Calguns.net  

Home My iTrader Join the NRA Donate to CGSSA Sponsors CGN Google Search
CA Semiauto Ban(AW)ID Flowchart CA Handgun Ban ID Flowchart CA Shotgun Ban ID Flowchart
Go Back   Calguns.net > CALGUNS.NET > Announcements and Suggestions
Register FAQ Members List Calendar Mark Forums Read

Announcements and Suggestions This is a place for suggestions, news and updates about the site.

Reply
 
Thread Tools Display Modes
  #1  
Old 06-07-2018, 7:26 PM
aaronsilver aaronsilver is offline
CGN/CGSSA Contributor - Lifetime
CGN Contributor - Lifetime
 
Join Date: Jun 2018
Location: California
Posts: 7
iTrader: 0 / 0%
Default Spammed after joining

Hi, just registered with the site. Long time reader though, great site.

Today, a couple days after registering, before I've even posted, I received a spam email:

Quote:
From: kev@lockitup.life
Subject: Prevent the Preventable - Make guns safer with "Lock It Up" box!
It appears to violate the CAN-SPAM act by not including a physical postal address, and probably other ways. And even if it wasn't illegal, reputable businesses don't send spam email. It looks like they want money to "crowdfund" a handgun booksafe of some kind, so I'm assuming it's just a flat-out scam targeting Calguns members.

It looks like, by default, Calguns exposes your email address to the entire world? I assume some bot scraped it right away, and now people will be sending me scammy spam emails until the end of time.

1. Can the site be made security by default? Email addresses are private information, and it's a little alarming it was exposed without me realizing it. Is there something I did that caused this?

2. Even for people who choose to share their email address, it seems like there should be some kind of 'anti-scraping' to prevent bots from gathering personal information from people on the site.

3. Is there a way to prevent any sharing of the address? Unless I'm misunderstanding, it looks like the most restrictive setting is sharing with "Friends" only.

I hate to start out my relationship with Calguns on the wrong foot, but this kind of information leakage is problematic, and spam email is probably the least bad thing I can think of it being used for by an adversary. And there's a lot of adversaries these days.
Reply With Quote
  #2  
Old 06-07-2018, 7:35 PM
TKM's Avatar
TKM TKM is offline
Owner/Operator Whopper!
CGN Contributor - Lifetime
 
Join Date: Jul 2002
Location: Prozac, sometimes you feel like a nut, sometimes you don't.
Posts: 8,260
iTrader: 67 / 100%
Default

I've been here since before I was here. (there was a weirdness, re-set early on)

Never been targeted like that.



Have you considered an adblocker?

Why did you become a CGN/CGSSA Contributor - Lifetime
CGN Contributor - Lifetime member without checking the place out?
__________________
When you are dead, you don't know that you are dead. All of the pain is felt by others.



The same thing happens when you are stupid.
Reply With Quote
  #3  
Old 06-07-2018, 7:40 PM
Cokebottle's Avatar
Cokebottle Cokebottle is offline
Seņor Member
CGN Contributor - Lifetime
 
Join Date: Oct 2009
Location: IE, CA
Posts: 31,728
iTrader: 14 / 100%
Default

Your profile is locked down now, but was it before?
Default for Vbulletin is to reveal your email address in your profile.
__________________
- Rich

Quote:
Originally Posted by dantodd View Post
A just gov't will not be overthrown by force or violence because the people have no incentive to overthrow a just gov't. If a small minority of people attempt such an insurrection to grab power and enslave the people the RKBA of the whole is our insurance against their success.
Reply With Quote
  #4  
Old 06-07-2018, 9:23 PM
Pinto's Avatar
Pinto Pinto is offline
Senior Member
 
Join Date: Jul 2007
Location: Calaveras Co.
Posts: 960
iTrader: 296 / 100%
Default

Oh. And, by the way, welcome to Calguns.
Reply With Quote
  #5  
Old 06-07-2018, 9:26 PM
readysetgo's Avatar
readysetgo readysetgo is offline
Win win win win
CGN Contributor
 
Join Date: Aug 2011
Location: Ventura County, Caught Between My Woman And My Pistol And My Chips
Posts: 8,089
iTrader: 38 / 100%
Default

Your settings allow other members to send an email, which also exposes that address to the spammers who sign up here for just that purpose.

Change your settings.
__________________
Quote:
Originally Posted by teg33 View Post
Welcome, don't listen to readysetgo.
Stand up and be counted, or lay down and be mounted... -Mac

Reply With Quote
  #6  
Old 06-07-2018, 9:34 PM
readysetgo's Avatar
readysetgo readysetgo is offline
Win win win win
CGN Contributor
 
Join Date: Aug 2011
Location: Ventura County, Caught Between My Woman And My Pistol And My Chips
Posts: 8,089
iTrader: 38 / 100%
Default

User CP > Edit Options > Messaging & Notification > Receive Email > Receive Email from Other Members > Uncheck > Save Changes

Also... Allow vCard Download > Uncheck

cgn email settings.JPG

cgn email settings b.JPG

Welcome aboard.

