이메일 #226 - #230
원본 출처: Satoshi - Sirius emails 2009-2011
이메일 #226
Date: Tue, 10 Aug 2010 04:28:38 +0300
From: [email protected]
To: Satoshi Nakamoto <[email protected]>
Subject: Re: [Fwd: Forum e-mail notifications and PBL blacklist and wiki registration]
영어 원문
I sent a removal request to PBL.
The FAQ says: "The first thing to know is: THE PBL IS NOT A BLACKLIST.
You are not listed for spamming or for anything you have done. The PBL
is simply a list of all of the world's dynamic IP space, i.e: IP
ranges normally assigned to ISP broadband customers (DSL, DHCP, PPP,
cable, dialup). It is perfectly normal for dynamic IP addresses to be
listed on the PBL. In fact all dynamic IP addresses in the world
should be on the PBL. Even static IPs which do not send mail should be
listed in the PBL." So we didn't even need to allow spam to be on the
list.
> Here's the info about PBL again.
>
>
> -------- Original Message --------
> Subject: Forum e-mail notifications and PBL blacklist and wiki registration
> Date: Thu, 29 Jul 2010 03:18:56 +0100
> From: Satoshi Nakamoto <[email protected]>
> To: Martti Malmi <[email protected]>
>
> http://www.bitcoin.org/smf/index.php?topic=338.0
>
>> of e-mail blackhole list or at least the ISP that hosts the e-mail
>> server for registration is on one of those lists.
>>
>> "Looks like bitcoin.org is listed on the PBL."
>> http://www.spamhaus.org/pbl/query/PBL340779
>
> I think our problem may be that we have forum notifications on, like
> e-mail you when you receive a PM, but we don't have e-mail verification
> of new accounts. Can someone put someone else's e-mail address without
> verifying it, then have stuff sent there? We need to stop that right
> away before it gets used for something bad. Either disallow all
> notification, or make sure e-mail addresses are verified.
>
> I'm more inclined to disallow notifications or anything where the forum
> sends you e-mail. I kinda like not requiring e-mail verification. But
> if that's the only way to make sure we don't send e-mails to un-verified
> addresses, then we could do that.
>
> If we request to get off of PBL, we'd better make sure we've got the
> problem secured first.
>
> I changed Registration->settings->registration of new members to "Member
> Activation". I assume that means it e-mail verifies.
> "Member Activation
> When this option is enabled any members registering to the forum will
> have a activation link emailed to them which they must click before they
> can become full members"
>
> I think that's the only way to make sure the forum can't be used to send
> to other people's e-mail addresses and potentially use it to spam.
이메일 #227
Date: Wed, 11 Aug 2010 01:19:38 +0300
From: [email protected]
To: Satoshi Nakamoto <[email protected]>
Subject: Re: Donation
영어 원문
I deposited the donation to a bank as euros. The donation was actually
not $3600 but 3500$. I miscalculated it as it was packed in (18 + 17)
* $100 instead of (18 + 18) * $100.
$3500 made 2608.28€.
-750€ to back up BitcoinExchange.com
-28.92€ for the hosting in July
1829€ balance
이메일 #228
Date: Wed, 11 Aug 2010 02:54:27 +0100
From: Satoshi Nakamoto <[email protected]>
Subject: Re: [Fwd: Forum e-mail notifications and PBL blacklist and wiki registration]
To: [email protected]
영어 원문
Are PM notifications still disabled? (All we really need is disable the
forum's access to the mail server)
> Does it work correctly now? I had made some forum code changes to
> disable PM email notification, but just reverted most of them as
> unnecessary.
[email protected] wrote:
> I sent a removal request to PBL.
>
> The FAQ says: "The first thing to know is: THE PBL IS NOT A BLACKLIST.
> You are not listed for spamming or for anything you have done. The PBL
> is simply a list of all of the world's dynamic IP space, i.e: IP ranges
> normally assigned to ISP broadband customers (DSL, DHCP, PPP, cable,
> dialup). It is perfectly normal for dynamic IP addresses to be listed on
> the PBL. In fact all dynamic IP addresses in the world should be on the
> PBL. Even static IPs which do not send mail should be listed in the
> PBL." So we didn't even need to allow spam to be on the list.
