You telling us SKY of UK is passing their accounts to Yahoo instead of Gmail taking over the accounts permamently? David Samuelsen On 3/10/2013 1:25 PM, Nivard Ovington wrote: > Hi Deloris > > It may be worth noting that Sky (currently Gmail) is passing all their > email accounts over to*Yahoo* in April > > So expect plenty more hacked accounts > > Which is also causing me much work to swap over on all lists to another > Gmail account > > Nivard Ovington in Cornwall (UK)

Those are probably the ones that go directly to the mail list because the person's email address is subscribed to the list. They don't come to the administrators for approval, otherwise, none of those messages would get to the lists. It's the ones who aren't subscribed that get stopped in the filters for approval, and those I just discard, and otherwise ignore. Just go ahead and put in the request to remove them from the Archives at the link provided as Joan already suggested, that's what I always do. Also, sometimes spam messages get sent just to the Administrators address lately, apparently someone is gathering those addresses too. Again, I just delete those from my email just as I would any other junk, and that's as far as it gets. Deloris Williams -------------------------------------------------- From: "M Nickless" <unicorn1950@comcast.net> Sent: Sunday, March 10, 2013 2:48 PM To: <JYoung6180@aol.com>; <charani.b@gmail.com>; <Listowners@rootsweb.com> Subject: Re: [LO] Help on removing a message from the Archives > I do just discard the non-subscriber spam that’s pending my approval > without any further action. At this point I have no idea exactly > where the one in Archives came from as it was deleted from all my mail > boxes. It was not one that I was notified that was “pending approval”. > I do have one in Archives as of this morning that came from the current > Yahoo account of someone I have known for a long time. I’m waiting on > a response from her before I use the removal tool, or moderate. > > > >

If the spam is non-subscriber emails I agree with Charani---discard and don't let the spammer know the address they spammed is valid. It just leads to MORE spam. But if you have a compromised subscriber sending the spam and you have them on moderated status rejecting the spam in pending requests from them can help to alert the person that they have been hacked. Joan In a message dated 3/10/2013 1:46:04 P.M. Eastern Daylight Time, charani.b@gmail.com writes: M Nickless wrote: > > While looking at my list archives this morning to see if a > suspected spam message from a subscriber went into the archives, I > noticed that another ‘Spam” email made it through the list the > other day. > > I have already completely deleted that the email from my own > mailbox/spam box/deleted messages files, so can’t forward it with > all headers/footers to the Help Desk. > > Can anyone tell me if there is another way to remove that message? > Obviously I don’t want to use the Archive Removal Tool as it will > trigger a message to the spammer! Not necessarily. Even if it does, it'll tell the spammers you're on to them and won't let the spam remain. If the mail is in the pending folder, simply discard it - don't reject it and don't mark it as spam before deleting it. If you send the archive URL through to the Help Desk and ask them to remove it from the archives they will do so. -- Charani (UK) OPC for Walton, Ashcott, Shapwick, Greinton and Clutton, SOM http://wsom-opc.org.uk ------------------------------- To unsubscribe from the list, please send an email to LISTOWNERS-request@rootsweb.com with the word 'unsubscribe' without the quotes in the subject and the body of the message

Every time a hacker hits one of my lists, I send out a warning to the list not to click on the link or to respond to Yahoo.  I also warn them that if they did already click or respond, they are also now infected with instructions on how to clean the hacking. Each one of my lists has been warned countless times yet it keeps happening over and over again.  I can't help wonder how many warnings it will take to sink in. I just received this message supposedly from Yahoo: Dear Customer Your E-mail account has exceeded its limit and needs to be verified, if not verified within 24hours, we shall suspend your account. It was signed Yahoo and there was a link to click on which I have not included in this message.  This can only mean that there will be another rash of hackings from Yahoo in the near future.  If only people would heed the warnings about these messages and not reply or click on the link.   Mary Ann Lubinsky

http://archiver.rootsweb.ancestry.com/cgi-bin/remove James Shuman jshuman@telis.org On Mar 10, 2013, at 1:39 PM, Gerald Tobin wrote: > How do I find the "Archive Removal Tool". > I had one get through last week. > > Jerry

