Re: atompub.org seems to have been hacked

Joe Gregorio <joe@bitworking.org> Sun, 08 May 2011 17:40 UTC

Return-Path: <owner-atom-syntax@mail.imc.org>
X-Original-To: ietfarch-atompub-archive@ietfa.amsl.com
Delivered-To: ietfarch-atompub-archive@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E3182E0691 for <ietfarch-atompub-archive@ietfa.amsl.com>; Sun, 8 May 2011 10:40:17 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.977
X-Spam-Level:
X-Spam-Status: No, score=-2.977 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, FM_FORGED_GMAIL=0.622, RCVD_IN_DNSWL_LOW=-1]
Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id hmXpDkLDep3I for <ietfarch-atompub-archive@ietfa.amsl.com>; Sun, 8 May 2011 10:40:17 -0700 (PDT)
Received: from hoffman.proper.com (IPv6.Hoffman.Proper.COM [IPv6:2001:4870:a30c:41::81]) by ietfa.amsl.com (Postfix) with ESMTP id A9F8FE068B for <atompub-archive@ietf.org>; Sun, 8 May 2011 10:40:16 -0700 (PDT)
Received: from hoffman.proper.com (localhost [127.0.0.1]) by hoffman.proper.com (8.14.4/8.14.3) with ESMTP id p48HaaK1057823 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Sun, 8 May 2011 10:36:36 -0700 (MST) (envelope-from owner-atom-syntax@mail.imc.org)
Received: (from majordom@localhost) by hoffman.proper.com (8.14.4/8.13.5/Submit) id p48Haa15057822; Sun, 8 May 2011 10:36:36 -0700 (MST) (envelope-from owner-atom-syntax@mail.imc.org)
X-Authentication-Warning: hoffman.proper.com: majordom set sender to owner-atom-syntax@mail.imc.org using -f
Received: from mail-pz0-f43.google.com (mail-pz0-f43.google.com [209.85.210.43]) by hoffman.proper.com (8.14.4/8.14.3) with ESMTP id p48HaZ0n057817 (version=TLSv1/SSLv3 cipher=RC4-SHA bits=128 verify=FAIL) for <atom-syntax@imc.org>; Sun, 8 May 2011 10:36:36 -0700 (MST) (envelope-from joe.gregorio@gmail.com)
Received: by pzk1 with SMTP id 1so2819945pzk.16 for <atom-syntax@imc.org>; Sun, 08 May 2011 10:36:35 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:sender:in-reply-to:references:date :x-google-sender-auth:message-id:subject:from:to:cc:content-type :content-transfer-encoding; bh=DoLuXystkKhok2d7kVmS24HWik8sOOByBVyIChjeWPs=; b=ATcETzbLUEzWHtJCA6DUow5b+UwnAXC06vWQgkOWKrrnXIlDS7CkcXLd45ph/AAQAt lDjvz/V6PrbCAU4UQ4t8kIjswwHrBfl2vPmvxUDDiT7uHw7Z02qYkvHqm1RmO5tP6CD4 ifjm/rsh+hjRsvUTnmQOhxoibquA7IKZCalxY=
DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:sender:in-reply-to:references:date :x-google-sender-auth:message-id:subject:from:to:cc:content-type :content-transfer-encoding; b=LKIaRuIbgEMMd0DMLFDG7BcymmK7RY1Fpb+cc4PETHwkWCrYlDB25SaWo06l/McCF7 iak4lE2h8UeliQYI5WOA9zHMYjV9Hc3u7rVDrt34XzrtmhG2873ChadTD+Xlae0YRnVC IM/K/Wd2H2zk9R0FgZ8Mj59fkwvd4akSvSbew=
MIME-Version: 1.0
Received: by 10.68.11.228 with SMTP id t4mr8854275pbb.294.1304876195362; Sun, 08 May 2011 10:36:35 -0700 (PDT)
Received: by 10.68.58.201 with HTTP; Sun, 8 May 2011 10:36:35 -0700 (PDT)
In-Reply-To: <4DC6D0AE.6050906@intertwingly.net>
References: <BANLkTinP5Mi9yhw02aywf3LBFUNzrbzRbA@mail.gmail.com> <4DC6D0AE.6050906@intertwingly.net>
Date: Sun, 08 May 2011 13:36:35 -0400
X-Google-Sender-Auth: UHiw31O2ljQxENKiPCmX1Xo-l3E
Message-ID: <BANLkTinCfM_+VYhNVp5LvtWegORe35=X+A@mail.gmail.com>
Subject: Re: atompub.org seems to have been hacked
From: Joe Gregorio <joe@bitworking.org>
To: Sam Ruby <rubys@intertwingly.net>
Cc: Tim Bray <twbray@google.com>, atom-syntax@imc.org
Content-Type: text/plain; charset="ISO-8859-1"
Content-Transfer-Encoding: 8bit
X-MIME-Autoconverted: from quoted-printable to 8bit by hoffman.proper.com id p48Haa0m057818
Sender: owner-atom-syntax@mail.imc.org
Precedence: bulk
List-Archive: <http://www.imc.org/atom-syntax/mail-archive/>
List-Unsubscribe: <mailto:atom-syntax-request@imc.org?body=unsubscribe>
List-ID: <atom-syntax.imc.org>

AtomPub was Rob's.

  -joe

On Sun, May 8, 2011 at 1:19 PM, Sam Ruby <rubys@intertwingly.net> wrote:
>
> On 05/08/2011 11:41 AM, Tim Bray wrote:
>>
>> Check the footer.
>>
>> Oh, hold on... http://www.networksolutions.com/whois-search/atompub.org
>>
>> I suspect the domain have lapsed, etc  -T
>
> atompub wasn't mine.  I think it was Rob's, might have been Joe's.
>
> AtomEnabled was transferred to me several years ago.
>
> - Sam Ruby
>
>



-- 
Joe Gregorio        http://bitworking.org