>
>> Here's the info about PBL again.
>>
>>
>> -------- Original Message --------
>> Subject: Forum e-mail notifications and PBL blacklist and wiki
>> registration
>> Date: Thu, 29 Jul 2010 03:18:56 +0100
>> From: Satoshi Nakamoto <[email protected]>
>> To: Martti Malmi <[email protected]>
>>
>> http://www.bitcoin.org/smf/index.php?topic=338.0
>>
>>> of e-mail blackhole list or at least the ISP that hosts the e-mail
>>> server for registration is on one of those lists.
>>>
>>> "Looks like bitcoin.org is listed on the PBL."
>>> http://www.spamhaus.org/pbl/query/PBL340779
>>
>> I think our problem may be that we have forum notifications on, like
>> e-mail you when you receive a PM, but we don't have e-mail verification
>> of new accounts. Can someone put someone else's e-mail address without
>> verifying it, then have stuff sent there? We need to stop that right
>> away before it gets used for something bad. Either disallow all
>> notification, or make sure e-mail addresses are verified.
>>
>> I'm more inclined to disallow notifications or anything where the forum
>> sends you e-mail. I kinda like not requiring e-mail verification. But
>> if that's the only way to make sure we don't send e-mails to un-verified
>> addresses, then we could do that.
>>
>> If we request to get off of PBL, we'd better make sure we've got the
>> problem secured first.
>>
>> I changed Registration->settings->registration of new members to "Member
>> Activation". I assume that means it e-mail verifies.
>> "Member Activation
>> When this option is enabled any members registering to the forum will
>> have a activation link emailed to them which they must click before they
>> can become full members"
>>
>> I think that's the only way to make sure the forum can't be used to send
>> to other people's e-mail addresses and potentially use it to spam.
>
>
>
이메일 #229
Date: Wed, 11 Aug 2010 06:42:32 +0300
From: [email protected]
To: Satoshi Nakamoto <[email protected]>
Subject: Re: [Fwd: Forum e-mail notifications and PBL blacklist and wiki registration]
영어 원문
Yes, they're still disabled. Disabling the access to the mail server
would be easy, but we probably want to keep the password recovery by
email.
> Are PM notifications still disabled? (All we really need is disable
> the forum's access to the mail server)
>
>> Does it work correctly now? I had made some forum code changes to
>> disable PM email notification, but just reverted most of them as
>> unnecessary.
>
> [email protected] wrote:
>> I sent a removal request to PBL.
>>
>> The FAQ says: "The first thing to know is: THE PBL IS NOT A
>> BLACKLIST. You are not listed for spamming or for anything you have
>> done. The PBL is simply a list of all of the world's dynamic IP
>> space, i.e: IP ranges normally assigned to ISP broadband customers
>> (DSL, DHCP, PPP, cable, dialup). It is perfectly normal for dynamic
>> IP addresses to be listed on the PBL. In fact all dynamic IP
>> addresses in the world should be on the PBL. Even static IPs which
>> do not send mail should be listed in the PBL." So we didn't even
>> need to allow spam to be on the list.
>>
>>> Here's the info about PBL again.
>>>
>>>
>>> -------- Original Message --------
>>> Subject: Forum e-mail notifications and PBL blacklist and wiki registration
>>> Date: Thu, 29 Jul 2010 03:18:56 +0100
>>> From: Satoshi Nakamoto <[email protected]>
>>> To: Martti Malmi <[email protected]>
>>>
>>> http://www.bitcoin.org/smf/index.php?topic=338.0
>>>
>>>> of e-mail blackhole list or at least the ISP that hosts the
>>>> e-mail server for registration is on one of those lists.
>>>>
>>>> "Looks like bitcoin.org is listed on the PBL."
>>>> http://www.spamhaus.org/pbl/query/PBL340779
>>>
>>> I think our problem may be that we have forum notifications on, like
>>> e-mail you when you receive a PM, but we don't have e-mail verification
>>> of new accounts. Can someone put someone else's e-mail address without
>>> verifying it, then have stuff sent there? We need to stop that right
>>> away before it gets used for something bad. Either disallow all
>>> notification, or make sure e-mail addresses are verified.
