[gnu.org #263454] Take home $204,000.00 this month

[gnu.org #263454] Take home $204,000.00 this month

[Jose E. Marchesi via RT]

[gnu.org #263454] Take home $204,000.00 this month

[Jose E. Marchesi via RT]

Headsup: Rogue or hacked account spamming via RT? re: [gnu.org #263454]

[Dave Korn via RT]

    Hello GNU webmasters,

  I hope this is the right place to report what appears to be a problem at
rt.gnu.org, I couldn't find an explicit contact address for it.

  We just got two posts on the GCC mailing list with the subject line
"[gnu.org #263454] Take home $204,000.00 this month":

http://gcc.gnu.org/ml/gcc/2009-09/msg00650.html
http://gcc.gnu.org/ml/gcc/2009-09/msg00651.html

and according to the headers (visible by the "raw text" links at the above
URLs) these appear to have genuinely originated at rt.gnu.org via the web
interface:

> From gcc-return-156943-listarch-gcc=gcc dot gnu dot org at gcc dot gnu dot org Wed Sep 30 21:26:16 2009
> Return-Path: <gcc-return-156943-listarch-gcc=gcc dot gnu dot org at gcc dot gnu dot org>
> Delivered-To: listarch-gcc at gcc dot gnu dot org
> Received: (qmail 965 invoked by alias); 30 Sep 2009 21:26:15 -0000
> Received: (qmail 927 invoked by uid 22791); 30 Sep 2009 21:26:14 -0000
> X-SWARE-Spam-Status: No, hits=3.3 required=5.0 	tests=BAYES_20,CTYME_IXHASH,GENERIC_IXHASH,SPF_PASS
> X-Spam-Check-By: sourceware.org
> Received: from fencepost.gnu.org (HELO fencepost.gnu.org) (140.186.70.10)     by sourceware.org (qpsmtpd/0.43rc1) with ESMTP; Wed, 30 Sep 2009 21:26:12 +0000
> Received: from mail.gnu.org ([199.232.76.166]:35875 helo=mx10.gnu.org) 	by fencepost.gnu.org with esmtp (Exim 4.67) 	(envelope-from <www-data@gnu.org>) 	id 1Mt6gc-0000aj-Hs 	for gcc@gnu.org; Wed, 30 Sep 2009 17:26:10 -0400
> Received: from Debian-exim by monty-python.gnu.org with spam-scanned (Exim 4.60) 	(envelope-from <www-data@gnu.org>) 	id 1Mt6gN-0003BZ-IS 	for gcc@gnu.org; Wed, 30 Sep 2009 17:26:09 -0400
> Received: from rt.gnu.org ([199.232.76.167]:48703) 	by monty-python.gnu.org with esmtps (TLS-1.0:RSA_AES_256_CBC_SHA1:32) 	(Exim 4.60) 	(envelope-from <www-data@gnu.org>) 	id 1Mt6fy-00034y-H1; Wed, 30 Sep 2009 17:25:31 -0400
> Received: from www-data by rt.gnu.org with local (Exim 4.69) 	(envelope-from <www-data@gnu.org>) 	id 1Mt6lf-0007l4-40; Wed, 30 Sep 2009 17:31:23 -0400
> Subject: [gnu.org #263454] Take home $204,000.00 this month
> From: "Jose E dot  Marchesi via RT" <tasks at gnu dot org>
> Reply-To: tasks at gnu dot org
> In-Reply-To:
> References: <RT-Ticket-263454@rt.gnu.org>
> Message-ID: <rt-3.4.5-24773-1254346282-1391.263454-5-0@rt.gnu.org>
> X-RT-Loop-Prevention: gnu.org
> RT-Ticket: gnu.org #263454
> Managed-by: RT 3.4.5 (http://www.bestpractical.com/rt/)
> RT-Originator: jemarch@gnu.org

  Somebody with administrative access probably needs to take an urgent look at
who's in control of the "jemarch" account, I think.

    cheers,
      DaveK

Headsup: Rogue or hacked account spamming via RT? re: [gnu.org #263454]

[Dave Korn via RT]

    Hello GNU webmasters,

  I hope this is the right place to report what appears to be a problem at
rt.gnu.org, I couldn't find an explicit contact address for it.

  We just got two posts on the GCC mailing list with the subject line
"[gnu.org #263454] Take home $204,000.00 this month":

http://gcc.gnu.org/ml/gcc/2009-09/msg00650.html
http://gcc.gnu.org/ml/gcc/2009-09/msg00651.html

and according to the headers (visible by the "raw text" links at the above
URLs) these appear to have genuinely originated at rt.gnu.org via the web
interface:

