Slashdot Mirror


Spammers Using Students as Relays

Zendar writes "idg has an article about how students at the 151-year-old Tufts University were paid as little as $20/month to relay spam from computers in their dorms. Interestingly enough, the students approached the spammers about this scheme and not vice-versa."

14 of 450 comments (clear)

  1. Hey, they have bandwidth... by Anonymous Coward · · Score: 2, Insightful

    And time to waste... and fewer inhibitions (amazing how college does that!)... so it's pretty easy to understand and believe. Oh well, most schools would yank your access for the rest of your time there. Not really worth $20/mo to me.

  2. When I was in college... by billmaly · · Score: 2, Insightful

    $20 a month was serious money. That's one week of clean laundry and GOOD pizza on Sunday night (and not the cheap stuff). Back then, $20 a month would have bought a lot of personal ethics. Can't say as I blame them.

  3. Re:Crappy Student Jobs by Pxtl · · Score: 4, Insightful

    Or got jobs as telemarketers (hell, most universities even run extensive official telemarketing systems to harass alumni for donations). If you're willing to telemarket, I don't see why you wouldn't be willing to spam. Sure its less money, but its also less work.

  4. Can we say expulsion? by www.sorehands.com · · Score: 3, Insightful
    Let see, a kid sets up a computer to steal on the college network. If the student hacked in the the dean's computer to get porn, it would be all over the news, the kid would be arrested.


    The kid should be charged the same as the person who put the distributed decryption software, that was all over the news, and expelled.

  5. Re:Tracked using MAC address by sirwired · · Score: 2, Insightful

    No, they probably don't keep track of the MAC's students are using, but it is relatively trivial to ask a managed hub or switch which MAC's are one which port, ergo, which room the offender occupies.

  6. AUP? by redneck_kiwi · · Score: 3, Insightful

    Doesn't the IT Department at any college, university etc enforce their AUP? Doh! They don't have an AUP.....

    Seriously, I would imagine that surely the IT Department has an AUP that would prevent this behavior along with appropriate actions for dealing with violators?

  7. Spam is worth something by OECD · · Score: 3, Insightful

    The interesting thing is that the spammers are now paying people to put out their spam. Now each outgoing spam costs something above the overhead costs. Sure, it's something really tiny ($20/??) but it's not zero. I wonder what the price point is that spammers are willing to pay? Would schemes that would charge spammers for their spam really be a deterent? How much would you have to charge?

    --
    One man's -1 Flamebait is another man's +5 Funny.
  8. Re:Students selling information by igaborf · · Score: 3, Insightful

    That's one possibility. Another is that someone just built a spam list by Googling the domain man.ac.uk:

    http://www.google.com/search?q=cb%40cs.man.ac.uk

    Moral: Put your email address ANYWHERE on the 'Net and you'll get spam.

  9. Why [insert deity here] Why? by korny69 · · Score: 5, Insightful
    What I do not understand is why don't they just block all incoming traffic to the dorms and labs? Why is it that they allow for this traffic to even make it to the PC in the first place?

    Frank Grewe, manager of Internet services for the University of Minnesota in Minneapolis-St. Paul, also wasn't surprised. He says the university does not let client machines be used as servers, employs static IP addresses and tracks the amount of traffic going to and from those addresses.

    Why track ... just do not allow it in the first place and it will be a whole lot easier. I just do not see a reason in allowing inbound traffic to a static IP address on a campus unless it is a server owned (no pun intended) and operated by the staff. When you allow anyone and everyone to do as they please, all hell will break lose.

    I can see the point of some PCs and not others, but it should always be a special case when a PC needs access to it from the outside. This is how most corporate companies run their network. I just do not understand why in most cases all I have to do is 'host -l -t any uni-net.edu' and get a list of hosts to look at and forward my spam on from.

    As for the out-sourcing of CS to someone else, I would have to disagree, because it is incidents like this that usually teach people. And when they go on to the corporate world, hopefully, they will remember that they need to lock their network down . It teaches fundamentals, and in this industry, unlike a lot of others and what a lot of corporate big-heads think, it is experience more than education that counts in the long run.

