[Savannah-hackers] Re: [fwd] www: GIF files

[Mark H. Weaver]

Jeff Bailey <address@hidden> writes:

> I just assumed it was more spam and deleted it.  A mailing list would
> never send a message.

Your use of the past tense in your first sentence suggests that you
also received a copy of the same message.  Is this true?  If so,
that's interesting, because my copy of the message looks like it's
addressed ONLY to me.

This is not just ordinary spam.  If it wasn't sent by legitimate GNU
folk, then this is a potential security problem.  It appears that
someone is attempting to get various GNU folks to do jobs from
anonymous sources.  Not to be taken lightly!

        Mark


> 
> On Sat, Jan 19, 2002 at 01:51:04PM -0500, Mark H. Weaver wrote:
> > Who sent this message?  I like to know who's talking to me, especially
> > when they're asking me to do a job.
> > 
> > Humans write messages, not mailing lists.  Even the "Received" headers
> > do not reveal the origin, as it was sent by address@hidden
> > 
> > Why did this anonymous person send this job to me, and only me?
> > 
> > I'm also rather puzzled that this person would take the time to write
> > a script to do the task, and then ask me to run it.  Why don't they
> > just run the script?
> > 
> >         Mark
> > 
> > 
> 
> > X-From-Line: address@hidden Sat Jan 19 12:50:51 2002
> > Envelope-to: address@hidden
> > Delivery-date: Sat, 19 Jan 2002 12:50:51 -0500
> > Subject: www: GIF files
> > To: address@hidden
> > From: address@hidden
> > Date: Sat, 19 Jan 2002 12:50:48 -0500
> > 
> >     Hi,
> > 
> >     Could you please remove the following GIF files from the project
> > www hosted on the GNU machines ? 
> > 
> >     For an explanation on why there are not GIF files on the GNU
> > machines read http://www.gnu.org/philosophy/gif.html. This policy was
> > established years ago by the GNU project and is an integral part of
> > the requirements for every project registering on savannah.gnu.org
> > (see http://savannah.gnu.org/register/requirements.php).
> > 
> >     The home page of your project is 
> >       http://savannah.gnu.org/projects/www/
> > 
> >     You can convert GIF files to PNG using the gif2png program.
> >       http://www.tuxedo.org/~esr/gif2png/gif2png-2.4.2.tar.gz
> > 
> >     Here is a sample script to convert the GIF files that are in
> > your web pages to PNG.
> > 
> >     export CVS_RSH=ssh
> >     cvs -d address@hidden:/webcvs co 
> >     cd 
> > 
> >     while read file 
> >     do
> >     gif2png -O $file.gif
> >     cvs delete -f $file.gif
> >     cvs add $file.png
> >     done <<'EOF'
> > software/cfengine/cfconsole/cfconsole
> > software/cfengine/cfengine-NT/img1
> > software/cfengine/cfengine-NT/img2
> > software/cfengine/cfengine-NT/img3
> > software/cfengine/cfengine-NT/img4
> > software/cfengine/cfengine-NT/l2h22381/img1
> > software/cfengine/cfengine-NT/l2h22543/img2
> > software/cfengine/cfengine-NT/l2h22543/img3
> > software/cfengine/cfengine-NT/l2h22543/img4
> > software/gnumeric/gnumeric3
> > software/gnumeric/gnumeric4
> > software/gnumeric/gnumeric5
> > software/gnumeric/gnumeric6
> > software/gnumeric/gnumeric7
> > software/gnumeric/gnumeric8
> > software/lilypond/docxx/down
> > software/lilypond/docxx/icon1
> > software/lilypond/docxx/icon2
> > software/lilypond/docxx/logo
> > software/mswordview/mswordview
> > software/nosql/NoSQL
> > EOF
> >     cvs commit -m 'Convert GIF to PNG'
> > 
> > 
> >     Thanks for your help,
> > 
> >     The GNU volunteers, address@hidden
> > 
> 
> 
> -- 
> Tofu - The other white meat.