> From gcc-return-156943-listarch-gcc=gcc dot gnu dot org at gcc dot gnu dot org Wed Sep 30 21:26:16 2009
> Return-Path: <gcc-return-156943-listarch-gcc=gcc dot gnu dot org at gcc dot gnu dot org>
> Delivered-To: listarch-gcc at gcc dot gnu dot org
> Received: (qmail 965 invoked by alias); 30 Sep 2009 21:26:15 -0000
> Received: (qmail 927 invoked by uid 22791); 30 Sep 2009 21:26:14 -0000
> X-SWARE-Spam-Status: No, hits=3.3 required=5.0 	tests=BAYES_20,CTYME_IXHASH,GENERIC_IXHASH,SPF_PASS
> X-Spam-Check-By: sourceware.org
> Received: from fencepost.gnu.org (HELO fencepost.gnu.org) (140.186.70.10)     by sourceware.org (qpsmtpd/0.43rc1) with ESMTP; Wed, 30 Sep 2009 21:26:12 +0000
> Received: from mail.gnu.org ([199.232.76.166]:35875 helo=mx10.gnu.org) 	by fencepost.gnu.org with esmtp (Exim 4.67) 	(envelope-from <www-data@gnu.org>) 	id 1Mt6gc-0000aj-Hs 	for gcc@gnu.org; Wed, 30 Sep 2009 17:26:10 -0400
> Received: from Debian-exim by monty-python.gnu.org with spam-scanned (Exim 4.60) 	(envelope-from <www-data@gnu.org>) 	id 1Mt6gN-0003BZ-IS 	for gcc@gnu.org; Wed, 30 Sep 2009 17:26:09 -0400
> Received: from rt.gnu.org ([199.232.76.167]:48703) 	by monty-python.gnu.org with esmtps (TLS-1.0:RSA_AES_256_CBC_SHA1:32) 	(Exim 4.60) 	(envelope-from <www-data@gnu.org>) 	id 1Mt6fy-00034y-H1; Wed, 30 Sep 2009 17:25:31 -0400
> Received: from www-data by rt.gnu.org with local (Exim 4.69) 	(envelope-from <www-data@gnu.org>) 	id 1Mt6lf-0007l4-40; Wed, 30 Sep 2009 17:31:23 -0400
> Subject: [gnu.org #263454] Take home $204,000.00 this month
> From: "Jose E dot  Marchesi via RT" <tasks at gnu dot org>
> Reply-To: tasks at gnu dot org
> In-Reply-To:
> References: <RT-Ticket-263454@rt.gnu.org>
> Message-ID: <rt-3.4.5-24773-1254346282-1391.263454-5-0@rt.gnu.org>
> X-RT-Loop-Prevention: gnu.org
> RT-Ticket: gnu.org #263454
> Managed-by: RT 3.4.5 (http://www.bestpractical.com/rt/)
> RT-Originator: jemarch@gnu.org

  Somebody with administrative access probably needs to take an urgent look at
who's in control of the "jemarch" account, I think.

    cheers,
      DaveK

Re: Headsup: Rogue or hacked account spamming via RT? re: [gnu.org #263454]

[Daniel Jacobowitz]

On Wed, Sep 30, 2009 at 06:48:02PM -0400, Dave Korn via RT wrote:
> 
>     Hello GNU webmasters,
> 
>   I hope this is the right place to report what appears to be a problem at
> rt.gnu.org, I couldn't find an explicit contact address for it.
> 
>   We just got two posts on the GCC mailing list with the subject line
> "[gnu.org #263454] Take home $204,000.00 this month":
> 
> http://gcc.gnu.org/ml/gcc/2009-09/msg00650.html
> http://gcc.gnu.org/ml/gcc/2009-09/msg00651.html
> 
> and according to the headers (visible by the "raw text" links at the above
> URLs) these appear to have genuinely originated at rt.gnu.org via the web
> interface:

Isn't this more likely the RT admins closing spam reports?

-- 
Daniel Jacobowitz
CodeSourcery

Re: Headsup: Rogue or hacked account spamming via RT? re:

[Dave Korn]

Daniel Jacobowitz wrote:
> On Wed, Sep 30, 2009 at 06:48:02PM -0400, Dave Korn via RT wrote:
>>     Hello GNU webmasters,
>>
>>   I hope this is the right place to report what appears to be a problem at
>> rt.gnu.org, I couldn't find an explicit contact address for it.
>>
>>   We just got two posts on the GCC mailing list with the subject line
>> "[gnu.org #263454] Take home $204,000.00 this month":
>>
>> http://gcc.gnu.org/ml/gcc/2009-09/msg00650.html
>> http://gcc.gnu.org/ml/gcc/2009-09/msg00651.html
>>
>> and according to the headers (visible by the "raw text" links at the above
>> URLs) these appear to have genuinely originated at rt.gnu.org via the web
>> interface:
> 
> Isn't this more likely the RT admins closing spam reports?

  It could be, I haven't seen anything like it happening before.  Does it
often result in email to the lists?

  I should have thought not to add the ticket # to the subject line though, I
assume that's why this post got mirrored here when I sent it to the webmasters
list.  Sorry for the noise all.

    cheers,
      DaveK

[gnu.org #263454] Re: Headsup: Rogue or hacked account spamming via RT? re: [gnu.org #263454]

[Jose E. Marchesi via RT]

Hi Dave.

It was me who, in a mistake (I wanted to delete them) marked those tickets
as "Opened".

Sorry for the inconvenience.

--
Jose E. Marchesi  <jemarch@gnu.org>
GNU Project       http://www.gnu.org