Yamaha DTXpress/DTXplorer/DTXtreme

To All:

Somebody has figured out how to hack into this group. A new member 
joined today and posted an inappropriate file to the files section. 
This member was still classified as being "moderated", which means 
their posts must be approved by myself, Vern or Ed. File was removed, 
the poster was removed and banned.

I receive emails when new members join, when members quit and when 
members (moderated or unmoderated) make posts of any kind to this 
group. 

I did not recieve any email when this person joined. I did not 
recieve an email notifying me of a moderated post that was pending 
either. I just got the email saying a file had been added to the 
files area.

Ed, since you are the official owner of the group, it might be better 
if you emailed Yahoo about this violation of TOS about this poster.

This is just a warning to all members, that if somebody really wants 
to get in, there is always a way. If this is a sign of what is to 
come, Ed/Vern, we may have to consider moderating who joins and not 
just the first posts of new members.

OGD

--- In DTXpress@yahoogroups.com, "oldguydrummer" <rdamon@m...> wrote:
> To All:
> I did not recieve any email when this person joined. I did not 
> recieve an email notifying me of a moderated post that was pending 
> either. I just got the email saying a file had been added to the 
> files area.

OGD,

Was it jugilicura9917? I got the notice of membership and of the file 
posting. The file was gone when I got there. I didn't find him/her/it 
listed as a member. I'll check again.

Ed

Ed, yes that's the one. Since you got it, that's good news, that part of the
system is still secured. When did you get notification of them joining? 
You said you got the notice of them joining, did you also get a notice of a
moderated post pending. The question is now is this a loop hole in the
system. That even though someone can't post initially without being
moderated, they can still upload into the files/photos area??

I was at the keyboard with it came through and was able to delete it within
seconds of it being posted. When I checked to see when they had joined and
it was today, I then trashed and burned the member.

OGD

> -----Original Message-----
> From:	liberatusvirus [SMTP:liberatusvirus@...]
> Sent:	Wednesday, November 12, 2003 4:34 PM
> To:	DTXpress@yahoogroups.com
> Subject:	[DTXpress] Re: Posting to Dtxpress Group
> 
> --- In DTXpress@yahoogroups.com, "oldguydrummer" <rdamon@m...> wrote:
> > To All:
> > I did not recieve any email when this person joined. I did not 
> > recieve an email notifying me of a moderated post that was pending 
> > either. I just got the email saying a file had been added to the 
> > files area.
> 
> OGD,
> 
> Was it jugilicura9917? I got the notice of membership and of the file 
> posting. The file was gone when I got there. I didn't find him/her/it 
> listed as a member. I'll check again.
> 
> Ed
> 
> 
> 
> Yahoo! Groups Sponsor	 
> ADVERTISEMENT
> Click to learn more...
> <http://rd.yahoo.com/SIG=12ciuescn/M=243273.4156324.5364586.1261774/D=egro
> upweb/S=1705031972:HM/EXP=1068759270/A=1750744/R=0/*http://servedby.advert
> ising.com/click/site=552006/bnum=1068672870632241>	
>  
> <http://us.adserver.yahoo.com/l?M=243273.4156324.5364586.1261774/D=egroupm
> ail/S=:HM/A=1750744/rand=508663890>	
> 
> Community email addresses:
>    Post message: DTXpress@yahoogroups.com
>    Subscribe:     DTXpress-subscribe@yahoogroups.com
>    Unsubscribe:   DTXpress-unsubscribe@yahoogroups.com
>    List owner:    DTXpress-owner@yahoogroups.com
> 
> Shortcut URL to this page:
>    <http://groups.yahoo.com/group/DTXpress>
> 
> Alternate DTXpress site:
>    <http://www.dtxpressions.com> 
> 
> Your use of Yahoo! Groups is subject to the Yahoo! Terms of Service
> <http://docs.yahoo.com/info/terms/>. 
> ________________________________________________________________________
> This email has been scanned for all viruses by the MessageLabs Email
> Security System. For more information on a proactive email security
> service working around the clock, around the globe, visit
> <http://www.messagelabs.com>
> ________________________________________________________________________
> 
 
**************************************************************************
The information transmitted herewith is sensitive information intended only
for use to the individual or entity to which it is addressed. If the reader
of this message is not the intended recipient, you are hereby notified that
any review, retransmission, dissemination, distribution, copying or other
use of, or taking of any action in reliance upon, this information is
strictly prohibited. If you have received this communication in error,
please contact the sender and delete the material from your computer.

________________________________________________________________________
This email has been scanned for all viruses by the MessageLabs Email
Security System. For more information on a proactive email security
service working around the clock, around the globe, visit
http://www.messagelabs.com
________________________________________________________________________

--- In DTXpress@yahoogroups.com, rdamon@m... wrote:
> The question is now is this a loop hole in the
> system. That even though someone can't post initially without being
> moderated, they can still upload into the files/photos area??

Unfortunately, the answer seems to be "yes." I can't find anything in 
our management utilities that can keep moderated members from 
uploading files--until we check the box in the member's profile area 
to restrict it, and there may be a lag time between joining and 
actually showing up on the roster (is there?). The only foolproof 
recourse would be to restrict membership, but things would have to 
get much worse for us to do that(and we could always reverse it 
later). Not many files will get past all three of us, and if one did 
for while, not too many people would see it. Did I miss anything?

Ed