Re: A note to Red Hat about spam.

[Havoc Pennington <hp redhat com>]

E Nigma <enigma os2 ami com au> writes:
> 
> By these means I can be sure that if I get spammed, it's because of
> something Red Hat has done.
>
> I have already highlighted the fact that email addresses are
> published in the archives for Red Hat lists.
>

While it would be nice if someone fixed the mailman bug you're
referring to, you are wrong that the spam you got proves that spammers
are using that bug - spammers also use "dictionary attacks" - that is,
they try dictionaryword domain, and dictionaryword23 domain,
commonname domain, commoninitials domain, etc. Keeping an address
secret/unpublished isn't foolproof unless your address is
cryptographically random.

Havoc