Spammers harvesting addresses

[Bill Moran]

Stephen Hovey wrote:
> OTHER than a unsecured fingerd, how else might spammers be harvest email
> addresses?  Every so often Ill end up with spam in an account created for
> some specific purpose, which never sends email, and which is a nonsense
> made up userid (thus hard to think of as being spammed on a lucky guess)

Isn't there an EXPN command that lists available users on an SMTP server,
that's usually disabled by default just for this reason?  Memory could be
bad on this one but it's something to look into.

Also, why would you be so suprised if spammers just tried every possible
combination of letters?  Hell, they're probably using someone else's
server (that they've cracked) so why should they worry about lots of
non-deliverables?

-- 
Bill Moran
Potential Technologies
http://www.potentialtech.com