Replying to
@kevinrothrock@infosec.exchange
@kevinrothrock@infosec.exchange I’m not sure quite what twitter-thread.com is, but be aware that it’s riddled with malicious ads.
Remote
Steve Atkins
@lluad@mastodon.ie
mastodon
4.6.6
0
Followers
0
Following
13
Posts
Joined October 30, 2022
Code:
Posts
Deluged with email spam from the scum at @hackernoon@mas.to this morning, as are other folks at my company.
The training set is important. I just saw an ad for latex fetishware, and the presumably LLM generated text spelled it "LaTeX".
Though,there's probably a fair bit of overlap between LaTeX lovers and latex lovers.
The rate of people angrily posting about how all datacenters have no actual use, and they should all be violently destroyed is rising.
On social media. Hosted on servers. Servers in datacenters.
(Do they mean LLM farms? Hyperscalers? Not AFAICT, just all datacenters.)
Replying to
@rooster@beige.party
@rooster@beige.party I don’t think Jesus is a nutritionally complete diet.
Replying to
@Teri_Kanefield@mastodon.social
@Teri_Kanefield@mastodon.social spammers filling forms has happened forever, but it seems to have gotten to be a bit more of a thing recently, and some of the older mitigations aren’t as effective.
I’m seeing them use real-ish browsers (running JavaScript) and maybe cheap LLMs to customize the messaging.
I miss the little chaos gremlins, but packing a suitcase is so much easier without feline assistance.
If you’re big enough then blocking mail from #gmail is enough to make them police their abusive customers. #nottoobigtoblock
https://www.google.com/appsstatus/dashboard/incidents/224ozRqzW4sFBDK8hLnT
Replying to
@drbrain@mastodon.social
@drbrain @Paul_Taylor It’s not a general requirement.
If you’re sending “bulk” mail then some large consumer ISPs (Google, Yahoo, that sort) require you to have DMARC records in place or your mail is likely to be rejected. “Bulk” doesn’t have a hard volume cut off, for good operational reasons, but unless you’re sending several thousand a month that’s not you.
The only real requirement for modern email is DKIM signatures, ideally aligned with the From: header. Some outliers want SPF too.
Replying to
@drbrain@mastodon.social
@drbrain @Paul_Taylor
DMARC reports are to tell you about delivery attempts “From:” your domain that are not authenticated.
If your SPF records “forbid” a sender that’s exactly the situation you have _explicitly_ asked to be notified about.
Replying to
@Paul_Taylor@mathstodon.xyz
@Paul_Taylor DMARC reports don’t tell you whether your mail went to spam or not. They tell you when your mail was not authenticated when it was received.
There’s something to investigate there, but it may not be what you’re describing it as.
Replying to
@kenney@mastodon.gamedev.place
@kenney@mastodon.gamedev.place That's looking quite lovely!
Replying to
@fla@mastodon.social
@fla@mastodon.social Mine is https://aboutmy.email
https://senderaudit.com is another, which looks at different subset of things.