at herself
looking at her own shadows of loneliness"
gillbrooks posted Tue, 20 February 2007 at 4:13 AM
*That could be true of anyone who downloads their mail into OE or Outlook - but very little of my mail is ever downloaded - especially rendo mail - in fact only newsletters or vendor mail that I need to keep for reference.
So the suggestion of clicking a fake ebot link going to a harvester is ruled out for me and anyone else using MailWasher.
The pic shows how an ebot appears in teh preview pane where the links are always clearly visible. There's also a little button at the top that switches over to view between source and preview mode so checking a header of an message is very quick and simple.
Gill
Hawkfyr posted Tue, 20 February 2007 at 10:26 AM
Thank You Gill,
Again...I'll mention...It could be right or it could be wrong..I don't know the E-Mail configurations of those known cases.(which is why I suggested those "Known"Cases" get together and compare notes...It seems those with a common problem, is a good place to start figuring out what happened)
Not being contrary...but asking a question about Mailwasher.
You can read E-mail from the "Server" prior to downloading..is that correct?
Would the logs of a harvester show that his little trick got at least as far as your Domains server?
I mean..would his logs say the final destination was spamtarget@ suchandsuch.com ? (Made up of coarse)
If so...would he then at least know of a potential "domain" to target? (Which doesn't explain why some accounts on a domain get that spam while others don't...I know)
But if so...would it then be time for him to haul out the app mentioned earlier to generate possibilities on that domain?
Again...Not being contrary...just inquiring?
So it rules that out for some...
I'm not being facetious when I say Thank you for actually reading and contributing your example.
This helps rule out possibilities and narrow down what it could or could not be.
Again....my point earlier..was that some don't even take the time to read or consider alternate explanations, or participate in hammering out a problem...but rather make accusations, or expect others or Renderosity to "Solve" a problem that very well may not be theirs. Just fired off accusations.
"Contempt Prior to Investigation" as is it also known.
I'm glad to see someone actually participate to the solution rather than the problem.
Again...Thank you...
Tom
BTW..Notice...not bold type...No need to in replying to Gill...I reserve that for quoting in the interest of separating what others said, and what my reply is.(Many do it) Save for the bold type intended to highlight specific points for those who obviously don't "Read" before replying...It's and aid for 'Those types"...y'no?
“The fact that no one understands you…Doesn’t make you an artist.”
gillbrooks posted Tue, 20 February 2007 at 10:39 AM
"Not being contrary...but asking a question about Mailwasher.
* *
You can read E-mail from the "Server" prior to downloading..is that correct?
Would the logs of a harvester show that his little trick got at least as far as your Domains server?"
As far as I know, no. The reason I say that is that I use MessageTag on most of my outgoing mail (this is because I send out serial numbers, login details etc and I need to know that the recipient has received them). With some mail I cc or bcc myself and if I preview the message in MailWasher then I don't get notification from MessageTag that it's been read - if I dl the message and read it in OE or Outlook then I get the notification because the message is not actually downloaded, it's read direct from teh server and no images or attachments come through and it stays on the server until I either delete or download it.
This may help answer your question, but I don't know any more technicalities than that - I'm not a techie person LOL!
Gill
Hawkfyr posted Tue, 20 February 2007 at 11:06 AM
vince3....I noticed your inquiry went un-addressed on page 2
I'll quote it here in the interest of saving folks from stepping back a page to read it.
"i didn't get this spam and i don't actually get any spam, but was curious to know if anyone knows where my spam might be in my email options, if it had been filtered, was wondering if it is automatically destroyed or if it is stored anywhere that i should probally check and destroy if i found any, or would it tell me that i had some or not."
There are several reasons you may not have received this spam. (One being you have a horseshoe up yer @ss ..and are just one lucky sumbitch...lol)
But as to Where you spam goes, depends on many things...What "filtering" (if any) you are using, and how effective it is,as well as security level settings.
Another, may be that your ISP has a filtering system in place and deals with spam in thier own way(Possibly redirects it to a spam fighting organization or maybe bounces it back to the spammer, or Automatically deletes it)
This Scenario can be Baneful...or... Blessing...Sure...you don't get as much Spam...but you may also not be getting legitimate E-mail that you want.
An example of this might be...Not receiving EBots, or Newsletters from Renderosity, because your ISP has somehow flagged Rosity's domain a spammer...Which is not uncommon when a site of this size generates a lot of E-Mail activity, Deploys Newsletters, or the ISP notices a tremendous amount of E-Mail being processed from a particular domain....Many times...an end user (You) might even have to call your ISP and request that domain be taken off thier list of filtered domains.
