Free Newsletters
Technology & Business Daily

InfoWorld
Log-in | Register

Homeland Security e-mail server turns into spam cannon

Subscribers to a U.S. government daily e-mail bulletin were inundated with e-mails due to a glitch with its mailing list


Subscribers to a U.S. Department of Homeland Security daily e-mail bulletin were inundated with dozens of e-mails on Wednesday due to a glitch with the mailing list.

The gaffe started after one man, Alex Greene, a manager at GKN Freight Services, sent a reply to the Daily Open Source Infrastructure Report, a round-up of security-related news reports, to change his subscription information.

The e-mail server sent Greene's reply to everyone on the DHS's subscriber list, which sent off a torrent of responses from recipients -- some humorous, some irritable -- which in turn were fired out again to all subscribers, according to the SANS Institute, a computer security monitoring organization. The cause of the problem was likely an erroneous change in the e-mail server's settings.

The error could cause big trouble if a hacker sent a bad e-mail attachment with a zero-day security vulnerability "to nail a few dozen gullible security professionals," Marcus Sachs wrote in the SANS diary, which documents security incidents.

"If you maintain a broadcast mailing list, make sure that the address will not reflect e-mail from sources other than the owner of the list," Sachs wrote. "Otherwise, you will become a training example for SANS."

Excerpts of some of the e-mails were published by The New York Times.

"Dear Mr. Alex Greene (the guy who started this mess). May the fleas of a thousand camels infest your armpits and may a yak in heat make love to your shin," wrote Michael B. Smith.

Others were more lighthearted and opportunistic about the mistake. "Well as long as we have a free for all going here, I'm job hunting," wrote Lt. Col. Mary Brown, a U.S. Air Force Reserve officer. "Anybody have anything open out there?


Talkback:

commentPost a Comment

 

MOST COMMENTS

 
 





Remote Access: Maintain Security and Decrease the Burden on IT
Join this interactive webcast to discover how IT Managers can control access rights, end-user security settings and end-point authorization. Sponsor: Citrix(R) GoToMyPC(R) Corporate

»  Click here to view this Webcast
  Zombie PCs Are Attacking Your LAN
A recent study showed that malware-infected zombie PCs are now a bigger threat to ISPs and Web infrastructure than DoS attacks. As this brand new IT Strategy Guide explains, an increased use of peer-to-peer techniques by the attackers has made it harder to fight back. Download now, compliments of Verio:

»  Click here to download now

- Special Advertising Partners -
WHITE PAPERS
 

» Technology White Papers Library

Technology White Papers by Topic

Technology White Papers E-mail Alert

Find out when the latest white paper is available:
 
 
INFOWORLD MARKETPLACE
 
» BUY A LINK NOW
 
 

Video

 
 
 

Podcasts

 
 
 

 

Columnists

 
 
 

Resource Center


Ads by techwords beta  [See your link here]
 




Sponsored Technology Links

 
 
 HOME  NEWS  BLOGS  PODCASTS  VIDEOS  TECHNOLOGIES  TEST CENTER  EVENTS  CAREERS   About | Advertise | Awards | RSS | Contact Us 

Copyright © 2008, Reprints, Permissions, Licensing, IDG Network, Privacy Policy, Terms of Service.
All Rights reserved. InfoWorld is a leading publisher of technology information and product reviews on topics including viruses,
phishing, worms, firewalls, security, servers, storage, networking, wireless, databases, and web services.

CIO :: ComputerWorld :: CSO :: Demo :: GamePro :: Games.net :: IDG Connect :: IDG World Expo
Industry Standard :: IT World :: JavaWorld :: LinuxWorld :: MacUser :: Macworld :: Network World :: PC World :: Playlist