Slashdot Mirror


Russian Minister Gets Spammed, Spams Back

elhim writes "According to an article in the Moscow Times: 'Spammers last week got on the wrong side of the wrong man, and quickly found themselves with a taste of their own medicine. The man? Deputy Communications Minister Andrei Korotkov. Tired of the endless spate of unsolicited messages that clog e-mail systems everywhere, [Korotkov and others devised] ...an audio message to be volleyed nonstop to the telephone numbers listed in the... [email] spam messages.' Sometimes Russia reminds me of the Wild West."

72 of 406 comments (clear)

  1. Spam by LCookie · · Score: 2, Interesting

    Oh well I did the same multiple times.. Spamming back is a viable alternative to getting angry I think.. Plus it hits the spammers where it hurts them most...

    1. Re:Spam by Picon · · Score: 2, Interesting

      Well if i was a Spammer and i get "Spam back attack", i will modify my "viable command return address" into the attacker address. Say for one day or two days.

      Of course it is a loss of money, but an efficient way to fight against "Spam back attack" :)

      But i'm not a Spammer :P

    2. Re:Spam by i+chose+quality · · Score: 3, Funny

      i prefer a roll of toilet paper. write "please hold the line..." on the first paper. then, if it is almost through, tape the first to the last paper...

      :)
      revenge is sweet...

      --
      the computer is online
      i am not at it
      what a waste of ressources
    3. Re:Spam by Lord+Dimwit+Flathead · · Score: 5, Informative

      It probably doesn't make a huge difference these days, as most spam seems to be HTML email embedded with webbugs (1x1 image tag pointing at a logging script) so they know your address is valid as soon as you open the email if your client renders HTML. It's still a good idea not to reply, but it's a better idea not to open it in the first place.

      In this case though, the article was about calling phone numbers listed in the spam, which if nothing else, at least increases the cost of doing business for the spammer. I'd imagine the parent poster was talking about the same, as email replies aren't likely to impose much of a burden on the spammer. It's a lot cheaper to glance at an email and hit shift-delete than to have an inbound phone circuit and operator tied up while somebody rants at them about the evils of spam.

    4. Re:Spam by ShadowBlasko · · Score: 2, Funny

      "i prefer a roll of toilet paper. write "please hold the line..." on the first paper. then, if it is almost through, tape the first to the last paper..."

      Not bad, although I prefer to use a ribbon made of BLACK paper. As long as I am going to annoy the fax spammer, I am going to eat up as much toner/ink as I possibly can along with his paper.

      Just a thought.

      Shadow

      --
      There are 4 boxes to use in the defense of liberty: soap, ballot, jury, ammo. Use in that order- Ed Howdershelt Via Tass
  2. So the numbers is real? by dizzy_p · · Score: 5, Funny

    I've always thought everything was bogus.

    I'll order the penis enlargement pills right away.

    --dpr

    --
    --larsw
    1. Re:So the numbers is real? by gerddie · · Score: 4, Funny
  3. Phone numbers? by minghe · · Score: 5, Funny

    First of all. A spam message with real, working means of contacting the sender? Why din't I ever get that? Only in Russia, I say.

    And second, that guy is hereby my god.

    --
    ...um...like...a sig...
    1. Re:Phone numbers? by Anonymous Coward · · Score: 4, Informative

      What is the point in advertising a language course, putting a phone number in the message for interested people to call, and then put in a fake number?

      A spam message that attempts to start a transaction usually includes some way to contact the sender (or at least, the one that wants his product advertised). This is a lead to stop the spam by abusing it.

    2. Re:Phone numbers? by Anonymous Coward · · Score: 5, Informative

      1. That **ing American English Center send out its REAL phone numbers. It's Runet's curse for months now - all civilized attempts to get them down failed. They change mails everyday writing something like 'Tsent rAmerican sko goAngliy skogo' instead of 'Tsentr Americanskogo Angliyskogo' or 'Amer icanEngli shCen ter' to get the filters fooled.

      Still I don't expect broken windows, masked armed men in their office and Militia (our local police) officers showing them a prescription to 'clean out' from there... It is a dream of almost everybody here, but it is not going real any day.

      And their management which is 'very far, too far from here to get phone calls' - these people seem to be just insane i-net villains, striving not for business, but to 'show these Russian swines' who is the king of the hill around.

      2. Read the article more accurately: even Andrey Korotkov had to confirm: that resounding measure didn't bring much good. God or not, but the problem remains.

