>> i'm subscribed to the netbsd lists with addresses that i've *never*
>> used anywhere else.  these are addresses that i've *only* used for
>> conversing with majordomo@netbsd.org.  i just got some spam at two of
>> those addresses.  can someone please make *sure* that the who command
>> is disabled for all netbsd lists?  i know it works on at least one (i
>> just checked), probably two (i got the same spam at two netbsd list
>> addresses), and possibly more.
>
>even if 'who' was completely disabled, there are other ways to get all
>or most e-mail addresses subscribed to the lists.

granted, but it will keep the casually perusing spamfarmer out.

>Of course, you can shut them down to some degree, but if you do so
>completely you'd actually lose very useful functionality.

um...how so?

>I'll leave discovery of the mechanism(s) as an exercise for the
>reader.  8-)

does mnews-netbsd-tech-security ring a bell, chris?  :)

-- 
|-----< "CODE WARRIOR" >-----|
codewarrior@daemon.org             * "ah!  i see you have the internet
twofsonet@graffiti.com (Andrew Brown)                that goes *ping*!"
andrew@crossbar.com       * "information is power -- share the wealth."