If you are really REALLY curious as to where the SPAM you don't receive ends up...More information would be needed, such as what E-Mail Client(Reader) you use, What ISP you use,as well as any Spam filters you may have in place locally on your machine.
However...I would not worry much about it and just be glad you don't receive very much spam.
Hope this helps.
8 )
Tom
“The fact that no one understands you…Doesn’t make you an artist.”
Hawkfyr posted Tue, 20 February 2007 at 11:49 AM
Thank You Gradient
As to why the lack of response from the Staff...It could be that most of this thread took place over the weekend. Secondly...As you mentioned...Addy's can be snatched along the path of travel...as well as hundreds of other possible scenarios.(Also mentioned by JenC)...if that is the case...why then would Renderosity's feel the need to solve a members SPAM problem, that very well may not be theirs, to solve...The ONLY thing they could probably do is re-check thier security and make sure it's not on thier end.
Renderosity only has so much control over what happens to E-Mail once it has left thier servers (Including legitimate EBots, Newsletters' etc)...After that...it gets bounced around the planet, being re-routed along the way, until it reaches it's final destination.
When That legitimate EBot, Newsletter reaches the member...and the member clicks on a link to respond, the whole thing happens again...just in the reverse direction.
(You have "Requested" a Web link via your E-Mail)
For those With Dedicated Renderosity E-Mail accounts, that receive E-Mail through that dedicated account, only...but reply (..Copy Paste..whatever) from another Account. Still "Received" it To that address. and thus susceptible to it being intercepted.
So it can happen coming..or going... Snatched,along the way.
Lets say are Harvester acquires his list from one of those many points...Is that Renderosity's fault?
Tom
“The fact that no one understands you…Doesn’t make you an artist.”
Hawkfyr posted Tue, 20 February 2007 at 12:04 PM
Ooops...Missed you reply Gill.
Thanks for the Mailwasher info...I'll have to re-read and digest your reply, before giving a comprehensive reply.
(If one such exist ...lol).
I used Mailwasher long ago...But I'm sure it has come a long way since then (I stopped using the free version after they stopped supporting multiple accounts)
Thanks again.
Tom
“The fact that no one understands you…Doesn’t make you an artist.”
DDevant posted Tue, 20 February 2007 at 12:13 PM
"It's more likely a case of an intern misusing the client e-mail database or somesuch; I've already seen this."
Did any of the admins address this possibility?
Hawkfyr posted Tue, 20 February 2007 at 12:39 PM
Assuming that it was a Weekend ( A Holiday Weekend Here in the US ) I rather doubt that they called in all whom have database access and strapped them to a polygraph. (Yet...lol)
Tom
“The fact that no one understands you…Doesn’t make you an artist.”
DDevant posted Tue, 20 February 2007 at 2:36 PM
No I guess not... Lol
gradient posted Tue, 20 February 2007 at 2:59 PM
@Hawkfyr;
Yeah, forgot that it was long weekend for you guys...
A couple of points though....I did not say that Rendo should " feel the need to solve a members SPAM problem, that very well may not be theirs, to solve". Nor did I say that it's "Renderosity's fault"
Actually, my post says that I think the addy could have been intercepted anywhere but, a member here has raised a concern...which could in fact be quite serious....so, I think it deserves a serious response from the owners of this site.
As an aside, I am still waiting for responses from Rendo staff on several copyright issues, one going back 6 months, the other is about a week old. And then there's the copy/paste issue into IM's from a few months ago....did it ever get looked at?
Unfortunately, my experience has been that Renderosity often lets issues pass unanswered in hopes of the problem going away rather than taking a position.
Letting issues fester is generally not the best course of action.....
In youth, we learn....with age, we understand.
pjz99 posted Tue, 20 February 2007 at 4:00 PM
I've gotten a couple of email responses from Jenifer, one initial flat declaration that "no way, not from us" and after I urged some more investigating, I've not gotten more replies. I am very distressed at how quiet site management has been regarding this issue. Considering they're obviously aware, and compared to how vigorous and prolific staff posts were when promulgating the recent thumbnail rules changes, very distressing.
I still strongly suspect Rendo of being the breach. There are certainly some other interesting theories, but Occam's Razor is a pretty good rule. If it looks like a duck, and quacks like a duck, it's probably a duck.
Hawkfyr posted Tue, 20 February 2007 at 4:06 PM
@ gradient
Yes... You are right....I agree...It was only my first sentence that was in response to your post.(Weekend)
The rest was to not intended to educate you on what I know..you already know.(interceptions)
But rather to explore further the interception possibility, and how It may be beyond Rosity's control... thus...what more is there for them to say other than. "It could be many reasons"...or.."we're looking into it on our end".