    3. Re:Phone numbers? by AndroidCat · · Score: 5, Funny
      Miscrosoft could send out porn spam and put Mozilla's phone number

      So by getting a huge number of people angry enough to call (or wanting to buy) this would be an .. MS-DDOS .. ?

      --
      One line blog. I hear that they're called Twitters now.
  4. Wrong Number? by Mooncaller · · Score: 4, Funny
    Just hope the numbers in the email are correct!

    BTW, Russia had its wild east. While we had our mountain man era, the Russian had theirs, except they were going in the other direction. The parellels continue untill the turn of the century!

  5. Spam must contain a real contact method by jurasource · · Score: 5, Interesting

    Otherwise it would be totally useless right?

    Sure the from address is generally bogus, to skip past the basic anti spam methods out there, but something in the email must contain a valid phone number, web site, or address, otherwise how would the spammers make any money (and I suppose they must as they don't do it just to piss everyone off)

    1. Re:Spam must contain a real contact method by BiggerIsBetter · · Score: 5, Informative

      Yes and no. Spam almost never contains valid automatible contact information for the Spammer, but the Advertiser absolutely has to have some way of being contacted. It's hard work chasing spammers, so there's my usual anti-spam technique - piss off as many "Spammer Customers" as I can. I appear to have been removed from spam lists several times just for hassling a few CEOs...

      --
      Forget thrust, drag, lift and weight. Airplanes fly because of money.
    2. Re:Spam must contain a real contact method by iapetus · · Score: 4, Funny

      Of course, if I were a spammer, I wouldn't remove you from the list. I'd just move your contact details to the Reply-To: header. :)

      --
      ++ Say to Elrond "Hello.".
      Elrond says "No.". Elrond gives you some lunch.
    3. Re:Spam must contain a real contact method by cookd · · Score: 2, Insightful

      Only if the point is to sell the advertised product. Not all spam need be so direct.

      For example: CALL 1-800-SOMEBODY-THE-SPAMMER-HATES AND WE WILL GIVE YOU FREE MONEY!!!!!!!!!!

      So people start calling some random business's 1-800 number demanding their free money or complaining about the spam. Phone bill goes through the roof, legit calls get DOS'ed, and the spammer might actually be able to put some small company out of business.

      I'm sure the more creative among you could come up with even more fun scenarios than this. But let's not give anybody any ideas, eh?

      --
      Time flies like an arrow. Fruit flies like a banana.
  6. Go on, say it by darnok · · Score: 4, Funny

    OK, I will

    Phone rings: "Let this be a warning to you: in Soviet Russia, spam *recipient* drives you crazy"

    Hang up

    Phone rings...

  7. Beware the Joe-Job by The+Famous+Brett+Wat · · Score: 4, Insightful
    Turnabout is fair-play. I used to make a point of phoning one of the local well-known-spammers when feeling particularly irate about him (usually just after getting spammed about the same old same-old again). Haven't heard from him in a while, though. In any case, I want to emphasise that you should be careful when you retaliate. There is such a thing as a Joe-Job (named after joes.com) in which a malicious third party sends out a metric buttload of spam claiming to be from you, and advertising your website, just in an attempt to cause shit for you. This relies, in part, on third parties taking retaliatory action. My own website has been the subject of numerous Joe-Jobs this year, strangely enough. So make sure you aren't hitting back at an innocent bystander.

    Oh, and in Soviet Russia, the punchline inserts you. Sorry, but it had to be said.

    --
    proof, n. A demonstration that a conclusion is implied by certain premises and axioms.
    1. Re:Beware the Joe-Job by afidel · · Score: 5, Interesting

      Sounds like on of my pranks from the BBS days, when someone would piss me off I would post an ad for a hot car at an unbelievable price on all the local BBS's and put down their phone number and contact hours of like 1am-4am, then I would go to the stores that had index card ad boards and do the same =)

      --
      There are 4 boxes to use in the defense of liberty: soap, ballot, jury, ammo. Use in that order. Starting now.
    2. Re:Beware the Joe-Job by Pig+Hogger · · Score: 2, Funny
      If the spammer choses to retaliate, they could find themselves on the recieving end of some policemen that figure it is ok to beat the fuck out of a suspect.
      IN SOVIET RUSSIA...

      suspects fuck the shit out of the beat.

  8. The Group Against Harmful Programs by mccalli · · Score: 4, Funny
    Now this I like the sound of. From the article:
    "With the brainstorming help of the Group Against Harmful Programs...".

