Just got propositioned by a logos forum user...

I had no idea my email address was public... How do I turn this off?

I am not happy that someone got my personal email address...

How do I trun my Location, Email, and all information in my profile OFF???

Also, there needs to be a way to talk privately to forum administrators...

Here is the email:

Hello
(community.logos.com)
My name is XXXXX. i saw your email through the internet and became interested in you,i will also like to know you more,and if you can send an email to my email address,i will give you my pictures here I believe we can move from here! An waiting or your mail to my email address above because i have a lot to tell you,
Lot's of love,Miss XXXX.

Find more posts tagged with

Comments

Rosie Perera

I got this same exact email too. I was very surprised. It is not a Logos forum user and not actually someone propositioning you. It's a spammer. I have no idea how they got your email address, because it is not public.

I will contact Logos and see what they can say about how this could have happened.

Anybody else receive this email?

Matthew C Jones

https://community.logos.com/discussion/comment/196999#Comment_196999

Don;t know why you two are upset. Most people have to pay a social networking service to find potential persons-of-interest. How did you get it for free? [U]

The structural content of the email looks like a fishing scam of foreign origin.

You can check the header of the email and determine where it originated.

Jerry Walker

https://community.logos.com/discussion/comment/197005#Comment_197005

I got the same message as well. But I deleted it immediately.

Rosie Perera

https://community.logos.com/discussion/comment/197009#Comment_197009

I googled the "reply-to" email address that was in the message and it is a known scammer (apparently one of those Nigerian email scams, where they try to strike up a relationship with you and then get you to send them money). I know how to deal with these things, delete them, of course. But it is still disturbing that all our email addresses got out. I wonder if the Logos forum user database got hacked?

Aaron Baldridge

https://community.logos.com/discussion/comment/197009#Comment_197009

I also got the same message. Looking like a hack job. Wonder if our cc info was compromised too????

Rich DeRuiter

Also got this. Flagged it as junk. I'm a bit surprised by what looks like a breach. Hopefully, Logos can get on top of this and make sure it doesn't happen again.

EDIT: BTW, I do not have this web site set up to email me anything at any time. Nor do I email into this forum, nor even use an RSS fee for it. I only access it directly from the internet. So how did my email address get to them?

Mark Barnes

https://community.logos.com/discussion/comment/197018#Comment_197018

Yes, this is rather worrying. The email didn't originate from Logos' servers, which means that somehow they got my email address. In my case it's theoretically possible it was harvested manually (my email address is not hard to find out with a bit of work), but if you've all had emails as well, that does make a hack at least a possible scenario.

nicky crane

https://community.logos.com/discussion/comment/197043#Comment_197043

I had one too, mentioning Com...ty l.g.s com. In my spam. Have deleted with the usual offers of performance enhancing drugs etc...

Ted Hans

https://community.logos.com/discussion/comment/197045#Comment_197045

I had one too, mentioning Com...ty l.g.s com. In my spam. Have deleted with the usual offers of performance enhancing drugs etc...

For a while I also have being receiving these offer via email, I was rather surprise at first until I realised what it was.

And I also got this email as well.

Hello
(community.logos.com)
My name is Shellia. i saw your
email through the internet and became interested in you,i will also like to know
you more,and if you can send an email to my email address,i will give you my
pictures here I believe we can move from here! An waiting or your mail to my
email address above because i have a lot to tell you,
Lot's of love,Miss
Shellia .

Friedrich

https://community.logos.com/discussion/comment/197046#Comment_197046

<sniff> <sniff> . . . and I thought I was the special one . . . . [:'(] [U]

Actually, don't think I got it, unless it went to already emptied junk folder. Let us know when you hear from Logos, Rosie

T Gerold Castle

https://community.logos.com/discussion/comment/197049#Comment_197049

I got this and quickly deleted it. I am concerned about CC info now... Logos?

Ted Hans

https://community.logos.com/discussion/comment/197049#Comment_197049

<sniff> <sniff> . . . and I thought I was the special one . . . .

Very funny[:D]

Derek

https://community.logos.com/discussion/comment/197060#Comment_197060

Every other forum I have ever participated in has allowed people to PM (personal message) a forum administrator... We need this ability.

Floyd Johnson

https://community.logos.com/discussion/comment/197060#Comment_197060

<sniff> <sniff> . . . and I thought I was the special one . . . .

