Slashdot Mirror

It appears correctly spelt on this page, what, about a billion times already? And you still can't spell it?

"Free Speach" has a long and storied history on the intarwebs. It is typically used by spammers (remember when spammers were USA citizens, be they scummy lawyers (well, scummier than most) or chickenboners) to defend their right to spam.

Or maybe it was just sarcasm doing a mach 2.5 flyby over your head. (shrug)

It appears correctly spelt on this page, what, about a billion times already? And you still can't spell it?

"Free Speach" has a long and storied history on the intarwebs. It is typically used by spammers (remember when spammers were USA citizens, be they scummy lawyers (well, scummier than most) or chickenboners) to defend their right to spam.

Or maybe it was just sarcasm doing a mach 2.5 flyby over your head. (shrug)

You are being joe-jobbed. Do not worry about it.

http://www.spamfaq.net/terminology.shtml#joe_job

3.2.22 What's a "Joe Job"?
The act of faking a spam so that it appears to be from an innocent third party, in order to damage their reputation and possibly to trick their provider into revoking their Internet access. Named after Joes.com, which was victimized in this way by a spammer some years ago.

You will not wind up on a blacklist. This is a well known phenomenon among mail admins.

--
BMO

Trouble is, the chickenboner will only be able to pay with KFC coupons...

This, sir, is a perfect example of why Slashdot needs a -1, Unfunny mod.

Trouble is, the chickenboner will only be able to pay with KFC coupons...

Joe Jobs

I agree that it will not be easy to make everyone switch at once, but that is true for many of the proposed solutions.

SPF, for instance, fights forgery, which happens to make it easier to identify the real origins of spam. Finding the real origins of spam makes it easier to make policy decisions for filtering and blocking common sources of spam.

This can easily be rolled out as needed or desired and doesn't need to be rolled out everywhere for it to start being effective right away. "Difficult" doesn't do justice to something that replaces SMTP outright.

Why do ISPs risk common carrier status?

ISPs may be considered common carriers in your locale, but the laws and regulations in the USA do not consider ISPs to be common carriers. Other locales may vary as well.

Filtering to suppress an undesirable (to them) form of traffic kinda contradicts that and would turn them more into the equivalent of a content provider.

Spam is about consent, not content.

As a result, I made a webpage against the asshole (which we'll call spamtard henceforth). Naturally, spamtard did not like the webpage, and so he kept larting it, and, as a result, the page kept being mirrored and moving all over the place. At one point, there was upwards of 20 copies of it all over the place, copies spamtard kept larting left and right.

Eventually, I received an e-mail from a mirrorer who was asked by a police detective to take down the page "or else, criminal charges will be laid". The mirrorer also made clear that the police was looking for me, and that I should contact them, or else they will supoena my ISP for my personal information and lay criminal charges (for what crime? I never learned it).

Spamtard had complained to the fuzz about my webpage when he saw that he could not have it taken off!!! And a detective was bored enough to pursue the case...

It is interesting that the police did not attempt to contact me personally at that time, but that they resorted to intimidating threats through a third party. According to my counsel, the police was doing a fishing expedition and trying to give me rope so I could hang myself.

Naturally, I DID NOT contact the police, because they have no jurisdiction over where I live, and one should never volunteer information to the police (this is basically a consent search), especially if they are investigating you.

About three months later, I (finally) received an e-mail from the police, asking me to call them, and, again threatening with criminal charges if they had to subpoena my personal information.

Again, I did not contact them. So, three weeks later, I get another e-mail saying that I should call them, because now they have my "personal" information, and if I do not do so, they would send a local cop to investigate me.

The "detective" included my "personal" information he was able to get.

It was totally wrong.

Again, I continued my intensive campaign of doing nothing at all. I suppose the poor chap who was listed as my "personal information" got harassed by the cops; hopefully, he did not cave-in to their bullshit bullying.