My apologies...I should have separated my direct answer to you, from the rest...It was not my intent to educate you...I already know you see it as a possibility.
8 )
As far as lack of response on other issues...
Beat's the hell outta me..I though we were making progress on that thread involving copy/paste issue too.
Or at least a temporary work-around, and perhaps provided a starting point for the programmers based on our tests that night.
I have no answers other than some thing take priority over others, and the copy/paste thing was not high on that priority list.
Tom
“The fact that no one understands you…Doesn’t make you an artist.”
Hawkfyr posted Tue, 20 February 2007 at 4:15 PM
@ pjz
So you are comparing a "Site Wide Change in "Policy"..to a few "Claims" of wrong doings regarding Spam?
Perhaps..the staff abandoning thier weekend plans to come in and satisfy those "claims" would please you?
I suppose she should also satisfy your "Urge" for more investigation, by dropping everything...Just for You.
[One word}
Perspective
Tom
“The fact that no one understands you…Doesn’t make you an artist.”
XENOPHONZ posted Tue, 20 February 2007 at 5:21 PM
Quote - I still strongly suspect Rendo of being the breach. There are certainly some other interesting theories, but Occam's Razor is a pretty good rule. If it looks like a duck, and quacks like a duck, it's probably a duck.
Yep. And the basic, elementary idea concerning instances of spam is that e-mail addresses have been harvested somewhere in transit - or through any of numerous other methods commonly used by spammers.
So that's the likely form of the duck.
vince3 posted Tue, 20 February 2007 at 5:30 PM
Cheers Tom!! i get all my ebots and newsletters and a couple of other newsletters from other sites and or things i've had demo of or registered software. i had forgotten about my anti-virus (Mcafee) i think i remember that has something to do with my incoming emails, not sure though as i've never had a bubble pop-up about it. so maybe the ISP does it for me, i think i did have to allow Rendo at some point in my security settings, but that might just be the pop-up blocker.
i think i have very high security settings because i did some weird test a while ago that try to contact my computer and get it to respond, but it couldn't get a response to anything it tried, so my 'puter passed all it's tests, which i don't think was supposed to happen as it was also trying to sell me security software on the sidebar (LOL)
i wonder if the fact i don't make any credit card purchases on this computer means i don't get spam.
anyway thanks for an answer Tom i'll have a look at my anti virus to see what that is actually doing.
you might be right about the horseshoe! i just wish the horse would of taken it off first!! people are starting to stare. and it is getting a right NAG-IN-PAIN-IN-THE-@SS*
Hawkfyr posted Tue, 20 February 2007 at 7:06 PM
Glad to help.
BTW..perhaps this is the horse in question.He does seem to be missing '"Something"
“The fact that no one understands you…Doesn’t make you an artist.”
Hawkfyr posted Tue, 20 February 2007 at 7:09 PM
Or maybe this one...wait....doesn't that look?....why yes...it looks like it could be a duck.
I think we've found our culprit.
8 )
Tom
“The fact that no one understands you…Doesn’t make you an artist.”
vince3 posted Wed, 21 February 2007 at 4:50 AM
HAHA that's him!! you do those anims so well!!
I know there is a gag in that duck one somewhere, but i don't know what a lame duck actually is so i won't ask "whats wrong with his leg", but i suspect fowl play here!!
5.9 )
Vince
StaceyG posted Wed, 21 February 2007 at 10:46 AM
A good possibility is that some of the folks that a member might communicate with thru the site could have a virus that has grabbed their address-book & gone crazy with it. That's a very common source of emails for spammers these days.
And it could be it's no accident that folks you "know" or have communicated with are also getting Spammed."
Renderosity does not distribute email addresses, No One on our staff . And our site has not been hacked.
gillbrooks posted Wed, 21 February 2007 at 11:14 AM
That could be a possiblity for some, but please consider -
If I receive an email that has been sent through the site and it needs a reply, I do so using a different address, not the one that is used here. I also delete the part in the reply that has my email address in it
e.g.