Deloris, I'm not so sure I agree with your characterization of Yahoo spam "this weekend," but they sure do keep busy. You and I have corresponded before and YOU KNOW about my dislike for the spam, and a good friend of mine actually says I am "OCD" about it but I take that as a badge of honor. :-) That said, I see and report an awful lot of it on the numerous lists that I subscribe to, and the overwhelming majority of the domains I have noticed are either AOL or Yahoo. I'm not sure why, it just seems that way. Anyway, I report every single one of them I find on a list per very specific instructions given to me by someone at RW and they are getting removed not only from the archives but appropriate action is being taken against the subscriber to prevent the compromised account from sending any more garbage. We will NEVER get 100% of the spam to stop polluting the lists, but IMHO we as List Admins need to do all we can to keep the garbage at bay to whatever degree is possible. David E. Cann decann@infionline.net -----Original Message----- From: listowners-bounces@rootsweb.com [mailto:listowners-bounces@rootsweb.com] On Behalf Of Deloris Williams Sent: Sunday, March 10, 2013 1:28 PM To: listowners@rootsweb.com Subject: [LO] Yahoo Spammers Yahoo must have had another major hacking this weekend, I've seen a lot of people with those accounts coming through the lists the past couple of days with spam. We need to keep a lookout and get those reported to the Archives Removal, even though it won't be until tomorrow at the earliest that RW does anything. Deloris Williams

Marilyn- First off you should NEVER EVER delete a list message that is spam from your spam folder or label it as spam to your ISP...it can end up having you unsubbed from the list you reported. Some major ISPs send a spam long of reports to RootsWeb and RootsWeb immediately unsubs the person who reported list mail as spam. To have the spam removed from the list archives first copy the URLs where you find the spam emails in the archives and then paste them into the removal form here: http://archiver.rootsweb.ancestry.com/cgi-bin/remove Next let the HelpDesk know that they need to complete the removal process for the ones you initiated. Joan In a message dated 3/10/2013 12:56:52 P.M. Eastern Daylight Time, unicorn1950@comcast.net writes: While looking at my list archives this morning to see if a suspected spam message from a subscriber went into the archives, I noticed that another ‘ Spam” email made it through the list the other day. I have already completely deleted that the email from my own mailbox/spam box/deleted messages files, so can’t forward it with all headers/footers to the Help Desk. Can anyone tell me if there is another way to remove that message? Obviously I don’t want to use the Archive Removal Tool as it will trigger a message to the spammer! Thanks, Marilyn

I do just discard the non-subscriber spam that’s pending my approval without any further action. At this point I have no idea exactly where the one in Archives came from as it was deleted from all my mail boxes. It was not one that I was notified that was “pending approval”. I do have one in Archives as of this morning that came from the current Yahoo account of someone I have known for a long time. I’m waiting on a response from her before I use the removal tool, or moderate. From: JYoung6180@aol.com Sent: Sunday, March 10, 2013 11:58 AM To: charani.b@gmail.com ; unicorn1950@comcast.net ; Listowners@rootsweb.com Subject: Re: [LO] Help on removing a message from the Archives If the spam is non-subscriber emails I agree with Charani---discard and don't let the spammer know the address they spammed is valid. It just leads to MORE spam. But if you have a compromised subscriber sending the spam and you have them on moderated status rejecting the spam in pending requests from them can help to alert the person that they have been hacked. Joan In a message dated 3/10/2013 1:46:04 P.M. Eastern Daylight Time, charani.b@gmail.com writes: M Nickless wrote: > > While looking at my list archives this morning to see if a > suspected spam message from a subscriber went into the archives, I > noticed that another ‘Spam” email made it through the list the > other day. > > I have already completely deleted that the email from my own > mailbox/spam box/deleted messages files, so can’t forward it with > all headers/footers to the Help Desk. > > Can anyone tell me if there is another way to remove that message? > Obviously I don’t want to use the Archive Removal Tool as it will > trigger a message to the spammer! Not necessarily. Even if it does, it'll tell the spammers you're on to them and won't let the spam remain. If the mail is in the pending folder, simply discard it - don't reject it and don't mark it as spam before deleting it. If you send the archive URL through to the Help Desk and ask them to remove it from the archives they will do so. -- Charani (UK) OPC for Walton, Ashcott, Shapwick, Greinton and Clutton, SOM http://wsom-opc.org.uk ------------------------------- To unsubscribe from the list, please send an email to LISTOWNERS-request@rootsweb.com with the word 'unsubscribe' without the quotes in the subject and the body of the message

