[Haskell-cafe] Haskell GitLab abuse

[Bryan Richter]

Yeah, unfortunately we are aware of various attempts to abuse the GHC
GitLab instance. I will delete this particular user, and sometime in the
near future I'll take steps to systematically clean out any other lurking
spam.

On Mon, 24 Jul 2023 at 15:47, aeiouaeiouaeiouaeiouaeiouaeiou <
aeioudev at outlook.com> wrote:

> Spam detection software, running on the system "mail.haskell.org", has
> identified this incoming email as possible spam.  The original message
> has been attached to this so you can view it (if it isn't spam) or label
> similar future email.  If you have any questions, see
> @@CONTACT_ADDRESS@@ for details.
>
> Content preview:  Hi everyone, I don't know where the best place to post
> about
>    this issue is, so here goes. Recently I found that some Google results
> are
>    bloated with malicious links from Haskell GitLab fork repositories. You
> can
>    see for yourself:
> https://gitlab.haskell.org/search?repository_ref=master&scope=blobs&search=torrent+download
>    [...]
>
> Content analysis details:   (5.1 points, 5.0 required)
>
>  pts rule name              description
> ---- ----------------------
> --------------------------------------------------
>  3.0 SINGLE_HEADER_3K       A single header contains 3K-4K characters
>  1.3 HK_RANDOM_FROM         From username looks random
>  0.0 HK_RANDOM_ENVFROM      Envelope sender username looks random
> -0.0 SPF_HELO_PASS          SPF: HELO matches SPF record
> -0.0 T_RP_MATCHES_RCVD      Envelope sender domain matches handover relay
>                             domain
> -0.0 SPF_PASS               SPF: sender matches SPF record
>  0.8 BAYES_50               BODY: Bayes spam probability is 40 to 60%
>                             [score: 0.5000]
>  0.0 T_DKIM_INVALID         DKIM-Signature header exists but is not valid
>
> The original message was not completely plain text, and may be unsafe to
> open with some email clients; in particular, it may contain a virus,
> or confirm that your address can receive spam.  If you wish to view
> it, it may be safer to save it to a file and open it with an editor.
>
> _______________________________________________
> Haskell-Cafe mailing list
> To (un)subscribe, modify options or view archives go to:
> http://mail.haskell.org/cgi-bin/mailman/listinfo/haskell-cafe
> Only members subscribed via the mailman list are allowed to post.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.haskell.org/pipermail/haskell-cafe/attachments/20230731/18aa4488/attachment.html>