Last edited by readysetgo; 06-07-2018 at 9:42 PM..
Reply With Quote
  #7  
Old 06-08-2018, 12:22 AM
CaliforniaCowboy's Avatar
CaliforniaCowboy CaliforniaCowboy is offline
Senior Member
 
Join Date: May 2015
Posts: 557
iTrader: 0 / 0%
Default

Never had that issue.
__________________
For a good time, Call 556-308-4570
Reply With Quote
  #8  
Old 06-08-2018, 7:38 AM
aaronsilver aaronsilver is offline
CGN/CGSSA Contributor - Lifetime
CGN Contributor - Lifetime
 
Join Date: Jun 2018
Location: California
Posts: 7
iTrader: 0 / 0%
Default

Ah, I think it was the 'Receive email from other members' setting, which I think was presented during registration. I didn't appreciate that that meant 'receive email because we're going to make your email address public.'

Quote:
Originally Posted by TKM View Post
Have you considered an adblocker?

Why did you become a CGN/CGSSA Contributor - Lifetime
CGN Contributor - Lifetime member without checking the place out?
I've been checking the place out for a long time, just never joined up. And one of the CGSSA individuals was very helpful to me.

If this is just the standard for vBulletin, I guess maybe I should have expected it. But locking this down a bit more by default for the site would be a good opportunity for the admins; just someone scraping new members for their email addresses and other info could build a database that they could use for a lot of mayhem. You can do a lot with an email address!
Reply With Quote
  #9  
Old 06-08-2018, 7:54 AM
readysetgo's Avatar
readysetgo readysetgo is offline
Win win win win
CGN Contributor
 
Join Date: Aug 2011
Location: Ventura County, Caught Between My Woman And My Pistol And My Chips
Posts: 8,089
iTrader: 38 / 100%
Default

Pretty sure we were legit hacked a couple of years back, including username and passwords too.

Moral is, use burner email and different password than your million dollar portfolio account.
Reply With Quote
  #10  
Old 06-08-2018, 8:37 AM
mikeyr's Avatar
mikeyr mikeyr is offline
Levers, the original AW
CGN Contributor
 
Join Date: Sep 2011
Location: SB
Posts: 857
iTrader: 2 / 100%
Default

Quote:
Originally Posted by readysetgo View Post
Moral is, use burner email and different password than your million dollar portfolio account.
Bingo...burner emails are easy to get on hotmail and gmail. I have many (but I own my domain so I can create/delete them on the fly) I have been doing that for years.
__________________
As First Lady, Hillary had one job to do, and one job to do only. And she outsourced it to Monica Lewinsky.
Reply With Quote
  #11  
Old 06-08-2018, 1:48 PM
Dutch3's Avatar
Dutch3 Dutch3 is offline
Dirt Farmer
CGN Contributor
 
Join Date: Oct 2010
Location: Butte County
Posts: 13,244
iTrader: 3 / 100%
Default

I have received 100x more SPAM from orgs the NRA provided my info to than this site.
__________________
Just taking up space in the second-worst small town in California.
Reply With Quote
  #12  
Old 06-08-2018, 3:11 PM
newbutold newbutold is offline
Member
 
Join Date: Jan 2017
Location: CA
Posts: 282
iTrader: 0 / 0%
Default

No spam here and welcome.
__________________
"Although he was elected as a Republican, the president shows little affinity for ideals long espoused by conservatives: free minds, free markets and free people."

In spite of his lack of honesty, morals, ethics, and class, Donald was the better candidate at the time.

Only witches fear witch hunts, cast insults and dismiss real news reporting.

Yes, the FBI investigates crimes and the guilty go to jail. Thank goodness.
Reply With Quote
  #13  
Old 06-08-2018, 9:03 PM
Sputnik's Avatar
Sputnik Sputnik is offline
Shiny
CGN Contributor
 
Join Date: May 2011
Location: East Bay
Posts: 1,301
iTrader: 2 / 100%
Default

For once my internet paranoia paid off and I have not been spammed through any CGN info. Now those credit reporting agencies...don't get me started.
Reply With Quote
  #14  
Old 06-08-2018, 9:16 PM
Powder_Keg's Avatar
Powder_Keg Powder_Keg is offline
Senior Member
 
Join Date: Jan 2013
Location: Los Angeles
Posts: 1,639
iTrader: 62 / 100%
Default

Received the same spam/junk email as OP today. I use a secondary email address for CalGuns and I keep it seperate from my personal email. This is the 1st time ever getting spam to that email address.

As other have said, turn off the ability to receive emails or use a secondary email addresss that you are willing to ditch and replace.
__________________
Quote:
Originally Posted by Bangzoom View Post
My rule for when you are in a dilemma is...make dilemonaide
Want To Sell
Springfield Professional 1911
Samson 12" Handguard, AR15, Cerakote FDE
Reply With Quote
  #15  
Old 06-08-2018, 9:38 PM
Powder_Keg's Avatar
Powder_Keg Powder_Keg is offline
Senior Member
 
Join Date: Jan 2013
Location: Los Angeles
Posts: 1,639
iTrader: 62 / 100%
Default Spam is from this guy, Kev Kutina

See attached images. Emails have dates from May 2018, all from the same company.