    The Group Against Harmful Programs. Wonderful. Sort of like the Fantastic Four, or the X-Men. Sounds like the sort of thing Tron would belong to. "That's Tron, he fights for the users under the banner of the Group Against Harmful Programs"...

    Cheers,
    Ian

    1. Re:The Group Against Harmful Programs by gclef · · Score: 2, Funny

      So, what, they don't use GOTO?

  9. IN SOVIET RUSSIA by Jucius+Maximus · · Score: 5, Funny
    ... victims spam YOU!

    Please let me be the first one to have said that ...

  10. Entertaining, yes. by aerojad · · Score: 2, Interesting

    It really is too bad that there continues to be no legal recourse to fight spam though. An arms race of annoyance between spammers and spam-ees probably wouldn't be the best solution though, but something does have to be done eventually. It would be nice to go back to having one e-mail address instead of various "spam" addresses and then my personal e-mail... which of course still gets spam.

    --

    SecondPageMedia - Wha
    1. Re:Entertaining, yes. by johannesg · · Score: 2, Interesting
      It is true there is no legal recourse *yet*, but we now know beyond doubt that a highly placed russian government official is aware of the problem. This raises the hope that a law against spam could be in the works too.

      Of course, being the russian government, they do have other options, like sending in the special forces for example. It wouldn't have to cost them anything - spammers are not likely to fight back, and I'm sure people would pay to see footage of a swarm of Hinds obliterating a spammers hideout ;-)

  11. China? by Jucius+Maximus · · Score: 5, Informative
    "..an audio message to be volleyed nonstop to the telephone numbers listed in the... [email] spam messages.' "

    Wasn't there an article some months ago about something simimlar happenning in china? 'Entrepreneurs' would illegally put up advertisements (i.e. posters) all over the place where you have to phone a number to get the product. (Typically these would be mobile phone numbers that were prepaid so there was no name on the account.)

    The law enformenet officials would leave an endless loop of messages on tht moble's answering machine that they must turn themselves in and such. I doubt that they actually expected anyone to turn themselves in, but it made all those posters with the number on them useless and thus discouraged putting them up in the first place.

    I wonder if this russian fellow was inspired by that action.

  12. Logarithms suck by lovebyte · · Score: 4, Funny

    From the article:
    Spammers have ways to get around anti-spam filters, he said, but it's possible to collect patterns from their e-mails and block certain logarithms.

    What's the point? They will use polynoms! Oh.. I guess they meant algorithms.

    --

    I'll do it for cheesy poofs.

  13. The biggest cost to them is toll free fax by FredThompson · · Score: 5, Interesting

    At one time I had a small software company. We outsourced all the phone and fax messages since we didn't have people to work 24/7/365.

    One of the things I learned is an incoming toll-free fax cost me a lot more than a voice call because a single page fax was completed very quickly and the charge was per call/per page.

    So...if you're getting hit with crap like junk faxes, fax it back to them on their toll-free fax number about 30 times.

    It took about a month of this but I don't get lots of junk fax anymore, except for the a**holes that block caller ID and don't list a number to get off their list.

    Another fun trick was to use a standard fax machine with a continuous loop of paper. Let that baby run for about 10-15 minutes and you'll create a lot of clutter on the receiver's end.

    1. Re:The biggest cost to them is toll free fax by dspisak · · Score: 4, Informative

      If you have 800 number service for any phone number when you get your bill from the telco it will list all of the phone numbers of the people who called your 800 number, even people with Caller ID blocked as the phone company *must* tell you the phone number of everyone using your 800 number services.

      Pretty neat, eh?

    2. Re:The biggest cost to them is toll free fax by psavo · · Score: 3, Insightful

      Another fun trick was to use a standard fax machine with a continuous loop of paper. Let that baby run for about 10-15 minutes and you'll create a lot of clutter on the receiver's end.

      Like somebody is still using paper faxes.

      --
      fucktard is a tenderhearted description
  14. Gulag Archipelago by AtariAmarok · · Score: 4, Funny

    If there ever was a group of people that should be sent to the Gulag, it's spammers.

