I am very sorry for the trouble this caused, but my email account got
compromised last Sunday, and as soon as I realised this about a couple
of hours after the spam mails were sent out, I changed my account
password and other security related questions to regain the control of
my account. Or so I thought (and was told)... If you have received a
spam mail today from this account again that means this has not worked
obviously. Indeed, I think the best thing to do would be for me to
unsubscribe for the list immediately, although that hurts because I do
not have another email account which I could use to follow all the
interesting PLplot development related discussions. I will continue to
follow the discussions from the web archives of the mails in this list.
Thanks for all the help earlier everyone, and extremely sorry for
causing this trouble. And all the best for the future, may be see more
of the lovely PLplot releases :)
From: Alan W. Irwin <irwin@...>
To: Atri <badshah400@...>
Cc: PLplot development list <Plplot-devel@...>
Sent: Thu, Jun 21, 2012 3:00 pm
Subject: Spamming plplot_devel with your (forged) return address
I know you are a legitimate user of the plplot-devel mailing list with
a good track record there, but it appears a spammer knows that you
have subscribed to that list and has sent spam to that list today with
your (forged) return address. If that spamming continues I will be
forced to remove you as a subscriber.
I actually got two spams with your forged return address. One via the
PLplot Devel mailing list and also one personally. So it seems fairly
likely to me that the means for this attack is someone has compromised
your machine and gotten access to your address book or else the file
of previous e-mail you sent from that machine.
Note such spamming of plplot-devel with a forged return address of an
actual legitimate subscriber has never happened before which is
another reason to think something extraordinary has gone on, i.e., a
compromise of your (Linux?) computer.
So you may need to look very carefully at the machine where your
e-mail and e-mail addressbook are stored to see if that machine has
been compromised. Once you are sure that machine is secure, then you
may also want to change your subscription to plplot-devel to a new
mailing address that is unknown by spammers. As a courtesy you will
probably want to do the same thing for every other mailing list you
have subscribed to as well, but such change is, of course, pointless
until you are sure your machine is no longer compromised.
Alan W. Irwin
Astronomical research affiliation with Department of Physics and
University of Victoria (astrowww.phys.uvic.ca).
Programming affiliations with the FreeEOS equation-of-state
implementation for stellar interiors (freeeos.sf.net); the Time
Ephemerides project (timeephem.sf.net); PLplot scientific plotting
software package (plplot.sf.net); the libLASi project
(unifont.org/lasi); the Loads of Linux Links project (loll.sf.net);
and the Linux Brochure Project (lbproject.sf.net).