Very funny

I thought he might be disappointed because he was left out. Someone must have known what he was really like.

Carmen Gauvin-O'Donnell

https://community.logos.com/discussion/comment/197067#Comment_197067

Could it be they got it from some archived newsgroups perhaps?

Kevin Becker

Just checked my spam folder, this email wasn't there.

I didn't do the old newsgroups btw.

Alan Macgregor

https://community.logos.com/discussion/comment/197077#Comment_197077

Just checked my spam folder, this email wasn't there.

I didn't do the old newsgroups btw.

Same for me. No email and I didn't do the newsgroups in the past.

Rosie Perera

https://community.logos.com/discussion/comment/197071#Comment_197071

Could it be they got it from some archived newsgroups perhaps?

I never used the old newsgroups, but I did get the email. And the email address that this spam was sent to is one I've only ever given out to Logos. I create separate email addresses for each organization I do business with for this very reason. I've never posted it on the forum, so it must have been hacked.

Paul Golder

I wonder if the user database has been compromised, or if communications (forum log in and/or L4 log in and synchronization) are being hacked...

Rosie Perera

https://community.logos.com/discussion/comment/197081#Comment_197081

Even if the forum user database has been hacked, I'm sure the main Logos database which keeps all our purchase info is separate. This spam definitely seems to be tied to the forum only (community.logos.com was mentioned in the body of the message). And our CC info is surely encrypted anyway so even if they broke into that database, the wouldn't get anything of use to them.

I think the level of alarm about this incident has risen enough, though, that I'm going to email Bob himself about it. Will get back to you all on what I hear.

Kevin Becker

https://community.logos.com/discussion/comment/197079#Comment_197079

I initially signed up for Logos with a .edu address that I don't use anymore. It was still showing up as my "Libronix ID" before the website redesign. Perhaps the license database was the one hacked...

EDIT: Never mind the specific reference to community.logos.com seems to rule this speculation out.

TCBlack

https://community.logos.com/discussion/comment/197081#Comment_197081

Just found it in my spam folder, sent on Wed, Dec 1, 2010 at 8:57 PM.

It looks like (S)he is from the UK FWIW, but even that I can't verify.

In other news.......

CONGRATULATIONS on 7K posts Rosie.

Paul Golder

https://community.logos.com/discussion/comment/197087#Comment_197087

In other news.......

CONGRATULATIONS on 7K posts Rosie.

[^] [Y]

Paul Golder

https://community.logos.com/discussion/comment/197083#Comment_197083

I think the level of alarm about this incident has risen enough, though, that I'm going to email Bob himself about it. Will get back to you all on what I hear.

I wonder if any of this information was on the stolen MACs?

NetworkGeek

https://community.logos.com/discussion/comment/197094#Comment_197094

The email address I use for this forum account is one I only use here, it forwards to my regular email (I do this a lot for obvious reasons seen here today!) And yes, I got one too, so it had to come either from the forums or through Logos. I do not use this email for my Logos purchases, just forums.

TCBlack

https://community.logos.com/discussion/comment/197094#Comment_197094

I wonder if any of this information was on the stolen MACs?

Not likely Paul, that was just Mac code residing on those computers. There would be no discernible reason for Forum emails to be sitting on them.

Paul N

https://community.logos.com/discussion/comment/197079#Comment_197079

hey Rosie, if it was a "hack" then wouldn't they take all of our e-mails? I didn't receive one either. It seems too inconsistent.

Derek

https://community.logos.com/discussion/comment/197083#Comment_197083

Even if the forum user database has been hacked, I'm sure the main Logos database which keeps all our purchase info is separate.

Will feel safe when I hear a definite report of the breakin from Logos...

Does Logos staff post on these forums??

Graham Criddle

https://community.logos.com/discussion/comment/197114#Comment_197114

Does Logos staff post on these forums??

Some of them do but may not see all of the posts.

Above Rosie said she was writing to Bob about it and would report back.

Graham

Mark Barnes

https://community.logos.com/discussion/comment/197099#Comment_197099

Dominick's post above does strengthen the case for a hack. Even if that's true, it's extremely unlikely that our customer data (e.g. addresses, credit cards) has been compromised, as my understanding is that customer data is kept separate from forum data, with the two databases being regularly synced to one another. But we do need an urgent response from Logos to clarify the situation.

fgh

https://community.logos.com/discussion/comment/197115#Comment_197115

I've had one too, and I was definitely never on any news groups (I doubt I even knew what Logos was back then). Nor have I ever posted my e-mail on the forums, even in disguised form.

