Spam mentioning overclockers ?!?

I thought email isn't available on trust. You can send an email through it.

Regardless though, it's a worry. Can the dons please investigate this to see if it's worth going into as a potential data breach?

I doubt it's a data breach. Somebody only needs to log into an account and set something up to go through trust pages incrementally while gathering emails

http://trust.overclockers.co.uk/index.php?u=1
http://trust.overclockers.co.uk/index.php?u=2
http://trust.overclockers.co.uk/index.php?u=3
...
etc.

Craig
 
I got this one:

from: Party Boy <[email protected]>
to: [what_was_my_MSN_address_in_trust]
date: 25 December 2010 12:42
subject: Avaya on OcUK
mailed-by: hotmail.com
Hi mate

This is ThorpedoUK from OcUK

Not trying to be a salesman here but I work for an Avaya platinum partner, if you want some serious costs just tell me what you need and I can find out for you.

Again not trying to be a salesman, but if you are serious about finding out I can help you (doesn't have to lead to anything!) as a forum mate :-)

Cheers

Martin

Edit:
ThorpedoUK is actually an active member, I wonder if it's really him?
 
Last edited:
I think the Trust system was changed a while back so that senders couldn't see the email address of the person they were sending the message to. Very much doubt there's been a security breach though.
 
I think the Trust system was changed a while back so that senders couldn't see the email address of the person they were sending the message to. Very much doubt there's been a security breach though.

So do I. But I can't think of another explanation. Everybodies mind would be put to rest if an explanation was found.
 
I thought of that, then I thought that would mean the bot spamming the forum server and expected that there would be some kind of protection for that?

They'd only have to put a pause between each page load and it wouldn't have any impact on the server, nothing noticeable anyway. It could still be picked up, but then that depends how often the logs are checked and how thoroughly.

I think the Trust system was changed a while back so that senders couldn't see the email address of the person they were sending the message to. Very much doubt there's been a security breach though.

Yes, you're right, it has been changed. Can't see anyone's email anymore.

Craig
 
The change was made a very long time ago to Trust to not show email. I remember going into trust to get someone's email and seeing it.

Logs will stil exist to show widespread spamming of people through trust if that is how it was done. The people receiving the mails could check the headers as well to see if the spam was sent through the forums or not.
 
If you click to send the message, you cannot actually see the contact email you are sending to. However in the OP, "Glory" did not mention his name at all which may indicate that its an automated email? She only said she saw his email at these forums. Could be a case of you can only view peoples trust at 250+ posts? like the MM and Free delivery thingy majigs.
 
Back
Top Bottom