Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Message-ID: <20260911191635.GA6663@openwall.com>
Date: Fri, 11 Sep 2026 21:16:35 +0200
From: Solar Designer <solar@...nwall.com>
To: oss-security@...ts.openwall.com
Subject: Re: AI slops from Eve

On Fri, Sep 11, 2026 at 12:44:19PM -0400, Joe Krause wrote:
> I'm not looking for this to be posted onto the list, or to continue the
> discussion, but if it is posted, all that people need to know is that
> cock.li is a mail hosting provider that houses a lot of script kiddies, so
> almost any email coming from that domain should be treated like spam.

The moderation here is primarily by content, not by sender domain, and
there isn't a volume of undesirable messages from any particular domain
so high that we would have to resort to pre-filtering by domain.

That mail hosting provider is interesting, especially their /log.txt is
an interesting read.  They say "User count: ~1,400,000".

Much of what was posted to early security mailing lists could be said to
have been by "script kiddies" as well, yet it also contributed to making
our present security industry what it is, for better or worse.

Now major players in the industry are making serious use of AI for
security research, but also various other players are making various
uses, and it may be useful for us to see and preserve the full picture.

I don't intend to let a lot of this through to here (including not too
many opinionated postings like Joe's above or this reply of mine), but
luckily we're not even getting a lot of it sent in here.  For now, the
spike appears to be over - we had 455 messages posted in May, but fewer
than 400 in each of June, July, August, and it's further decline in
September so far.  These are post-moderation counts, so more messages
than this were sent to the list address, but excluding genuine spam not
a lot were rejected.  We'll see what's next and will adapt accordingly.

Alexander

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.