Subject: Re: Strange Messages from Amazon.com
From: Matthew Flaschen <matthew.flaschen@gatech.edu>
Date: Fri, 19 Jan 2007 13:00:25 -0500
Fri, 19 Jan 2007 13:00:25 -0500
Brian Behlendorf wrote:
> They see if they can subscribe an address to the list, by forging a
> subscription request to list-subscribe@host.org from an address they
> know will auto-reply to the subscription confirmation.

Ah, I see.  Could we make it a little more difficult to confirm
subscription, such as requiring the link or some sort of CAPTCHA?

Matthew Flaschen



["application/pgp-signature" not shown]