¿ªÔÆÌåÓý

Date

Re: Suspicious file attachment in pending messages section #spam

 

On 4/20/19 2:44 AM, Rob Gordon wrote:
I was hoping someone knew of a tool where this could be safely downloaded and checked.
It could be something innocent, like a PGP signature.

Anyway, download it to a Linux box, and extract the file.

Linux, not Windows. Malware operators default to Windows, unless they
know that their target exclusively uses Mac or Linux. For a mailing
list, the assumption is that the users will be on Windows.

There are a couple of AV programs that run on Linux, specifically to
look for malware targetting Windows.
I have no idea what the name of the AV software is, or even if it is any
good.

I've got a sacrificial Linux box with WINE installed, to run suspicious
files on. Most malware for Windows does a crash and burn under WINE, but
usually leaves enough evidence to indicate what it was attempting to do.
I also run tripwire, which tells me what was installed, and where it was
installed.tripwire

jonathon


Re: Suspicious file attachment in pending messages section #spam

 

Thank you - I did, of course, know that I could write and ask, but I was hoping someone knew of a tool where this could be safely downloaded and checked.? ?


Re: How does a new INVITED member set a password?

 

vandy,

"When I go to log in, it asks me to sign up, or log in if I am already
a member. I believe I am so I went to log in. ...
Correct so far.

There it asked for my email and password. I have not had any
opportunity to create or enter a password.
It also offered a link "Forgot your password, or don't have one yet?" and a button "Email me a link to log in".

Short answer: do either one.

More detail:
/g/GroupManagersForum/wiki/Logging-In

Even more detail (including a screen shot of the Log In page):
/g/GroupManagersForum/wiki/Logging-in-and-How-to-Set-a-Personal-Password

Feel free to pass along those links, GMF's wiki is public so your members can read it without logging in.

Shal



--
Help: /static/help
More Help: /g/GroupManagersForum/wiki
Even More Help: Search button at the top of Messages list


Re: Foto Phustration

 

Ken,

Now you¡¯re about 10 feet above my head. Not sure exactly (or even a
lower standard) what you¡¯re saying.
I've just encountered a missing photo in GMF's wiki. In that case it was one that I put there as a screen shot. I captured the screenshot in Firefox using its built-in Take a Screenshot function. I've done that with a lot of screenshots in the wiki (and in messages).

The key "mistake" I made with that one was uploading the screenshot so that I could edit it (blacked out an email address). After saving it I copy and pasted to the wiki edit box as normal. But instead of transferring the image file to Groups.io for storage, for reasons I don't fully understand what I pasted turned out to be a remote reference to the image stored wherever Firefox stores such things.

Alas, that storage is temporary; when my screenshot expired from their storage it became the empty box on the wiki page. Broken link.

So, I just replaced the image. This time I downloaded it to my computer and edited it there. So now I'm confident that the paste operation copied the image file over to Groups.io's server, as there would be no other place (on the web) it could be stored.

Does this belong in a BUG report?
Yes, I think.

Groups.io could detect that case (remote image storage) and automatically download and store the image file for you. Then it wouldn't spontaneously vanish.

Or maybe there needs to be a storage option for wiki images.

There is sometimes a reason to use remotely referenced images intentionally - that way the image files don't count against your group's storage quota. But that also requires that you trust the site where you're keeping the image file to keep it and serve it up reliably.

I've often used my (Pro) Flickr account to host images for me; as that is a use case specifically allowed and supported by them (or was before Smugmug bought them, I may have to check on that).

Before this topic I would have said "no" - the user who pastes in a remote image wants it to be remote. But this Firefox feature makes it way too easy to do that by mistake. So in a "least astonishment" world, automatically storing the image at Groups.io now seems to me the most sensible approach.

Shal


--
Help: /static/help
More Help: /g/GroupManagersForum/wiki
Even More Help: Search button at the top of Messages list


Re: Suspicious file attachment in pending messages section #spam

 

Rob,

Yes, it is in the unapproved messages, however it is from an
influential but obscure local public agency with the signature of a
high-level staff member so I don't want to delete.
Well, if you can wait a few days maybe give that person a phone call to verify that they sent the message, and what is in it. I don't know about your situation, but given the name of an agency and a person it should be possible to get through to them.

Or, since you feel it is likely to be legit, copy their name and email address from the pending message and send them an email thanking them and asking for details. You don't have to tip your hand that you were initially suspicious. After confirmation you can approve the message.

If your group has other moderators you might want to start and then cancel an edit to the message. That will "claim" the message in your name so that they will get a warning message if they try to approve it.