Yahoo must have had another major hacking this weekend, I've seen a lot of people with those accounts coming through the lists the past couple of days with spam. We need to keep a lookout and get those reported to the Archives Removal, even though it won't be until tomorrow at the earliest that RW does anything. Deloris Williams

To my knowledge, Marilyn, the Archive Removal Tool, is the only way but the powers that be at Rootsweb will review the posting and delete it is spam and then remove it. They might also remove the "spammer" from the member list of ALL email lists thereby preventing more spam from coming through from that same poster. For the spam to have hit the archives, the poster has to be a member of the list so have RW remove it via the Archive Removal Tool is a good thing. Lainee -----Original Message----- From: M Nickless Sent: Sunday, March 10, 2013 11:52 AM To: Listowners@rootsweb.com Subject: [LO] Help on removing a message from the Archives While looking at my list archives this morning to see if a suspected spam message from a subscriber went into the archives, I noticed that another ‘Spam” email made it through the list the other day. I have already completely deleted that the email from my own mailbox/spam box/deleted messages files, so can’t forward it with all headers/footers to the Help Desk. Can anyone tell me if there is another way to remove that message? Obviously I don’t want to use the Archive Removal Tool as it will trigger a message to the spammer! Thanks, Marilyn

Thank you all for your feedback. I stumbled onto the message in the archives this morning. I only vaguely remember the email (from March 4), but since there wasn’t anything to indicate that it actually came from a list member’s address, I obviously didn’t see any ‘red flags’. I no longer have the message in my junk box, spam box, inbox, or deleted messages file. As far as I know (guess I should look through all the archives!), this is the only spam to the list that’s gotten into the archives - other than one today that did come from a member’s email account, which I will deal with. My list is small with very little traffic. As a rule I don’t report many emails (either to the list, or to me personally) to my ISP as “junk/spam”, without double checking on the actual originating email address (which of course are sometimes spoofed). But apparently nothing seemed to indicate that I should do anything but hit the “delete” key on this one. Since I obviously cleaned out all of my mail boxes, there’s no way to tell how it was delivered to me. But it’s done. The From line in the archives shows as “DELTA CONFIRMATION" < XXXXXXXX@sonassi.co.uk> Definitely not a subscriber’s address. Since I’m not familiar with how spammers brains work (or don’t work?) I’m concerned that notice to that address will just trigger a flood of ‘junk’. But, guess I’ll take my chances and report it. Marilyn

While looking at my list archives this morning to see if a suspected spam message from a subscriber went into the archives, I noticed that another ‘Spam” email made it through the list the other day. I have already completely deleted that the email from my own mailbox/spam box/deleted messages files, so can’t forward it with all headers/footers to the Help Desk. Can anyone tell me if there is another way to remove that message? Obviously I don’t want to use the Archive Removal Tool as it will trigger a message to the spammer! Thanks, Marilyn