Kev Kutina is a forum member.
http://www.calguns.net/calgunforum/s....php?t=1280128
Attached Images
File Type: jpg IMG_7203.jpg (7.0 KB, 31 views)
File Type: jpg IMG_7204.jpg (8.4 KB, 26 views)
__________________
Quote:
Originally Posted by Bangzoom View Post
My rule for when you are in a dilemma is...make dilemonaide
Want To Sell
Springfield Professional 1911
Samson 12" Handguard, AR15, Cerakote FDE

Last edited by Powder_Keg; 06-08-2018 at 10:18 PM..
Reply With Quote
  #16  
Old 06-09-2018, 9:13 AM
aaronsilver aaronsilver is offline
CGN/CGSSA Contributor - Lifetime
CGN Contributor - Lifetime
 
Join Date: Jun 2018
Location: California
Posts: 7
iTrader: 0 / 0%
Default

Shocking plot twist:

While investigating this a bit further, I realized that I am already a Calguns member! I made an account five years ago, posted a dozen times, and then totally forgot about the entire thing. Gee, that's embarrassing..

I was going to message this guy Kev and give him a hard time about the spam he's been sending, both to my new email address, and another email address associated with my other account, since he's violating forum rule (c) (maybe not as serious as the CAN-SPAM act, but still). However, I now realize by registering a second account, I am in violation of forum rule (b), so I'm really in no position to give anyone a hard time.

For what it's worth, my other account evidently has had the same exposed-email problem for years, but it only received its first piece of spam recently, on May 17, 2018, also from Kev. So I guess it's just coincidental timing. Maybe the site used to have some kind of anti-scraping that recently stopped working? Or email addresses only started getting exposed recently?

Anybody have any idea how to get in touch with a forum administrator to sort out my account problem? I'd just cancel this one, except this is the one I plumped for membership on... Hopefully a violation of forum rule (b) won't cause agents to show up on my doorstep to confiscate my guns, but given recent events affecting other people who have made other innocent mistakes, I don't know what to think!
Reply With Quote
  #17  
Old 06-09-2018, 9:24 AM
aaronsilver aaronsilver is offline
CGN/CGSSA Contributor - Lifetime
CGN Contributor - Lifetime
 
Join Date: Jun 2018
Location: California
Posts: 7
iTrader: 0 / 0%
Default

I used the 'Contact Us' link to report to an Administrator.

The more I think about it, the fact that my other account email has never received spam before most likely means something has changed on the site to allow scraping, so I think this is a potential security/privacy issue the administrators will want to track down.
Reply With Quote
  #18  
Old 06-09-2018, 9:43 AM
Bigtwin's Avatar
Bigtwin Bigtwin is offline
Senior Member
 
Join Date: May 2010
Location: N. Cal
Posts: 2,150
iTrader: 0 / 0%
Default

As long as I've been a member of Calguns I have never received any type of spam email from here.
Reply With Quote
  #19  
Old 06-09-2018, 10:05 AM
aaronsilver aaronsilver is offline
CGN/CGSSA Contributor - Lifetime
CGN Contributor - Lifetime
 
Join Date: Jun 2018
Location: California
Posts: 7
iTrader: 0 / 0%
Default

Quote:
Originally Posted by Bigtwin View Post
As long as I've been a member of Calguns I have never received any type of spam email from here.
Yeah, you don't have an exposed email address like Powder_Keg has and I inadvertently had.

I feel like there are three options options here:
1. This setting didn't used to expose email addresses.
2. It has always exposed them, but there used to be some kind of anti-scraping to prevent harvesting for spam.
3. Nothing changed, and it's just pure luck the email address had never been harvested by a spam bot before. This just seems really unlikely to me.
Reply With Quote
  #20  
Old 06-16-2018, 3:44 PM
bigcalidave's Avatar
bigcalidave bigcalidave is offline
Pre-Banned
CGN Contributor - Lifetime
 
Join Date: Jan 2009
Location: St. George, UT
Posts: 4,814
iTrader: 32 / 100%
Default

We don't spam email, we don't sell our email lists, we don't give anyone access to our email lists.
__________________
Contact me about Advertising on Calguns.net
Marketing Director, Calguns.net
Dave Shore
NRA Life Member



Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump



All times are GMT -8. The time now is 3:27 AM.




Powered by vBulletin® Version 3.8.9
Copyright ©2000 - 2018, vBulletin Solutions, Inc.
Proudly hosted by GeoVario the Premier 2A host.
Calguns.net, the 'Calguns' name and all associated variants and logos are ® Trademark and © Copyright 2002-2018, Calguns.net an Incorporated Company All Rights Reserved.
Calguns.net and The Calguns Foundation have no affiliation and are in no way related to each other.
All opinions, statements and remarks made by Calguns.net on this web site and elsewhere are solely attributable to Calguns.net.