-----Original Message-----
From: whoever@whatever.com [mailto:whoever@whatever.com]
Sent: 21 February 2007 16:51
To: myemailthatisprivate@mysite.com <<<this line is removed
Subject: spamcheck
Return-Path: gillsmail@yahoo.co.uk **<< This the account I chose to send out the reply with
**Received: from mwinf3209.me.freeserve.com (mwinf3209.me.freeserve.com)
by mwinb3004 (SMTP Server) with LMTP; Wed, 21 Feb 2007 17:59:51 +0100
X-Sieve: Server Sieve 2.2
Envelope-to: xyz@gillsemail.fsworld.co.uk
Received: from me-wanadoo.net (localhost [127.0.0.1])
by mwinf3209.me.freeserve.com (SMTP Server) with ESMTP id 6ACFC1400753
for xyz@gillsemail.fsworld.co.uk; Wed, 21 Feb 2007 17:59:51 +0100 (CET)
Received: from mtaout02-winn.ispmail.ntl.com (mtaout02-winn.ispmail.ntl.com [81.103.221.48])
by mwinf3209.me.freeserve.com (SMTP Server) with ESMTP id 3EC591400740
for xyz@gillsemail.fsworld.co.uk; Wed, 21 Feb 2007 17:59:51 +0100 (CET)
X-ME-UUID: 20070221165951257.3EC591400740@mwinf3209.me.freeserve.com
Received: from aamtaout02-winn.ispmail.ntl.com ([81.103.221.35])
by mtaout02-winn.ispmail.ntl.com with ESMTP
The source on the reply then only has the address that I chose to reply with
Therefore, there is nowhere on an email I may have corresponed with another member that used the email option any trace of my original email address.
FYI all the email addresses show above have been amended for the obvious reasons
Gill
Hawkfyr posted Wed, 21 February 2007 at 11:22 AM
"Fowl Play"......lmao...Good One. I always love a good play on words Oh Clever One....lol. (I only wish I'd used it)
I didn't do that animation...(or the image that followed) I just used-em for parody's sake.
A lot of the animations, I do make...but not that one.
Tom <~~~ Still Laffin
“The fact that no one understands you…Doesn’t make you an artist.”
Hawkfyr posted Wed, 21 February 2007 at 12:07 PM
Hi Gill,
I mentioned this scenario before.
{"When That legitimate EBot, Newsletter reaches the member...and the member clicks on a link to respond, the whole thing happens again...just in the reverse direction.(You have "Requested" a Web link via your E-Mail)
For those With Dedicated Renderosity E-Mail accounts, that receive E-Mail through that dedicated account, only...but reply (..Copy Paste..whatever) from another Account. Still "Received" it To that address. and thus susceptible to it being intercepted.
So it can happen coming..or going... Snatched,along the way.
Lets say are Harvester acquires his list from one of those many points.."}
You Still Received It.
Tom
“The fact that no one understands you…Doesn’t make you an artist.”
JenX posted Wed, 21 February 2007 at 1:03 PM
Also, just to emphasize this...if the email does not bounce back to the spammer in any way, they see that it's a viable email address, and keep sending.
Sitemail | Freestuff | Craftythings | Youtube|
Knowledge is knowing a tomato is a fruit. Wisdom is not putting it
into a fruit salad.
pjz99 posted Wed, 21 February 2007 at 7:56 PM
Quote - So you are comparing a "Site Wide Change in "Policy"..to a few "Claims" of wrong doings regarding Spam?
I'll spell this out as simply as I can: If Rendo cannot be trusted to keep your email info private, then how can you trust them to keep your credit card transaction info private? Yes, my identity information and credit card risk is a lot more important than the thumbnail rules change was. So is yours. It deserves at least as much attention, and diligent and rapid response.
Seems to me this concern is being completely blown off by site management, with a fair amount of help from certain users. This distresses me very deeply. If the obvious happened here (rendo gave/sold email info), doesn't it bother anyone that the info was given/sold to ID theft scammers, from the text of some of these spams??
It may be that a more reassuring response is forthcoming, but I'm not expecting one. Very unhappy about this.
Edit: "reassuring" meaning what steps were taken to investigate, and more than one or two sentences. Typical due diligence stuff you'd expect from any professional company, not a blanket "nuh uh, wasn't us!"
pjz99 posted Wed, 21 February 2007 at 8:04 PM
StacyG
Quote - A good possibility is that some of the folks that a member might communicate with thru the site could have a virus that has grabbed their address-book & gone crazy with it. That's a very common source of emails for spammers these days.
No, if you communicate with someone through the site (e.g. sitemail or the Send Email option) you are never shown the recipient's email address, ergo it couldn't be in your address book and couldn't be intercepted by virus (that is, that's good site design on Bondware's part).
Hawkfyr posted Wed, 21 February 2007 at 10:09 PM
Credit Card issue has been Explained.
Spam possibilities have been Explained.
You offer no proof to the contrary.
Not unlike your accusations....which you also offer no proof.
Gather some research....or maybe some evidence Oh Reader of Naught.
“The fact that no one understands you…Doesn’t make you an artist.”
gradient posted Wed, 21 February 2007 at 10:25 PM
@pjz99;
You need to understand that the email may have to travel thru many many different portals before reaching its final destination. At EACH portal, it leaves it's signature....if it had to pass thru 20 "doors" to get to the recipient......YOUR email addy could have been picked up at EACH of those 20 points....if someone wanted....