Hi, I'm also having some of the same. Wish genie sites would not get som bombarded with this mess. Lynne From:buchanan-l@rootsweb.com Action to take on all these held messages: Defer Accept Discard Forward messages (individually) to: This is spam (this forwards a copy of this message to our spam filters) Click on the message number to view the individual message, or you can view all messages from buchanan-l@rootsweb.com [1] Subject: distinctive system profitable and free Size: 1953 bytes Reason: Post sent by a non-member to a members-only list. Received: Tue Feb 19 04:42:59 2013 [2] Subject: for CV 72 Size: 2226 bytes Reason: Post sent by a non-member to a members-only list. Received: Tue Feb 26 10:42:51 2013 [3] Subject: Re: CV 50 Size: 1858 bytes Reason: Post sent by a non-member to a members-only list. Received: Wed Feb 27 08:17:49 2013 [4] Subject: vacancy 886 Size: 2226 bytes Reason: Post sent by a non-member to a members-only list. Received: Wed Feb 27 15:04:51 2013 [5] Subject: Manager position Size: 2425 bytes Reason: Post sent by a non-member to a members-only list. Received: Thu Feb 28 07:40:54 2013 [6] Subject: We propose the opportunity for job seekers in US Size: 2432 bytes Reason: Post sent by a non-member to a members-only list. Received: Thu Feb 28 10:53:51 2013 [7] Subject: Re: CV Size: 2248 bytes Reason: Post sent by a non-member to a members-only list. Received: Thu Feb 28 11:57:15 2013 On Thu, Feb 28, 2013 at 5:29 PM, T Rum <oktxgen@gmail.com> wrote: > Lets see if I can explain this since I am not absolutely certain what to do > about it. > > I have received several messages to one of my lists that are Spam - > absolutely NOT actual posts, etc. They were of course blocked so they did > not make it to the list itself. What concerns me is that they appeat to > have been sent from: > > collins-l@rootsweb.com > and > deacon-d-request@rootsweb.com > > Looking at the headers for these messages it does look as though they > originated from the rootsweb system: > ...Begin partial header... > Received: from mail3.rootsweb.com (mail3.rootsweb.com [192.168.26.64]) > by lists9.rootsweb.com (8.13.8/8.13.8) with ESMTP id r1RJppHO002431; > Wed, 27 Feb 2013 12:51:51 -0700 > ...End partial header... > > They were then sent through at least one other mail system before being > sent on to the list. > > Should I be concerned and where should this be reported to? I am asking > here since my very few attempts to contact the "help desk" over the last > few years has never proven helpful and selecting the forward to the spam > system seems to be a void of nothingness that only seems to increase > future spam. > > Any help or advice would be very appreciated. > > Tammy > > ------------------------------- > To unsubscribe from the list, please send an email to LISTOWNERS-request@rootsweb.com with the word 'unsubscribe' without the quotes in the subject and the body of the message -- Always trying to bust down brickwalls of myself & others.

Joan, Thank you so much for the response. This is what I was hoping. Again, thank you! Tammy On Thu, Feb 28, 2013 at 6:40 PM, <JYoung6180@aol.com> wrote: > ** > Tammy- > > The headers are forged --- nothing to do but delete these from your > pending requests. This type of forgery is very common. Nothing you can do > about it. As you noted this type of forged "from" addresses won't make it > to the lists because the lists are not subscribed to themselves --- so they > are non-subscriber bounces to pending requests. > > Joan > > In a message dated 2/28/2013 6:38:16 P.M. Eastern Standard Time, > oktxgen@gmail.com writes: > > Lets see if I can explain this since I am not absolutely certain what to do > about it. > > I have received several messages to one of my lists that are Spam - > absolutely NOT actual posts, etc. They were of course blocked so they did > not make it to the list itself. What concerns me is that they appeat to > have been sent from: > > collins-l@rootsweb.com > and > deacon-d-request@rootsweb.com > > Looking at the headers for these messages it does look as though they > originated from the rootsweb system: > ...Begin partial header... > Received: from mail3.rootsweb.com (mail3.rootsweb.com [192.168.26.64]) > by lists9.rootsweb.com (8.13.8/8.13.8) with ESMTP id r1RJppHO002431; > Wed, 27 Feb 2013 12:51:51 -0700 > ...End partial header... > > They were then sent through at least one other mail system before being > sent on to the list. > > Should I be concerned and where should this be reported to? I am asking > here since my very few attempts to contact the "help desk" over the last > few years has never proven helpful and selecting the forward to the spam > system seems to be a void of nothingness that only seems to increase > future spam. > > Any help or advice would be very appreciated. > > Tammy > > ------------------------------- > To unsubscribe from the list, please send an email to > LISTOWNERS-request@rootsweb.com with the word 'unsubscribe' without the > quotes in the subject and the body of the message > >

Tammy- The headers are forged --- nothing to do but delete these from your pending requests. This type of forgery is very common. Nothing you can do about it. As you noted this type of forged "from" addresses won't make it to the lists because the lists are not subscribed to themselves --- so they are non-subscriber bounces to pending requests. Joan In a message dated 2/28/2013 6:38:16 P.M. Eastern Standard Time, oktxgen@gmail.com writes: Lets see if I can explain this since I am not absolutely certain what to do about it. I have received several messages to one of my lists that are Spam - absolutely NOT actual posts, etc. They were of course blocked so they did not make it to the list itself. What concerns me is that they appeat to have been sent from: collins-l@rootsweb.com and deacon-d-request@rootsweb.com Looking at the headers for these messages it does look as though they originated from the rootsweb system: ...Begin partial header... Received: from mail3.rootsweb.com (mail3.rootsweb.com [192.168.26.64]) by lists9.rootsweb.com (8.13.8/8.13.8) with ESMTP id r1RJppHO002431; Wed, 27 Feb 2013 12:51:51 -0700 ...End partial header... They were then sent through at least one other mail system before being sent on to the list. Should I be concerned and where should this be reported to? I am asking here since my very few attempts to contact the "help desk" over the last few years has never proven helpful and selecting the forward to the spam system seems to be a void of nothingness that only seems to increase future spam. Any help or advice would be very appreciated. Tammy ------------------------------- To unsubscribe from the list, please send an email to LISTOWNERS-request@rootsweb.com with the word 'unsubscribe' without the quotes in the subject and the body of the message

