Can anybody post to the NetBSD emailing lists, regardless of whether they
subscribed to the list in question?  There have been several spams, including an
advertisement for pirate software including some illegal copies of Microsoft 
OSes, and most recently a message with a base64 attachment, joke.exe, from 
Hahaha <hahaha@sexyfun.net>, supposedly the real story of Snowhite and the Seven
Dwarfs.  I received this same spam off the NetBSD lists, and also another spam
with a different attachment, dwarf4you.exe, on the same subject by the same 
apparent sender.

Hahaha, whoever he or she is, should know that people on NetBSD lists 
(1) are smart enough to be aware of the dangers of running strange attachments
(could be a virus or Trojan horse),
(2) might not be able to run the attachment at all.