[hcs-d] Potential Virus link

EJ Bensing ebensing at college.harvard.edu
Mon Dec 13 02:32:33 EST 2010


Definitely somebody with Harvard Facebook/database access though. The email
I received was using my real name and I haven't even put that in a single
email coming from my @college account. Very suspicious, I haven't actually
followed the link though, what's on the other end?

 

-E.J. Bensing

 

From: hcs-discuss-bounces at lists.hcs.harvard.edu
[mailto:hcs-discuss-bounces at lists.hcs.harvard.edu] On Behalf Of Saagar
Deshpande
Sent: Monday, December 13, 2010 2:25 AM
To: Andy Brody
Cc: hcs-discuss
Subject: Re: [hcs-d] Potential Virus link

 

if it's a cs50 project, why is it so mysterious? the email just sounds odd
and the name is weird as well.

On Mon, Dec 13, 2010 at 12:28 AM, Andy Brody <abrody at hcs.harvard.edu> wrote:

There's a parallel discussion happening on the Crimson's main email
list. Rumor has it that it's someone's CS50 project.

The thing is hosted by heroku.com, which is in turn hosted by amazon AWS
servers. The email itself was sent through sendgrid. That's awfully
expensive hosting for your average spammer, so I'm not sure what to make
of it. The domain registration lists a 02138 zip code along with a bunch
of fake information. Getting all the usernames and whatnot ought to be
difficult for someone outside Harvard to do.

-Andy


On 12/13/2010 12:16 AM, Jim Danz wrote:
> I just assumed it was some CS50 kid scraping fb.college for email
addresses.
>
> On Mon, Dec 13, 2010 at 12:13 AM, Jeremy Cushman <jscushman at gmail.com>
wrote:
>> Hmm, going to the site (after taking out the identifying token), it seems
to
>> be playing off Harvard Top 10?
>> http://www.hten.me/users/password/edit
>>
>> On Mon, Dec 13, 2010 at 12:12 AM, Jeremy Cushman <jscushman at gmail.com>
>> wrote:
>>>
>>> You click on it, your email address is confirmed to be active, and it's
>>> then worth a lot more in the spam market.
>>>
>>> On Mon, Dec 13, 2010 at 12:11 AM, Louis Evans
>>> <louis.evans at college.harvard.edu> wrote:
>>>>
>>>> Anyone know what the deal is with this email?
>>>> --Louis
>>>>
>>>> Begin forwarded message:
>>>>
>>>> From: Ven6e4nc3 at hten.me
>>>> Date: December 12, 2010 10:37:24 PM EST
>>>> To: louis.evans at college.harvard.edu
>>>> Subject: Playtime
>>>>
>>>> Louis, I want you to have some fun... Set your password by clicking
here.
>>>> Don't forget that your login e-mail is louis.evans at college.harvard.edu.
>>>> Peace, \/en6e4nc3
>>>>
>>>> _______________________________________________
>>>> hcs-discuss mailing list
>>>> hcs-discuss at lists.hcs.harvard.edu
>>>> https://lists.hcs.harvard.edu/mailman/listinfo/hcs-discuss
>>>>
>>>
>>
>>
>> _______________________________________________
>> hcs-discuss mailing list
>> hcs-discuss at lists.hcs.harvard.edu
>> https://lists.hcs.harvard.edu/mailman/listinfo/hcs-discuss
>>
>>
> _______________________________________________
> hcs-discuss mailing list
> hcs-discuss at lists..hcs.harvard.edu
<mailto:hcs-discuss at lists.hcs.harvard.edu> 
> https://lists.hcs.harvard.edu/mailman/listinfo/hcs-discuss
_______________________________________________
hcs-discuss mailing list
hcs-discuss at lists.hcs.harvard.edu
https://lists.hcs.harvard.edu/mailman/listinfo/hcs-discuss

 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.hcs.harvard.edu/pipermail/hcs-discuss/attachments/20101213/0e073d71/attachment.htm 


More information about the hcs-discuss mailing list