Lets see if I can explain this since I am not absolutely certain what to do about it. I have received several messages to one of my lists that are Spam - absolutely NOT actual posts, etc. They were of course blocked so they did not make it to the list itself. What concerns me is that they appeat to have been sent from: collins-l@rootsweb.com and deacon-d-request@rootsweb.com Looking at the headers for these messages it does look as though they originated from the rootsweb system: ...Begin partial header... Received: from mail3.rootsweb.com (mail3.rootsweb.com [192.168.26.64]) by lists9.rootsweb.com (8.13.8/8.13.8) with ESMTP id r1RJppHO002431; Wed, 27 Feb 2013 12:51:51 -0700 ...End partial header... They were then sent through at least one other mail system before being sent on to the list. Should I be concerned and where should this be reported to? I am asking here since my very few attempts to contact the "help desk" over the last few years has never proven helpful and selecting the forward to the spam system seems to be a void of nothingness that only seems to increase future spam. Any help or advice would be very appreciated. Tammy

Folks, this has taken the horse, led him off topic, beaten him to death, pureed him, and mixed him into European frozen beef dinners. I do believe we're done; next java around here should come with Tim Bits. :) --pig, admin

George- What Darrell said. Ancestry does use JavaSCRIPT but not JAVA to my knowledge. I use Ancestry all the time with JAVA disabled and everything works just fine. Joan In a message dated 2/25/2013 5:56:02 P.M. Eastern Standard Time, darrellm@sprynet.com writes: On 2/25/2013 3:33 PM, George W. Durman wrote: > Thank you David, > > It is also required for looking at trees at Ancestry and for looking > at Census records and other records there. At least when I turned > off JAVA in Firefox, almost nothing worked at Ancestry. Also, if > you look at the bottom left of the screen when saving citations to > someone in a tree, you'll see JAVA is running. If you're working in > a tree and click on a previously added citation with JAVA off, > nothing happens! Again, at the bottom left you'll see that JAVA > Script is trying to run, but doesn't. > > George George: Java, or JavaScript? They are two completely distinct things, despite the confusingly similar names. As far as I know, there are no security issues with JavaScript. Darrell ------------------------------- To unsubscribe from the list, please send an email to LISTOWNERS-request@rootsweb.com with the word 'unsubscribe' without the quotes in the subject and the body of the message

On 2/25/2013 3:33 PM, George W. Durman wrote: > Thank you David, > > It is also required for looking at trees at Ancestry and for looking > at Census records and other records there. At least when I turned > off JAVA in Firefox, almost nothing worked at Ancestry. Also, if > you look at the bottom left of the screen when saving citations to > someone in a tree, you'll see JAVA is running. If you're working in > a tree and click on a previously added citation with JAVA off, > nothing happens! Again, at the bottom left you'll see that JAVA > Script is trying to run, but doesn't. > > George George: Java, or JavaScript? They are two completely distinct things, despite the confusingly similar names. As far as I know, there are no security issues with JavaScript. Darrell

Thank you David, It is also required for looking at trees at Ancestry and for looking at Census records and other records there. At least when I turned off JAVA in Firefox, almost nothing worked at Ancestry. Also, if you look at the bottom left of the screen when saving citations to someone in a tree, you'll see JAVA is running. If you're working in a tree and click on a previously added citation with JAVA off, nothing happens! Again, at the bottom left you'll see that JAVA Script is trying to run, but doesn't. George At 25 02 2013 11:07 AM Monday, W David Samuelsen wrote: *********START OF ORIGINAL MESSAGE TEXT********* >I will say this once and no more on Java. > >I have Java and is used exclusively for FamilySearch indexing. It is >required item. > >David Samuelsen **********END OF ORIGINAL MESSAGE TEXT***********