Re: atompub.org seems to have been hacked

Sam Ruby <rubys@intertwingly.net> Sun, 08 May 2011 17:24 UTC

Return-Path: <owner-atom-syntax@mail.imc.org>
X-Original-To: ietfarch-atompub-archive@ietfa.amsl.com
Delivered-To: ietfarch-atompub-archive@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 73E5CE079E for <ietfarch-atompub-archive@ietfa.amsl.com>; Sun, 8 May 2011 10:24:44 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.599
X-Spam-Level:
X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599]
Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id NfuBU4qV-S0G for <ietfarch-atompub-archive@ietfa.amsl.com>; Sun, 8 May 2011 10:24:43 -0700 (PDT)
Received: from hoffman.proper.com (IPv6.Hoffman.Proper.COM [IPv6:2001:4870:a30c:41::81]) by ietfa.amsl.com (Postfix) with ESMTP id F338BE079C for <atompub-archive@ietf.org>; Sun, 8 May 2011 10:24:42 -0700 (PDT)
Received: from hoffman.proper.com (localhost [127.0.0.1]) by hoffman.proper.com (8.14.4/8.14.3) with ESMTP id p48HJsBh057267 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Sun, 8 May 2011 10:19:54 -0700 (MST) (envelope-from owner-atom-syntax@mail.imc.org)
Received: (from majordom@localhost) by hoffman.proper.com (8.14.4/8.13.5/Submit) id p48HJsgJ057266; Sun, 8 May 2011 10:19:54 -0700 (MST) (envelope-from owner-atom-syntax@mail.imc.org)
X-Authentication-Warning: hoffman.proper.com: majordom set sender to owner-atom-syntax@mail.imc.org using -f
Received: from cdptpa-omtalb.mail.rr.com (cdptpa-omtalb.mail.rr.com [75.180.132.121]) by hoffman.proper.com (8.14.4/8.14.3) with ESMTP id p48HJrNf057261 for <atom-syntax@imc.org>; Sun, 8 May 2011 10:19:54 -0700 (MST) (envelope-from rubys@intertwingly.net)
X-Authority-Analysis: v=1.1 cv=r4ol2mxtxc5xI8TLAKnXSH8gFvtbhYjZO2i67n9GxQQ= c=1 sm=0 a=rZAvqOacu5wA:10 a=nJN0ycNR6_gA:10 a=OYUFdi14GaQA:10 a=IkcTkHD0fZMA:10 a=Zuh8KnBthhjYlEz6L0haRA==:17 a=8d2ba_T4AAAA:8 a=BswoQZbtAAAA:8 a=ajte9xjqR0vN4Z0gxF0A:9 a=QEXdDO2ut3YA:10 a=Zuh8KnBthhjYlEz6L0haRA==:117
X-Cloudmark-Score: 0
X-Originating-IP: 98.27.48.117
Received: from [98.27.48.117] ([98.27.48.117:48163] helo=rubix) by cdptpa-oedge04.mail.rr.com (envelope-from <rubys@intertwingly.net>) (ecelerity 2.2.3.46 r()) with ESMTP id 17/03-16951-9B0D6CD4; Sun, 08 May 2011 17:19:53 +0000
Received: from [192.168.1.137] (rubix3 [192.168.1.137]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) (Authenticated sender: rubys) by rubix (Postfix) with ESMTPSA id BE25120A133; Sun, 8 May 2011 13:19:42 -0400 (EDT)
Message-ID: <4DC6D0AE.6050906@intertwingly.net>
Date: Sun, 08 May 2011 13:19:42 -0400
From: Sam Ruby <rubys@intertwingly.net>
User-Agent: Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.9.2.17) Gecko/20110424 Thunderbird/3.1.10
MIME-Version: 1.0
To: Tim Bray <twbray@google.com>
CC: atom-syntax@imc.org
Subject: Re: atompub.org seems to have been hacked
References: <BANLkTinP5Mi9yhw02aywf3LBFUNzrbzRbA@mail.gmail.com>
In-Reply-To: <BANLkTinP5Mi9yhw02aywf3LBFUNzrbzRbA@mail.gmail.com>
Content-Type: text/plain; charset="UTF-8"; format="flowed"
Content-Transfer-Encoding: 7bit
Sender: owner-atom-syntax@mail.imc.org
Precedence: bulk
List-Archive: <http://www.imc.org/atom-syntax/mail-archive/>
List-Unsubscribe: <mailto:atom-syntax-request@imc.org?body=unsubscribe>
List-ID: <atom-syntax.imc.org>

On 05/08/2011 11:41 AM, Tim Bray wrote:
> Check the footer.
>
> Oh, hold on... http://www.networksolutions.com/whois-search/atompub.org
>
> I suspect the domain have lapsed, etc  -T

atompub wasn't mine.  I think it was Rob's, might have been Joe's.

AtomEnabled was transferred to me several years ago.

- Sam Ruby