If it got recorded at any one of those 20 points by someone that "harvests"....well you'll get all sorts of stuff sent to you.
Sorry, but its just the way email works....
In youth, we learn....with age, we understand.
pjz99 posted Wed, 21 February 2007 at 11:11 PM
Quote - Gather some research....or maybe some evidence Oh Reader of Naught.
Seriously, please shut up. You're not in the tiniest bit qualified to answer any of these concerns, and you have zip for factual information. You simply cannot address these concerns in any useful way. I am at a complete loss to understand why anyone would be so zealous in defense of something they're completely ignorant of.
Do you work for Rendo? Do you work for Bondware? Are you their mail administrator? No on all three. Please stop putting your posts forward as any use whatsoever. I don't want responses from you. You cannot help me.
Hawkfyr posted Wed, 21 February 2007 at 11:13 PM
"Yes, my identity information and credit card risk is a lot more important than the thumbnail rules change was. So is yours. "
So....How it you know I even have a credit card?
I think you have some splainin to do
8 )
@ Gill...
I owe you an apology...I had forgotten about the Mail-washer thing...( Was actually hoping another Mailwasher user might step in to address that, and forgot about our exchange yesterday)
BUT...when Rosity sends out an e-mail to you..( E-Bot, Newsletter, Love-Letter, Dear-John letter,etc.) Does it not have the destination E-Mail address attached to it?...I would assume it would have to...otherwise...it would not know where to go.
Routers along the way would reject it as undeliverable, I would imagine, because it wouldn't contain the directions to you.
Just because it stays on your server until you download it (Which You don't)...doesn't mean that it might not contain the E-Mail address information of the recipient it was intended to reach.. and thus susceptible to "En-snatchment" at any of those points along the path.
Additionally...And as mentioned...I you didn't "Bounce it"( Why Would You..unless it was a Dear John letter...lol ) which would likely take a similar if not exact route back..It wouldn't take any path back, and the interceptor"says "We Have a Winner"...No Bounce.
Again...I apologize for forgetting about, and failing to digest and explore the Mail-Washer Thing.
"En-snatchment" ...Hey...I like that word..
8 )
Tom
“The fact that no one understands you…Doesn’t make you an artist.”
pjz99 posted Wed, 21 February 2007 at 11:14 PM
Quote - Sorry, but its just the way email works....
I fully understand how email works and how addresses can be gathered. I can think of many scenarios that haven't been mentioned, in fact. All of these are pretty unlikely. The by-far most likely explanation remains that it was directly leaked from Rendo. The simplest explanation tends to be the correct one.
No Rendo/Bondware administrative staff have addressed this with any degree of diligence. A simple "nope, wasn't us" is not sufficient.
Hawkfyr posted Wed, 21 February 2007 at 11:34 PM
Please...Do provide for me "Your Qualifications" and "Your Factual information". (Other than the Duck theory that is)
It seems to me that the consensus here supports or at least conceder's my explanations...Yet I see few supporting your "Duck Theory".
As I said...I'm not a genius. (You had other ways of describing my "experience") But I Think I've offered up a bit more technical possibilities here, than you have. Or to the contrary.
Until the "Shut Up" remark, I had actually started to see improvement in your demeanor.
I mean...you went all the way from
**"I'd gotten one the other day, now I've just gotten a second one. It'd be either Rendo or DAZ that sold my address out."
**
To:
I still strongly suspect Rendo of being the breach. There are certainly some other interesting theories,
I do have confidence in you though...in fact....I quite like you. I like anyone who brings amusement to the community.
8 )
Tom
“The fact that no one understands you…Doesn’t make you an artist.”
Ardiva posted Wed, 21 February 2007 at 11:49 PM
Attached Link: Mail Washer program
Speaking of "Mail Washer", I'm viewing this thread and posting while the ebot is still on my server. When I'm done, I will delete it from the server without ever having to download it with my Outlook Express. All kinds of regular spam I can take care of with MW and never see again. Love it!pjz99 posted Wed, 21 February 2007 at 11:51 PM
Sigh. I guess I can expect another post from site management patting Hawkfyr on the head for clouding the issue as much as possible.
Hawkfyr: You. Can. Not. Address. This. Problem. In. Any. Useful. Way. WHATSOEVER. This is a matter that can only be investigated and addressed by Rendo site admin staff. Your experience or knowledge or mystical comprehension of The Encompassing All have absolutely no bearing on what happened, it's only speculation. I could ask a bum on the street what happened if I wanted that kind of meaningless dross. You don't work for Rendo, you don't work for Bondware, and you have no valuable or pertinent information regarding this matter at all. Your sneering responses do nothing but fluff your own ego.