Can't say I particularly like this. You'd think a software company would know how to protect our info.

Paul Golder

https://community.logos.com/discussion/comment/197104#Comment_197104

I wonder if any of this information was on the stolen MACs?
Not likely Paul, that was just Mac code residing on those computers. There would be no discernible reason for Forum emails to be sitting on them.

I would think so too, especially by what Bob has said.

I was just wondering if something may have slipped by, like an active log-on by someone with access to the emails.

steve clark

https://community.logos.com/discussion/comment/197125#Comment_197125

i got one too. my spam filter caught it.

This is not good.

Phil Gons (Logos)

Your email address should not be public. We're looking into this right now to figure out what's going on. The security and privacy of your email address and other personal information is very important to us.

In the future, you can send an email to forums@logos.com to reach me and David Ladiges, the main web developer for the forums.

Michael March

https://community.logos.com/discussion/comment/197149#Comment_197149

I did not get this email, fwiw to those trying to figure out what happened...

Dan Francis

https://community.logos.com/discussion/comment/197159#Comment_197159

I did not get this email, fwiw to those trying to figure out what happened...

Never got one either... and i checked through the deleted mail for it too.. I was on the old Logos newsgroups, but the mac user group was regularly being purged for whatever reason so maybe that explains it.

-Dan

tom

https://community.logos.com/discussion/comment/197149#Comment_197149

And this issue is why I do not want any of my personal data (notes, prayers,...) in L4 to also be in the cloud. Our data will be hacked (it is not a question of if, but when). And this is why I would like a setting in L4 that allows us to have the option of letting us decide what L4 information can be sent to L4's cloud.

Matthew C Jones

https://community.logos.com/discussion/comment/197188#Comment_197188

And this issue is why I do not want any of my personal data (notes, prayers,...) in L4 to also be in the cloud. Our data will be hacked (it is not a question of if, but when). And this is why I would like a setting in L4 that allows us to have the option of letting us decide what L4 information can be sent to L4's cloud.

I haven't received my propositional spam yet. [:(] But even if I were silly enough to respond to another woman making advances to me through my email, I doubt I would have enough stupidity left to give out private info. (my acknowledging receipt of the initial spam goes beyond my imagination.)

I likewise do not save any personal data (notes, prayers,...) in anything stored in a cloud. I figure if my bank and government are unable to guard my privacy, no one is.

Phil Gons (Logos)

https://community.logos.com/discussion/comment/197149#Comment_197149

There was no breach of security. Your credit card info is safe.

There was a bug in the code in the forum software that used your email address in the RSS feed. It was hidden in the source code, so it's gone unnoticed until now. We've fixed it, but there's no way to retract the feeds once they've been fetched. So you may continue to get some SPAM on your forums email address.

We're very sorry for this inconvenience.

fgh

https://community.logos.com/discussion/comment/197188#Comment_197188

And this issue is why I do not want any of my personal data (notes, prayers,...) in L4 to also be in the cloud. Our data will be hacked (it is not a question of if, but when). And this is why I would like a setting in L4 that allows us to have the option of letting us decide what L4 information can be sent to L4's cloud.

...

NetworkGeek

https://community.logos.com/discussion/comment/197191#Comment_197191

There was no breach of security. Your credit card info is safe.

There was a bug in the code in the forum software that used your email address in the RSS feed. It was hidden in the source code, so it's gone unnoticed until now. We've fixed it, but there's no way to retract the feeds once they've been fetched. So you may continue to get some SPAM on your forums email address.

We're very sorry for this inconvenience.

Ah - thanks for the explanation Phil. If I understand this correctly, this answers the question why some forum users got the spam and others didn't. I bet those who subscribe to one or more forums (I do), i.e. the web site RSS feed delivers emails to you, got the spam, and those that just read the forum messages directly on the web site via their browser, did not. Correct?

Bohuslav Wojnar

https://community.logos.com/discussion/comment/197199#Comment_197199

Ah - thanks for the explanation Phil. If I understand this correctly, this answers the question why some forum users got the spam and others didn't. I bet those who subscribe to one or more forums (I do), i.e. the web site RSS feed delivers emails to you, got the spam, and those that just read the forum messages directly on the web site via their browser, did not. Correct?