>>>
>>> I'm more inclined to disallow notifications or anything where the forum
>>> sends you e-mail. I kinda like not requiring e-mail verification. But
>>> if that's the only way to make sure we don't send e-mails to un-verified
>>> addresses, then we could do that.
>>>
>>> If we request to get off of PBL, we'd better make sure we've got the
>>> problem secured first.
>>>
>>> I changed Registration->settings->registration of new members to "Member
>>> Activation". I assume that means it e-mail verifies.
>>> "Member Activation
>>> When this option is enabled any members registering to the forum will
>>> have a activation link emailed to them which they must click before they
>>> can become full members"
>>>
>>> I think that's the only way to make sure the forum can't be used to send
>>> to other people's e-mail addresses and potentially use it to spam.
>>
>>
>>
이메일 #230
Date: Wed, 11 Aug 2010 21:00:13 +0100
From: Satoshi Nakamoto <[email protected]>
Subject: Re: [Fwd: Forum e-mail notifications and PBL blacklist and wiki registration]
To: [email protected]
영어 원문
Right, forgot about that.
Hopefully theymos was right that the PBL is the source of the problem.
[email protected] wrote:
> Yes, they're still disabled. Disabling the access to the mail server
> would be easy, but we probably want to keep the password recovery by email.
>
>> Are PM notifications still disabled? (All we really need is disable
>> the forum's access to the mail server)
>>
>>> Does it work correctly now? I had made some forum code changes to
>>> disable PM email notification, but just reverted most of them as
>>> unnecessary.
>>
>> [email protected] wrote:
>>> I sent a removal request to PBL.
>>>
>>> The FAQ says: "The first thing to know is: THE PBL IS NOT A
>>> BLACKLIST. You are not listed for spamming or for anything you have
>>> done. The PBL is simply a list of all of the world's dynamic IP
>>> space, i.e: IP ranges normally assigned to ISP broadband customers
>>> (DSL, DHCP, PPP, cable, dialup). It is perfectly normal for dynamic
>>> IP addresses to be listed on the PBL. In fact all dynamic IP
>>> addresses in the world should be on the PBL. Even static IPs which
>>> do not send mail should be listed in the PBL." So we didn't even
>>> need to allow spam to be on the list.
>>>
>>>> Here's the info about PBL again.
>>>>
>>>>
>>>> -------- Original Message --------
>>>> Subject: Forum e-mail notifications and PBL blacklist and wiki
>>>> registration
>>>> Date: Thu, 29 Jul 2010 03:18:56 +0100
>>>> From: Satoshi Nakamoto <[email protected]>
>>>> To: Martti Malmi <[email protected]>
>>>>
>>>> http://www.bitcoin.org/smf/index.php?topic=338.0
>>>>
>>>>> of e-mail blackhole list or at least the ISP that hosts the
>>>>> e-mail server for registration is on one of those lists.
>>>>>
>>>>> "Looks like bitcoin.org is listed on the PBL."
>>>>> http://www.spamhaus.org/pbl/query/PBL340779
>>>>
>>>> I think our problem may be that we have forum notifications on, like
>>>> e-mail you when you receive a PM, but we don't have e-mail verification
>>>> of new accounts. Can someone put someone else's e-mail address without
>>>> verifying it, then have stuff sent there? We need to stop that right
>>>> away before it gets used for something bad. Either disallow all
>>>> notification, or make sure e-mail addresses are verified.
>>>>
>>>> I'm more inclined to disallow notifications or anything where the forum
>>>> sends you e-mail. I kinda like not requiring e-mail verification. But
>>>> if that's the only way to make sure we don't send e-mails to
>>>> un-verified
>>>> addresses, then we could do that.
>>>>
>>>> If we request to get off of PBL, we'd better make sure we've got the
>>>> problem secured first.
>>>>
>>>> I changed Registration->settings->registration of new members to
>>>> "Member
>>>> Activation". I assume that means it e-mail verifies.
>>>> "Member Activation
>>>> When this option is enabled any members registering to the forum will
>>>> have a activation link emailed to them which they must click before
>>>> they
>>>> can become full members"
>>>>
>>>> I think that's the only way to make sure the forum can't be used to
>>>> send
>>>> to other people's e-mail addresses and potentially use it to spam.
>>>
>>>
>>>
>
>
>