Hawkfyr posted Thu, 22 February 2007 at 12:07 AM
Thanks You Ardiva
I was quite happy with Mailwasher also...It stopped lots of Spam...but not all...I'd probably still use it if the free version supported multiple accounts.
(SPAM simply doesn't bother me enough to buy it)
Anyway...I wish you hadn't deleted it... a dig through the properties might reveal if that E-Mail information (Yours) was nestled in there somewhere.
Again...I don't have it anymore...and have no way to confirm that.
Maybe the next e-bot you get...you can check it out for me before you delete it.
That would go a long way in eliminating my theory as a possibility.
(I don't mind being wrong...I just try to base my theories of facts if available)
Again...Thank you for participating in helping find a solution.
8 )
Tom
“The fact that no one understands you…Doesn’t make you an artist.”
Hawkfyr posted Thu, 22 February 2007 at 12:10 AM
"Speculation?"
You wouldn't happen to have a mirror handy would you?
Tom
“The fact that no one understands you…Doesn’t make you an artist.”
Ardiva posted Thu, 22 February 2007 at 12:14 AM
Ok..reading this from MW...I'll check the headers:I don't mind having my email addy show up. I have MW. lol
QUOTE:
Return-Path: ebot@renderosity.com
Received: from edge01.suddenlink.net ([68.230.241.4])
by imta01.suddenlink.net
(InterMail vM.7.05.02.00 201-2174-114-20060621) with ESMTP
id 20070222060541.WXRU1618.imta01.suddenlink.net@edge01.suddenlink.net
for helenc@suddenlink.net; Thu, 22 Feb 2007 00:05:41 -0600
Received: from fed1rmmtai101.cox.net ([68.230.241.4])
by edge01.suddenlink.net
(InterMail vG.2.02.00.00 201-2161-120-101-20051020) with ESMTP
id 20070222060720.CUKP2291.edge01.suddenlink.net@fed1rmmtai101.cox.net
for helenc@suddenlink.net; Thu, 22 Feb 2007 00:07:20 -0600
Received: from fed1rmimpi03.cox.net ([70.169.32.70])
by fed1rmmtai101.cox.net
(InterMail vM.7.05.02.00 201-2174-114-20060621) with ESMTP
id 20070222060719.LONO4859.fed1rmmtai101.cox.net@fed1rmimpi03.cox.net
for helenc@cox.net; Thu, 22 Feb 2007 01:07:19 -0500
Received: from emarket.bondware.com ([66.18.106.215])
by fed1rmimpi03.cox.net with IMP
id SW7G1W06K4erjbW0000000; Thu, 22 Feb 2007 01:07:18 -0500
Received: from gawain.bondware.com (gawain.bondware.com [66.18.106.214])
by emarket.bondware.com (SurgeMail 3.8f3) with ESMTP id 8911625-1792139
for helenc@cox.net; Thu, 22 Feb 2007 00:07:16 -0600
Return-Path: ebot@renderosity.com
Date: Thu, 22 Feb 2007 00:07:16 -0600
Return-Path: ebot@renderosity.com
To: undisclosed-recipients:;
From: Renderosity Forums ebot@renderosity.com
Subject: Someone has replied to "Leaks - Renderosity got hacked???" on Renderosity.com!
Message-ID: ae7794fb8d4f4223a4cac13de3ca3f84@gawain.bondware.com
X-Priority: 3
X-Mailer: PHPMailer [version 1.73]
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="b1_ae7794fb8d4f4223a4cac13de3ca3f84"
--b1_ae7794fb8d4f4223a4cac13de3ca3f84
Content-Type: text/plain; charset = "iso-8859-1"
Content-Transfer-Encoding: 8bit
This is a notification that Hawkfyr has replied to the thread "Leaks - Renderosity got hacked???" in the Community Center forum. Go to http://www.renderosity.com/mod/forumpro/showthread.php?message_id=2910969&ebot_calc_page#message_2910969 to view this message or to http://www.renderosity.com/mod/forumpro/showforum.php?forum_id=12357 to visit the forum.
You can go to http://www.renderosity.com/mod/forumpro/index.php?my_options to edit your options. You can also go to http://www.renderosity.com/mod/forumpro/showthread.php?message_id=2910969&unsubscribe to unsubscribe from this thread directly.