Looks you are right Dominic. I read forums only on the Internet and haven't got the SPAM. I used to be on the old newsgroups.

Mark Smith

https://community.logos.com/discussion/comment/197201#Comment_197201

I read forums only on the Internet and haven't got the SPAM.

Ditto.

One suggestion to those who've been compromised: strengthen your email server password if it would be easy to hack or guess. Your account could get used by other spammers if they can use your email address and you have a simple password (1-2-3-4 ala Space Balls). Won't be a concern for all but might be for some.

Rosie Perera

https://community.logos.com/discussion/comment/197199#Comment_197199

There was no breach of security. Your credit card info is safe.

There was a bug in the code in the forum software that used your email address in the RSS feed. It was hidden in the source code, so it's gone unnoticed until now. We've fixed it, but there's no way to retract the feeds once they've been fetched. So you may continue to get some SPAM on your forums email address.

Thank you, Phil! Two hour turnaround on solving that problem! Wow! And I'm glad it was not as serious as we were speculating.

Ah - thanks for the explanation Phil. If I understand this correctly, this answers the question why some forum users got the spam and others didn't. I bet those who subscribe to one or more forums (I do), i.e. the web site RSS feed delivers emails to you, got the spam, and those that just read the forum messages directly on the web site via their browser, did not. Correct?

I subscribe to the RSS feed. But I doubt it has to do with who has subscribed, rather who has posted (as their email addresses would have come out in that feed). Maybe the spammers just scoured one of the forums for email addresses so the spam only went to people who ever posted on that forum.

This is precisely why I create separate email addresses for different online uses, which all forward to my main one. If the spammers sell my Logos email address and I start getting lots of spam on it from all over, I can just create a new one, change my address on my forum profile, and delete the old email address.

Bohuslav Wojnar

https://community.logos.com/discussion/comment/197209#Comment_197209

This is precisely why I create separate email addresses for different online uses, which all forward to my main one. If the spammers sell my Logos email address and I start getting lots of spam on it from all over, I can just create a new one, change my address on my forum profile, and delete the old email address.

I might consider doing it that way also. I have many addresses but for Logos I use my main one. Thanks for your advice. However, changing the email address as your Logos ID is a pain. It messed up some things like forum posts counts etc.

BillS

https://community.logos.com/discussion/comment/197209#Comment_197209

This is precisely why I create separate email addresses for different online uses, which all forward to my main one. If the spammers sell my Logos email address and I start getting lots of spam on it from all over, I can just create a new one, change my address on my forum profile, and delete the old email address.

Same here, though I don't bother to forward them to my main one... I just make the other email addresses part of a set of web pages that are my home page.

NetworkGeek

https://community.logos.com/discussion/comment/197209#Comment_197209

I subscribe to the RSS feed. But I doubt it has to do with who has subscribed, rather who has posted (as their email addresses would have come out in that feed). Maybe the spammers just scoured one of the forums for email addresses so the spam only went to people who ever posted on that forum.

I don't think so, Rosie. The RSS feed is one way - Logos to us. That's what the subscription uses. So the security hole was that our email address was in the message sent to us through their RSS feed. That's my understanding...

Juanita

https://community.logos.com/discussion/comment/197243#Comment_197243

I subscribe to the RSS feed. But I doubt it has to do with who has subscribed, rather who has posted (as their email addresses would have come out in that feed). Maybe the spammers just scoured one of the forums for email addresses so the spam only went to people who ever posted on that forum.

I don't think so, Rosie. The RSS feed is one way - Logos to us. That's what the subscription uses. So the security hole was that our email address was in the message sent to us through their RSS feed. That's my understanding...

FWIW, I am not subscribed to any RSS feed--that I know of-- and I got the email.

Rich DeRuiter

https://community.logos.com/discussion/comment/197250#Comment_197250

FWIW, I am not subscribed to any RSS feed--that I know of-- and I got the email.

I am not subscribed to any forum RSS feeds either, though I may have tried it briefly a long time ago (would that be enough?).

T Gerold Castle

https://community.logos.com/discussion/comment/197250#Comment_197250

FWIW, I am not subscribed to any RSS feed--that I know of-- and I got the email.

I am not subscribed to ANY RSS feed. I also got the email.