Is there no way to check?
Again depending on your level of confidence, you might go ahead and download it. Depending on the security settings and software you have it may get checked during download or when you open it.

Would it even get on groups.io servers if it had a virus? I thought
they also checked.
They do, and IIRC if a threat were detected the message wouldn't even have made it to your Pending list.

Nevertheless, I tend to be paranoid about out-of-the-blue messages bearing "gifts". With all the new threats out there I'm never entirely sure that my antivirus is up to date enough, even when it says it is.

Shal


--
Help: /static/help
More Help: /g/GroupManagersForum/wiki
Even More Help: Search button at the top of Messages list


Re: Suspicious file attachment in pending messages section #spam

 

Yes, it is in the unapproved messages, however it is from an influential but obscure local public agency with the signature of a high-level staff member so I don't want to delete.? Is there no way to check?? Would it even get on groups.io servers if it had a virus?? I thought they also checked.?


How does a new INVITED member set a password?

 

I've been searching through the archives here, but not finding a real answer yet. Our group transferred here a short while ago, with all the existing members, and I haven't invited many new people yet. But today I invited someone and they say
"When I go to log in, it asks me to sign up, or log in if I am already a member. I believe I am so I went to log in. There it asked for my email and password. I have not had any opportunity to create or enter a password.
Help!"
?I'm not quite sure how to advise them.
They show up as a member to me, when I check the members list. So it's obviously worked that far...
?What now?
?? Thanks, vandy


Re: Tweaking the message footers for one's group . . .

 

Rob,

?
Just thinking out loud, that may be a good place to put the hashtags for the group.
?
That could get burdensome, unless you keep a tight rein on how many hashtags your group has.
?
?
I have been having a hard time figuring out how to communicate that.? ?
?
Maybe a reminder, with a link to the Hashtags page?
(using the address of your group rather than GMF, of course)
?
?
Does the new header section appear above or below the one we can't change?
?
In the middle of. See GMF's wiki page about footers for examples.
?
Shal
?

--
Help: /static/help
More Help: /g/GroupManagersForum/wiki
Even More Help: Search button at the top of Messages list


Re: Suspicious file attachment in pending messages section #spam

 

Rob,


I just received a post from a seldom-used group with an attachment that looks suspicious.

Do you mean a Message Approval Needed notification?

There is no file description and the message just asked people to look at the attached summary and even the title of the post is a little strange.

That hits my "don't touch that" buttons. Particularly given the implication that you don't know the sender well and were not expecting a message of that sort.

Is your group set to allow posts from non-subscribers?

However, there is a signature on the message from an obscure government agency that seems authentic and is the exact kind of person I am trying to attract to this community, so if it is a virus someone went to some effort to create the message.??

The bad guys are often very clever. They'll start with a copy of a legit communication (from an agency or company) to make their message look legit.


Is there a way to check this file?? It is sitting unapproved on Groups.io servers and I am afraid to download it and of course, I don't want to approve and send to everybody.? Any suggestions?

I would trust your suspicions and delete the pending message without downloading the attachment. I probably wouldn't even bother attempting to contact the sender - anyone sending me an attached file in their first communication with me is probably up to no good.

Shal

--
Help: /static/help
More Help: /g/GroupManagersForum/wiki
Even More Help: Search button at the top of Messages list


Re: Tweaking the message footers for one's group . . .

 

Just thinking out loud, that may be a good place to put the hashtags for the group.? I have been having a hard time figuring out how to communicate that.? ?Does the new header section appear above or below the one we can't change?


Suspicious file attachment in pending messages section #spam

 

I just received a post from a seldom-used group with an attachment that looks suspicious.? ?There is no file description and the message just asked people to look at the attached summary and even the title of the post is a little strange.? However, there is a signature on the message from an obscure government agency that seems authentic and is the exact kind of person I am trying to attract to this community, so if it is a virus someone went to some effort to create the message.??

Is there a way to check this file?? It is sitting unapproved on Groups.io servers and I am afraid to download it and of course, I don't want to approve and send to everybody.? Any suggestions?

Rob


Re: emails to group instead of sender #issue

 
Edited

Ouch.

If I had a nightmare based on this topic (and the many like it) it would be this:

Particularly that first setting: how to annoy everyone you know.