--b1_ae7794fb8d4f4223a4cac13de3ca3f84
Content-Type: text/html; charset = "iso-8859-1"
Content-Transfer-Encoding: 8bit
This is a notification that Hawkfyr has replied to the thread "Leaks - Renderosity got hacked???" in the Community Center forum. Click here to view this message or here to visit the forum. You can edit your options here. You can also unsubscribe from this thread directly by clicking here. |
--b1_ae7794fb8d4f4223a4cac13de3ca3f84--
UNQUOTE
ps..I used to be with Cox.net until they were bought out by Suddenlink.
Hawkfyr posted Thu, 22 February 2007 at 12:19 AM
Is this your E-Mail Address?
“The fact that no one understands you…Doesn’t make you an artist.”
Ardiva posted Thu, 22 February 2007 at 12:21 AM
Quote - Is this your E-Mail Address?
Yep!
Also would like to say that I rarely use my OE unless I get mail from a friend.
Hawkfyr posted Thu, 22 February 2007 at 12:24 AM
There's your Duck
I rest my case.
Thank You Ardiva
Thank You very much.
Tom
“The fact that no one understands you…Doesn’t make you an artist.”
Ardiva posted Thu, 22 February 2007 at 12:44 AM
Quote - There's your Duck
I rest my case.
Thank You Ardiva
Thank You very much.
Tom
You're quite welcome, Tom. Is this "duck" lame? lol
Hawkfyr posted Thu, 22 February 2007 at 12:49 AM
8 )
BTW the helenc@cox.net E-Mail re-direct...is a double ducky.
Thanks again.
Tom
“The fact that no one understands you…Doesn’t make you an artist.”
Ardiva posted Thu, 22 February 2007 at 12:51 AM
Quote - Naw... just needs a little luvin.
8 )
BTW the helenc@cox.net E-Mail re-direct...is a double ducky.
Thanks again.
Tom
Yeah, Suddenlink said that they would be re-directing our emails for awhile.
Hawkfyr posted Thu, 22 February 2007 at 1:38 AM
“The fact that no one understands you…Doesn’t make you an artist.”
bonestructure posted Thu, 22 February 2007 at 3:28 AM
The most common method of getting emails is using a spider that goes through any site entirely, down to the smallest detail and gathers all the emails it finds as well as sending other spiders to any links it finds on the site. There is no such thing as a safe email address. It's the reality of the current internet. All my email goes to the server of my isp. I can go to the server and delete all spam from the email and never download it to my computer. This is very nice for me as I can delete any suspicious emails as well. I don't mind a bit the few minutes it takes to do it.
Talent is God's gift to you. Using it is your gift to God.
gillbrooks posted Thu, 22 February 2007 at 4:31 AM
OK but if we were to accept the 101 ways to harvest an email address, why would it take 2 or 3 years for mine to suddenly be compromised? I've been using dedicated addresses as previously mentioned at other 3D sites for the same amount of time and no spam has ever come through from those.
On certain other sites that are less secure with their info, I have to drop the old and create a new address every few weeks because of the amount of spam they get
Justa thought
Gill
pjz99 posted Thu, 22 February 2007 at 6:37 AM
Is there any point in asking? Some random person will just step up and put forth a vanishingly unlikely theory and rest his case. Here, I'll save you some time: hyper-evolved ants gnawed through the wires outside your house, converted the electrical signal to chemical, hot-footed it back to the queen, who then sent you spam. It couldn't be that someone took a hundred bucks in exchange for 500,000 of verified valid email addresses, I mean, that'd be unthinkable.
http://www.google.com/search?sourceid=navclient&aq=t&ie=UTF-8&rls=GGLJ,GGLJ:2006-52,GGLJ:en&q=buy+lists+email+addresses
DDevant posted Thu, 22 February 2007 at 7:24 AM
*"It couldn't be that someone took a hundred bucks in exchange for 500,000 of verified valid email addresses, I mean, that'd be unthinkable."
*I'm still surprised that no admin has adressed this serious accusation.
JenX posted Thu, 22 February 2007 at 7:25 AM
sigh
Place up as many theories as you want.
The only email address that will never get spam is the email address that never communicates (either way, sending or receiving) outside an internal network. (Even then, if the ladies in accounting get your email addy, you'll get forwards up the wazoo.) But, seriously, that's the reality of the internet. The only safe email address is either an uncreated one or one that is an internal-network only one.
Sitemail | Freestuff | Craftythings | Youtube|
Knowledge is knowing a tomato is a fruit. Wisdom is not putting it
into a fruit salad.
JenX posted Thu, 22 February 2007 at 7:27 AM
Quote -
Renderosity does not distribute email addresses, No One on our staff . And our site has not been hacked.
Actually, Stacey addressed the fact. Here's the quote.
Sitemail | Freestuff | Craftythings | Youtube|
Knowledge is knowing a tomato is a fruit. Wisdom is not putting it
into a fruit salad.
