[unisog] cornell.edu blog being used for spam - and now virginia.edu as well

[STeve Andre']

On Tuesday 27 November 2007 19:49:28 Frank Bulk wrote:
I'd wait more than 12 hours.  What if the person responsible is out, etc?
I'd wait three days.

--STeve Andre'

> Ok, 12 hours have passed since I contacted the security and abuse addresses
> at a larger university regarding a spamming incident, with no response or
> even confirmation.
>
> Is posting the school's name in unisog now fair game? ;)
>
> Frank
>
> -----Original Message-----
> From: unisog-bounces at lists.dshield.org
> [mailto:unisog-bounces at lists.dshield.org] On Behalf Of Buhrmaster, Gary
> Sent: Saturday, November 24, 2007 11:03 PM
> To: UNIversity Security Operations Group
> Subject: Re: [unisog] cornell.edu blog being used for spam - and now
> virginia.edu as well
>
> > Please make a reasonable attempt to find appropriate contact
> > information
> > for the appropriate institution before making a request
> > on-list.
>
> To first approximation, universities are usually RFC 2142
> compliant (meaning abuse, noc, and security at UNIVERSITY.edu
> work).  If one does not want to navigate the (sometimes
> confusing) maze of web pages that some universities bury
> their contact information on, one can/should try the
> "required" standard ones.  Works much more often than not.
>
> Gary