Re: Metalink spam

On Jan 31, 1:43 pm, Jim Smith <usene..._at_ponder-stibbons.com> wrote:
> In message <1170262339.85..._at_bubbleator.drizzle.com>, DA Morgan
> <damor..._at_psoug.org> writes>Jim Smith wrote:
> >> I recently received some recruitment spam from a company called Venus
> >>IT, using an email address which only exists as my metalink login.
> >> Has anyone else received anything like this?
> >> The availability of my metalink login to a third party has
> >>disturbing implications.
>
> >Never.
>
> >But what you just wrong seems self-contradictory.
>
> WTF?
>
> >If you received email with that name ... then it seems you also have
> >an email account so it has not "only" been used on metalink. Perhaps
> >I am misunderstanding.
>
> A metalink login must be an email address, but I have never sent any
> mail using that address. I usually use different addresses for
> registrations so I can try to trace where spammers get their info. It
> also reduces the impact if I have to change an address because of spam.
>
> >If you can confirm that it was obtained from metalink I would definitely
> >bring it to Oracle's attention. If you need a name at Oracle contact me
> >off-line.
>
> I've raised it with metalink feedback, but I don't expect much response.
> --
> Jim Smith
> Ponder Stibbons Limited <http://oracleandting.blogspot.com/>
> RSS <http://oracleandting.blogspot.com/atom.xml>

I also have a metalink-specific email address that has been spammed by this Venus.
It includes the obviously fake old "Disclaimer: Under Bills.1618 Title III passed by the 105th U.S. Congress this mail cannot be considered Spam as long as we include contact information and a method to be removed from our mailing list. To be removed from our mailing list please reply to the sender with the word "REMOVE" in your subject line. Include complete address and/or domain/aliases to be removed."

Unfortunately, I've made a couple of posts on the metalink forums. If you roll your cursor
or click on any name in any post, it displays the _current_ email address (I just tried
changing it to a new address, and it changed). I do not see any preference setting to
disallow that. I suppose someone at Oracle has made the assumption that anyone
paying for support would necessarily not be someone who would send unsolicited
commercial email...

That would be a really bad assumption.

jg

--
@home.com is bogus.
"You know what it means when you assume?"  "It makes an ass out of you
and me?" "NO, it means I'm going to be really pissed off at you!" -
Dirt