And just for the record:



Shal
--
Help: /static/help
More Help: /g/GroupManagersForum/wiki
Even More Help: Search button at the top of Messages list


Re: Changing group owners #groupowner #howto

Brian Vogel
 

On Fri, Apr 19, 2019 at 07:08 PM, Shal Farley wrote:
Was it the location of the control (the need to open the member's page from the Members list)? Or the purpose of the Role option on that page?
Both of the above, as well as "in what order would one need to do this to effect a transfer" (though I can figure this out).

Instructions such as:

1.? Under the current owner's account, go to Admin->Members and search for the account to which you wish to grant a role (owner, moderator) or specific privilege and open the account profile.

2. For the Role dropdown, open it and chose the role you are assigning to that member.? For ownership transfer, or adding a co-owner, that would be Owner.

3. Review any other profile settings and set those you wish to.? Afterward, be certain to hit the Save button at the bottom of the page.

4. If ownership is being transferred, go to your own account profile and chose the Role you wish to take on other than Owner.? Once this choice has been made, hit the Save button.? After hitting the Save button, you only have the privileges associated with the Role you chose.? You cannot change yourself back to Owner unless your choice of role was Moderator, and the Moderator role has the Set Moderator Privileges attribute associated with it.

. . . make everything crystal clear as far as I'm concerned from start to finish and covering the most common switches in Role.
?
--

Brian?-?Windows 10 Pro, 64-Bit, Version 1809, Build 17763??

? ? ?Those who cannot remember the past are condemned to repeat it.

? ? ? ? ? ? ? ?~ George Santayana


Re: Changing group owners #groupowner #howto

 

Brian,


Let's not get into semantic hair splitting.? What is under discussion is FORMAL documentation, the lack thereof, and the patchwork nature of what is available for Groups.io, ...

I'm not trying to split hairs, I simply don't understand what you mean by "patchwork nature". As far as I'm aware the entirety of the formal documentation for Groups.io exists on one page, the Help page.

?
it's a bad situation all around.

That's true, and I'm certainly not going to defend the status quo as being adequate. I think I was pretty clear in agreeing with you that Groups.io's decision to create something they're willing to call a manual is A Good Thing.

But, back to your original point at the start of your message.? I can assure you, in my case, it wasn't the terminology that was confusing.? I know that a group can have multiple owners and moderators and that as far as ownership goes it can be reassigned, broadened, or removed.? ?It is just in no way intuitively obvious how to do it.

I'll simply take your word on that. My prior experience with Yahoo Groups makes it impossible for me to see Groups.io's pages through the eyes of someone not steeped in that background.

I am curious what initially eluded you. Was it the location of the control (the need to open the member's page from the Members list)? Or the purpose of the Role option on that page? Or something else? I'm not asking to pick at you, but for my understanding (and possible wiki explanation).

Shal


--
Help: /static/help
More Help: /g/GroupManagersForum/wiki
Even More Help: Search button at the top of Messages list


Re: Changing group owners #groupowner #howto

Brian Vogel
 

On Fri, Apr 19, 2019 at 02:21 PM, Shal Farley wrote:
I disagree. It may not be a reasonable substitute for formal documentation, but the world isn't reasonable (resources are always constrained) so crowd-sourced documentation, informal though it may be, is both a reasonable and logical accommodation to that reality.
Shal,

? ? ? ? ? ? Let's not get into semantic hair splitting.? What is under discussion is FORMAL documentation, the lack thereof, and the patchwork nature of what is available for Groups.io, it's a bad situation all around.? It's not even something that can be called formal documentation due to its fragmentation and "lack of index" for the neophyte to even navigate to the correct place.

? ? ? ? ? ? And that's no reflection on the quality of information once one finds it or is directed to it.? The huge problem is the decentralized, fragmented arrangement of the available information.

? ? ? ? ? ? But, back to your original point at the start of your message.? I can assure you, in my case, it wasn't the terminology that was confusing.? I know that a group can have multiple owners and moderators and that as far as ownership goes it can be reassigned, broadened, or removed.? ?It is just in no way intuitively obvious how to do it.? And I have said, repeatedly, that for any complex system the very concept that most things are or can be "intuitively obvious" is fraught.? Decades as a developer taught me that what is "intuitively obvious" to one person may be entirely opaque to another, even when said individuals do not have completely divergent skill sets or professional (or avocational) experience.

? ? ? ? ? ? ? That's why formal documentation is necessary, and best written such that it's an "area by area/function by function" reference where, to the maximum extent possible, those functions are discussed in an encapsulated manner where you don't have to read thirty additional sections unless that's really necessary.? This is much like the documentation (at least the electronic version) for tearing down a laptop.? ?Most of the steps give direct reference to the detailed step-by-step instructions that one can click through to if one is utterly unfamiliar.? Otherwise, that sometimes complex set of steps can be expressed as a single phrase for those who already know how to do it.
?
--

Brian?-?Windows 10 Pro, 64-Bit, Version 1809, Build 17763??