Worse, spamtard publicly aknowledged getting back information from the police. This meant that the police was passing back information to the criminal!!! So, if the criminal ever learned my true identity, I would be nothing but toast!!!

A few weeks afterwards, we learn on NANAE that spamtard was harassing police departments over mirrored copies of the web page! A phone conversation between the detective and an ISP operator also indicated that finally, there would be no criminal charges laid against me, because the prosecuting attorney did not think they could get a conviction.

This is very strange that I have been the target of a criminal investigation without having formally been identified nor directly contacted, and that I learn through a third party

As a result, I made a webpage against the asshole (which we'll call spamtard henceforth). Naturally, spamtard did not like the webpage, and so he kept larting it, and, as a result, the page kept being mirrored and moving all over the place. At one point, there was upwards of 20 copies of it all over the place, copies spamtard kept larting left and right.

Eventually, I received an e-mail from a mirrorer who was asked by a police detective to take down the page "or else, criminal charges will be laid". The mirrorer also made clear that the police was looking for me, and that I should contact them, or else they will supoena my ISP for my personal information and lay criminal charges (for what crime? I never learned it).

Spamtard had complained to the fuzz about my webpage when he saw that he could not have it taken off!!! And a detective was bored enough to pursue the case...

It is interesting that the police did not attempt to contact me personally at that time, but that they resorted to intimidating threats through a third party. According to my counsel, the police was doing a fishing expedition and trying to give me rope so I could hang myself.

Naturally, I DID NOT contact the police, because they have no jurisdiction over where I live, and one should never volunteer information to the police (this is basically a consent search), especially if they are investigating you.

About three months later, I (finally) received an e-mail from the police, asking me to call them, and, again threatening with criminal charges if they had to subpoena my personal information.

Again, I did not contact them. So, three weeks later, I get another e-mail saying that I should call them, because now they have my "personal" information, and if I do not do so, they would send a local cop to investigate me.

The "detective" included my "personal" information he was able to get.

It was totally wrong.

Again, I continued my intensive campaign of doing nothing at all. I suppose the poor chap who was listed as my "personal information" got harassed by the cops; hopefully, he did not cave-in to their bullshit bullying.

Worse, spamtard publicly aknowledged getting back information from the police. This meant that the police was passing back information to the criminal!!! So, if the criminal ever learned my true identity, I would be nothing but toast!!!

A few weeks afterwards, we learn on NANAE that spamtard was harassing police departments over mirrored copies of the web page! A phone conversation between the detective and an ISP operator also indicated that finally, there would be no criminal charges laid against me, because the prosecuting attorney did not think they could get a conviction.

This is very strange that I have been the target of a criminal investigation without having formally been identified nor directly contacted, and that I learn through a third party

To stop it would mean infringing on free speech

This is no suprise for people involved in the anti-spam community. It has been discussed for some time in NANAE. What is REALLY sad is that some networks really don't seem to care, or don't have the time to police against this sort of thing. When I was Joe Jobbed by one of these spam gangs, using infected machines for webservers, I reported it to RR and comcast security. They were hosting their site all-oem.biz on several obviously compromised machines AND using my e-mail address in advertisements about their company. What did I get for my trouble? E-mail after e-mail that said - "To the best of our knowledge, the incident that was the basis of your complaint was neither posted by an individual using the Road Runner (Or Comcast) system, nor is it in any way related to the Road Runner (or Comcast) system or content maintained by Road Runner." What was funny is that if you did a dig on the domain being advertised it ALWAYS contained a road runner cable modem account.

Lets try it again for a test shall we?
# host www.all-oem.biz
www.all-oem.biz is an alias for all-oem.biz.
all-oem.biz has address 217.81.243.206
all-oem.biz has address 24.98.35.54
all-oem.biz has address 212.83.89.135
all-oem.biz has address 213.33.0.67
all-oem.biz has address 24.6.6.196

And again, what do we have, 2 comcast cable modems working away trying to sell software that APPEARS to be pirated, and is advertised via spam with false headers.

