On Wed, 20 Dec 2006 14:38:10 EST, Jeff Kiesel said:
> It's internal, it should be OK.  It still just feels wrong though...

Famous last words. :)

A while ago, we had a list of about 3,000 people (all internal, mostly
students).  It was set to *one* person being able to post to it.  And then
a worm came along, scraping addresses to put in the From and To fields.

And at least 40 or 50 times, on a dozen different machines, the worm found the
listname, stuck it in the To:, found the one authorized person, stuck that in
the From:, and it's off to the races.  (Of course, the dozen source machines
were all used by subscribers, so they had postings lying around that had the
person and list in From:/To:, ready to be scraped...)