Slashdot Mirror
'Spamalot' Subscribers to Get Spam ... a Lot
CrazyWingman writes "It looks like the list of e-mail addresses subscribed to the lists for the Broadway show 'Spamalot' has been nabbed by spammers. The New York Times is reporting that the list was posted on a page that could be found by looking at the source of other Spamalot webpages. All I have to say is that I hope the creators of the Spamalot website have been sacked."
And, John Lithgow was sitting five rows in front of me. He has a bald spot on the back of his head.
Recently I noticed on a certain college website, every employee's email address was listed on a type of 'contact' page.
Every employee.
It actually was a three column table, on the left side it had the employee's name, next column was for e-mail, and the last for their phone number.
I was sitting with the Administrator that handles the email servers, when I heard recently there has been an ever more increasing spam flow to all the college email addresses.
Proceed with Format (Y/N)? Y
Actually, David Gallagher(the reporter who wrote this story) contacted me and some other unknown number of people who were on the list and had used tagged addresses(he apparently went through the list himself looking for contacts for this story), asking if we had received any spam on that address. Interestingly enough, he was the first person to contact me on that address at all, I hadn't received any spam or any email from Spamalot previously in the couple of months I've been on the list. It doesn't appear that it was harvested, though it could just be that no one has used the addresses yet.
If it was harvested though, it opens up an interesting issue since the exposed data included names and physical addresses to go with the email addresses.
Grow some balls and tell them flat out that you refuse to add features to a product with serious security problems until they are fixed.