Lets check the DNS shall we, the dns servers for the domain are listed as follows

Name Server:NS1.MOROZREG.BIZ
Name Server:NS2.MOROZREG.BIZ
Name Server:NS3.MOROZREG.BIZ
Name Server:NS4.MOROZREG.BIZ
Name Server:NS5.MOROZREG.BIZ

Each of these name servers is also hosted on compromised machines, mostly broadband connections. Don't take my word for it, haul out nmap and take a look for yourself. The IP's for these name servers change pretty often. At this time no road runner accounts are showing up. I give it an hour before we get a few more.

In short this is nothing new, and no one should be shocked. Spammers have shown themselves to be an unscrupulous lot. What IS good is that this is starting to get some press. Perhaps this will put pressure on providers to police their networks better. Otherwise more drastic action may be required to be taken by other networks to simply protect themselves.

AngryPeopleRule

"free speach"

No, dipshit, I'm not making this up. Here's a mental experiment, since you're obviously in denial. If you run a web site, and you accept sign-ups for a mailing list, then anyone can enter any email address. If you do not confirm that that person is in control of that email address and wants to receive your mailings, then you are sending UNSOLICITED BULK EMAIL to that person, which by anyone's definition is spam. If I enter your email address and the website doesn't confirm it, then they are spamming you. That is by definition, there is no wiggle room. If you did not ask for it, it's spam. And the question is not "Could this happen?" but "When will this happen?" If you do not practise confirmed-opt-in then you WILL have email addresses on your lists that did not want your mailings which means by definition you are a spammer.

Your complaint about "having to sign up multiple times" is complete bullshit. There is nothing about the process that would require you to sign up more than once. You enter your email, the site sends a confirmation email, you hit reply, and you are on the list. ANYTHING ELSE MAKES THAT SITE A SPAMMER.

http://www.pan-am.ca/spammyths/rants/27jul2002.htm l
http://www.cluelessmailers.org/glossary.html
http://www.spamfaq.net/spam-evils.shtml#opt_in
http://www.monkeys.com/spam-defined/
http://www.euro.cauce.org/en/optinvsoptout.html#do uble
http://www.spamresource.com/nadine/default.htm

NANAE has the C&C warning. However, I think it is your own fault when reading /. knowing full well that people try to be funny here... :-)

"Frea speach" a common term used to refer to a spammer's claim of free speech giving them the right to spam.

It is intentionally misspelled to distinguish their version from actual free speech rights.

SpamFaq

You mean like this: The place to start? :^)

Dealing in spamware is illegal in several U.S. states and European nations. By and large, spamware programs have no lawful use -- they are built to abuse open relays and proxies, fraudulently alter mail headers, and obfuscate spammed messages to make it harder for victims to track down the spammer. Spamware is not merely a "burglar's tool" useful for lawless action -- it is like a locksmithing kit specifically tailored to be excellent for burglary and no good for legitimate locksmithing, or a gun somehow built to be perfect for murder but nonfunctional for self defense.

Nevertheless, Google accepts ads for spamware -- as well as ads for other spamming services. Google today carries advertisements and thereby accepts sponsorship from dealers in network abuse. Given the real and present danger that spamming poses to the usefulness of the email facility, and the amount of time and money that today's Internet-using businesses and people spend defending themselves from this form of theft -- how can Google justify accepting this sponsorship?

The bone of contention is that ...

Would that be a chicken bone?

Sig: What Happened To The Censorware Project (censorware.org)

People signing up for newsletters and mailing lists that they never subscribed to has been a major source of frustration for both users and the list owners.

If Klez happens to send an e-mail "from" a user to an e-mail list's automatic subscribe address, the list software assumes the e-mail is a valid subscription request and begins sending mail to the user.

Sig: What Happened To The Censorware Project (censorware.org)

orbl isn't active anymore, see the NANAE FAQ. The ORBZ in that FAQ is ORB UK, not the ORBZ that was recently shut down.