DDevant posted Thu, 22 February 2007 at 7:40 AM
The accusation is that an individual may have sold email addresses. Nowhere in this thread is that possibility irrefutably denied. To say that it is not Renderositys policy to distribute email addresses is not a denial of the accusation.
If this has not happened why could an Admin not stated so clearly at the beginning of the thread?
Instead we got the atack dogs attempting to humiliate and denigrate any one who dares to ask.
JenX posted Thu, 22 February 2007 at 7:42 AM
Ok, so, here's what I want. Because, really, between the two of you, my ears are bleeding.
Can either of you explain how I got the exact same spam message that's posted in post 1 to THREE email addresses that have NOTHING to do with Renderosity?
If you can, then, I'll shut up and go away.
Sitemail | Freestuff | Craftythings | Youtube|
Knowledge is knowing a tomato is a fruit. Wisdom is not putting it
into a fruit salad.
DDevant posted Thu, 22 February 2007 at 8:12 AM
Jen I'm not asking how members have received spam. There are many possible ways as have been mentioned above. I'm asking an admin, not you or Hawkfyr, why they cannot address the accussation with a simple yes or no answer.
Sorry to hear about your ears.
Ardiva posted Thu, 22 February 2007 at 8:33 AM
Quote - The most common method of getting emails is using a spider that goes through any site entirely, down to the smallest detail and gathers all the emails it finds as well as sending other spiders to any links it finds on the site. There is no such thing as a safe email address. It's the reality of the current internet. All my email goes to the server of my isp. I can go to the server and delete all spam from the email and never download it to my computer. This is very nice for me as I can delete any suspicious emails as well. I don't mind a bit the few minutes it takes to do it.
This is exactly how Mail Washer works. :)
Khai posted Thu, 22 February 2007 at 8:37 AM
Curiously enough, the only thing that went through the mind of the bowl of petunias as if fell was "Oh no, not again".
gillbrooks posted Thu, 22 February 2007 at 9:13 AM
Quote - Ok, so, here's what I want. Because, really, between the two of you, my ears are bleeding.
Can either of you explain how I got the exact same spam message that's posted in post 1 to THREE email addresses that have NOTHING to do with Renderosity?
If you can, then, I'll shut up and go away.
Yes a very simple explaination - your 3 addresses were on the same list/CD whatever.
I received the same spam on more than one account but I expected spam on those, not my rendo mail account.
Gill
Hawkfyr posted Thu, 22 February 2007 at 10:01 AM
Hi Gill
Why you suddenly started getting it now could also involve 100's of reasons...Maybe said Dirty Rat, recently started working, or having access to, one of those many points along the way...Or...someone that has had access for a long time...decided he needed a few extra bux.
Also...New Points are constantly being integrated, that provide new or alternate route's for data to be transferred....Again...It could be many reasons why Suddenly now.
I agree that It could be that someone took a hundred bucks in exchange for 500,000 of verified, valid addresses....in fact...I'd wager that it exactly what happened.
My effort wasn't to prove that said Dirty Rat was not a Representative of Renderosity...But that the possibility of the Addresses being acquired otherwise exists.
(And Likely IMHO)
Proof..and Opinions, and two very different things. Again...My efforts were to prove that it could have happened otherwise, and therefore outside of Rosity's to control and/or explain. To expect Them to "Prove" it was not them...is simply unrealistic.
It's like... **"**How do you Prove you don't have something?"...you can't....You can only offer up alternative possibilities that leave room for "Reasonable Doubt".
.
My efforts were to offer up one of those alternate possibilities, to those insisting, Rosity must" be the culprit..without any investigation, Just Sensational claims, lofty expectations,and the typical" I know more than you so just shut up".
Again...It's "Contempt Prior To Investigation"
The other possibilities reach far and wide...my effort was to show just one.
I can offer no proof as to why it only recently happened...I don't think anyone could. ..only that it could be one, among thousands of reasons, given the "FACT", that the E-mails could have been acquired in one of thousands of ways.
Again... my effort was not to "Prove" Renderosity is not the culprit, but rather that another possibility exists...and the existence of that possibility....is reasonable doubt.
Tom
“The fact that no one understands you…Doesn’t make you an artist.”
StaceyG posted Thu, 22 February 2007 at 10:25 AM
I am now locking this thread as the original questions were answered by admin.
No our site wasn't hacked
No we don't distribute email addresses
No one on our admin team sold email addresses... not now not ever.
There are so many possibilities as to how spammers get your email address and some helpful members have thrown up these possibilites (as well as JeniferC and myself) so the original topic of this thread has been answered.