[SBE] SBE Digest, Vol 204, Issue 1

[Jonathan Solomon]

Darryl, you said exactly what I wanted to say.  The phishing emails
are usually generated from an email list harvested from something
completely unrelated to the source.  Usually it's a PRIVATE email
address book that has been comprised by a virus, ad/malware etc.

You should treat email like a head of state would treat snail mail:
unless you are expecting the email, always suspect the return address
is bogus.  And even if the address looks legit, don't open attachments
if the content is strange.  For example, if you receive an email from
this list (looks legit and you expect it), with a subject of "girls
waiting for you" and a file attached, you wouldn't open it.  [Note for
the moderator, I know this wouldn't happen, and I know you can't
attach... it's the point.]

I'd say it's common sense, but even the best of us get burnt.

My $0.02.

Can I get change?

Jon

On Thu, Jul 23, 2009 at 4:14 PM, McGlothen, Darryl<darryl.mcg at klewtv.com> wrote:

> What you mean to say is, "I don't want to discuss my ignorance of security

> issues in public." A 'public forum' is exactly the place for security

> discussions to take place. While it is "off-topic" for this discussion list,

> the question as to whether the Society should or should not make PayPal a

> payment option for its members is cogent to the needs of those members using

> this list.

>

> That being said, your concern about List Members being 'spammed' simply

> because some use PayPal as a payment option is totally unfounded and

> unrelated to the spammers/scammers sending bogus PayPal/Ebay alerts to email

> addresses. Check out PayPal's Security Center (due diligence) for

> information about how PayPal protects the private information of its members

> and how they contact members in the event of a security issue.

>

> As to why you (or any other SBE member) may be getting bogus emails

> purporting to come from PayPal or Ebay, the fact that you have an email

> address is all the scammers need to send these messages. Membership in Ebay

> or PayPal is not a requirement just as non-membership or use of PayPal or

> Ebay services is not a protection from the scammers. If you don't want to

> ever get spam, don't have and use an email address! At least, don't 'Chicken

> Little' the issue by spreading false rumors and misinformation.

>

> I, for one, applaud the efforts of the Society to fill the needs of the

> membership by considering all the options.

>

> Darryl McGlothen, CBNT

>