    --

    The biggest security hole sits between the keyboard and chair.
    -Andrew McAllister

    1. Re:Why [insert deity here] Why? by ftobin · · Score: 3, Insightful

      Jeez, what an awful road to go down. The very idea that you cannot be a participant in the internet, and provide your own services, is abhorrent. There should be no problem with a student having his own webserver, mail server (as long as it's not an open relay), finger server, or whatever. Solve problems with specific solutions, not these broad, sweeping, castrating ones.

      The way of thinking that you suggest, that only "powers that be" may provide services, promotes consumerism, and prohibits the freedom of individuals.

      Your suggestions are antithetical to the very principles that the net was built on, end-to-end.

  10. Re:The School is very liberal..this isn't surprisi by rhizome · · Score: 3, Insightful

    The kids are entrepreneurs, even if it's in a business I despise, taking advantage of the resources they've paid for.

    Are we supposed to believe that university network resources are completely supported by tuition? I would venture (though in typical Slashdot fashion I have no numbers) that there's a certain amount of taxpayer money involved. Furthermore, it's very common for end-user bandwidth agreements to include a clause prohibiting the resale of any portion of a connection.

    --
    When I was a kid, we only had one Darth.
  11. Re:They got bought cheap! by FunWithHeadlines · · Score: 3, Insightful
    "Let me guess, you were the arsehole who had the porche parked in the school lot."

    Bzzzt! Wrong, try again.

    "Did you see the old beat up Ford Escort with a different color fender, no muffler, and a broken windshield?"

    Ding! Ding! Ding! We've got a winner! That would have been me.

    "The guy that owned the Escort (and I know him well) would have sold his self-respect for a tuna-freakin-fish sandwich. That guy had LESS than $20/mo for food, toiletries, and beer. You wouldn't survive a week in that guys shoes. $20/mo means another case of mac-n-cheese."

    No excuse. You find other ways of making money rather than blatantly leeching off society and contributing to a problem that is despised. If you sell out for a price, regardless of circumstances, it means you sold out. Some people hold their integrity in high esteem and will find some other way to make the necessary money.
    -------

  12. Re:They got bought cheap! by Valdrax · · Score: 4, Insightful

    Let me guess, you were the arsehole who had the porche parked in the school lot. Did you see the old beat up Ford Escort with a different color fender, no muffler, and a broken windshield? The guy that owned the Escort (and I know him well) would have sold his self-respect for a tuna-freakin-fish sandwich. That guy had LESS than $20/mo for food, toiletries, and beer. You wouldn't survive a week in that guys shoes. $20/mo means another case of mac-n-cheese.

    Well, gee, that excuses everything! I see the light now! After that guy broke into my friend's apartment last year and stole all his electronics, I should've excused him too because he was jobless and living in government housing! After all, I "wouldn't have survived a week in that guy's shoes," now would I?

    You know what I did in college when I needed money? I got a freaking job; that's what I did. I spent my days sitting at a desk in a computer lab checking student IDs for $5/hour. I didn't throw in with parasites to get by.

    Those students did sell themselves cheap. They could've gotten a real job, but instead they decided to let the bottom-feeders of the Internet take advantage of university resources so that they could get a small token sum of money without having to do a damn thing. They whored themselves out probably because they were too damn lazy to actually try to hold down a part time job while in school. As someone who worked for my food, I have absolutely no sympathy for them. They should be kicked out of housing and maybe even expelled for abusing the university network at the expense of others.

    --
    If it's for-profit but free, you're not the customer -- you're the product (e.g., the Slashdot Beta's "audience").
  13. Re:Hmm by Patrick13 · · Score: 4, Insightful

    The one guy I know making $30k a year doing spam

    Yeah, but don't forget that according to the article this guy sold his Uni access for $20/month - that doesn't add up very many pizzas or beers.

    My guess is that guy should have sold his connection for more like $200 - $500 per month, or based on the # of mails or something. $20/month is laughable, considering that he now most likely has been forbidden to connect to the University's network with his personal machine and may have some sort of procedural punishment on his University records.

    --
    ::.. check out some Cell Phone Reviews