? ? ?Those who cannot remember the past are condemned to repeat it.

? ? ? ? ? ? ? ?~ George Santayana


Re: Changing group owners #groupowner #howto

 

Terry, here's a screenshot that I hope will help.? Take a look, and let us know if any questions.

Jonathan B.??


Re: Changing group owners #groupowner #howto

 

Brian,

?
While the actions may be simple, finding them is not, or it sure is *&%$ not for me, and I'm a "digger."?
?
Perhaps part of the problem you and others have had was that the semantics of "changing the owner" or "transferring ownership" puts one on the wrong foot for spotting the capability. There isn't a "the" owner, nor is there a single function to "transfer" the role from one person to another. There is just the Role option in each member's page (from the Members list).
?
You're not the first and undoubtedly won't be the last to have missed that function. Moderators coming in from Yahoo Groups tend to see it as "obvious" because that system has the very same Role mechanism, but that doesn't mean that it is obvious..
?
I'm not entirely certain how to improve matters, in this case or in the more general case of? a mismatch between a user's mental model and the system's design. Such mismatches are a common impediment to discoverability, in both the live system and the formal documentation. It is difficult for a developer or a tech writer to even imagine the set of all users' initial (naive, in the non-derogatory sense) mental models.
?
As a point solution to this question, it sounds like the Member Management subheading in GMF's wiki could use an item named "Change or Transfer Ownership", together with a backing page.
?
Having to run around to various group wikis, including the one for this on, is no reasonable or logical way to create formal documentation.?
?
I disagree. It may not be a reasonable substitute for formal documentation, but the world isn't reasonable (resources are always constrained) so crowd-sourced documentation, informal though it may be, is both a reasonable and logical accommodation to that reality.
?
I'm glad that Mark is finally getting to the stage where he thinks things are stable enough, and the service mature enough, to do what mature services do.
?
Agreed. I'm eager to see how, and how soon, this unfolds.
?
I've no idea what form the new manual will take (presumably not the traditional paper-bound tome), but I expect that GMF's wiki will continue to be a valuable resource, even as some of its content is replaced by citations to the new primary source material.
?
?
Shal
?

--
Help: /static/help
More Help: /g/GroupManagersForum/wiki
Even More Help: Search button at the top of Messages list


Re: Changing group owners #groupowner #howto

Brian Vogel
 

Bruce,

? ? ? ? ? ? The only argument I have with what you said is characterizing Groups.io as being in beta testing in any sense of that word that was ever used in my decades as a developer.? ?This platform has been stable, very stable, for quite a while now and additional feature requests being added, sometimes rapidly.? That does not make the whole enterprise "beta" by any means.

? ? ? ? ? ? ?I also doubt that the beta group name will ever change.? ?It, like so many other things in this world, will become an anachronism that remains because those that use it know it's history and name.

? ? ? ? ? ? ?The beta group is the last thing I'd use in determining whether or not a given piece of software such as Groups.io is actually in beta testing.? It isn't (at least not as a whole).

--

Brian?-?Windows 10 Pro, 64-Bit, Version 1809, Build 17763??

? ? ?Those who cannot remember the past are condemned to repeat it.

? ? ? ? ? ? ? ?~ George Santayana


Re: Changing group owners #groupowner #howto

 

I think Mark would be the first to admit that groups.io site documentation has failed to keep pace with feature development. This is largely because the entire groups.io site is still in the beta phase...that's why we still have a "beta group." Those of us who rely on groups.io for day-to-day use too easily lose sight of that.

I'm hoping that as both site documentation and the groups.io app near completion, we will exit the beta phase and things will subsequently be rolled out in a more coordinated (if slower) fashion. Meanwhile, we are indebted to those who have taken their own time and energy to create and maintain GMF wiki entries. I'm sure those will be a valuable resource for the technical writer, at least initially.

Regards,
Bruce
--
The system Help is your friend.??/static/help


Re: Locking a topic by e-mail: Is this possible?

 

On Fri, Apr 19, 2019 at 11:21 AM, Brian Vogel wrote:
This makes me wonder whether a group owner or moderator can lock a topic via e-mail.?
This functionality does not currently exist.?

Regards,
Bruce
--
The system Help is your friend.??/static/help