    --
    Don't blame Durga. I voted for Centauri.
  15. Make $$$ fast by Anonymous Coward · · Score: 4, Funny
    A smart spammer would be using 0900 numbers... Make
    • me
    money fast!!! Just call 0900-555-555 (calls cost $9.99 per minute, children/ministers please ask your parents/president first)
  16. Top 6 Russian Spams by AtariAmarok · · Score: 4, Funny

    6. Ukrainian farm girls and animals. free web membership

    5. Enlarge your putin today!

    4. If you order today, you get a free Russian space shuttle

    3. Free Vacation in Chechnya, Enlist today!

    2. Out of work Russian comedian, will work for food. E-mail yakov@smirnov.com

    1. Meet beautiful American wives!

    --
    Don't blame Durga. I voted for Centauri.
  17. This is a Public Service Announcement by tankdilla · · Score: 5, Funny

    For those of you new to Slashdot and fellow veteran Slashdotters, this is a PSA. As we all know there are many running jokes around here, i.e. the CowboyNeal option, 1. stupid action 2. ??? 3. Profit, beowulf clusters of everything, insensitive clod, and of course the most recently added SCO jokes, as well as many others I'm forgetting. By far, one of the most annoying of the running gags is IN SOVIET RUSSIA! Being that this story is about Russia, be warned that a veritable slew of IN SOVIET RUSSIA jokes follow this post. Any and everyone has come out of the woodworks with bat in hand for the communal beating of a dead horse. So for those with bats, swing away, today is your day. For the rest of us, strap in and enjoy the bumpy ride of redundancy.

    --

    -Look lively. LOOK LIVELY!!! --Mr. Shmallow

  18. I once tried something similar by Sara+Chan · · Score: 5, Interesting
    I once tried something similar. I got the telephone number, which turned out to be in Uzbekistan. Then I set up my fax program to repeatedly dial the number, whenever I wasn't using the phone line for the internet. Thus, every time they answered the phone in Uzbekistan, they got a fax machine trying to get through--hence effectively disabling their phone line. And because this was in a different country, they couldn't trace me.

    I didn't worry about the cost of the calls, because the people in Uzbekistan soon figured out that the calls were almost all faxes. I reckoned that even if they picked the phone up 10 times a day (to check to see if I'd stopped), it was worth the cost. Calls are only charged when they pick up the phone, right? So I let this go on for over a month.

    Then I got my telephone bill. It was in the thousands. It turns out that there are three countries in the world where, if you phone there, you get charged even if no one answers the phone. And Uzbekistan is one of those countries!

    I didn't know about that, and I complained to the phone company about the bill. But my case seemed weak because I was, it's fair to say, abusing the phone system. The phone company ended up splitting the bill in half, and I paid the rest.

    I don't know if my attempts had any long-term effect on those nice folks in Uzbekistan. But at least I tried.

    1. Re:I once tried something similar by Anonymous Coward · · Score: 4, Funny

      Little did you know that the spammer was the Uzbekistan phone company.

  19. UK Spam by jbrw · · Score: 5, Interesting

    Two days ago I got a spam from a local (London, UK) company trying to get me to go to their event. It had a 378Kb attachment to it. Thanks.

    The kicker was that the disclaimer said it was impossible to unsubscribe, as it was a carefully crafted one-time mailing list. I imagine i'll be on all future carefully crafted one-time mailing lists for them in the future too.

    The email was sent with a from line of "[something]@noreply.com" or similar (which breaches their ISPs AUP), and if I was to contact them via their email address listed on their website, by their logic i'd have contacted them, thus allowing them to continue to spam me (since we'd then have an existing relationship).

    So - best course of action? The Advertising Standards Authority, whose standards they ahve breached, seems to be a toothless tiger set up by the industry to pay lip-service to the general public (any ruling against an advertiser seems to result in a ruling of "we advised them to contact us in future before undertaking a similar campaign"). I'm not aware of any specific legislation to stop this (although i'd like to know where they got my email address from. Should I unleash the Data Protection Act?).

    So, what's the best way to hit back? Complain to the ISP? File an ultimatetly useless complaint to the ASA? What?

    1. Re:UK Spam by MythMoth · · Score: 5, Funny

      If there's a phone number, then leaflet all of the phone boxes in the Kings Cross area with it advertising their "services"...

      D.

      --
      --- These are not words: wierd, genious, rediculous
    2. Re:UK Spam by Rogerborg · · Score: 4, Interesting

      Give the ASA a try. They bitchslapped Telewest for me for repeatedly "forgetting" that I'd unsubscribed from their spam. The response was rapid, but they were fairly clueless - I sent full plain text headers, and they got back to me asking what the recipient email address was. D'oh.

      Best case, I never get spam from Telewest again. Middle case, they spam me again and I get to find out what the ASA does to repeat offenders. Worst case, I get the spam, the ASA does nothing, but at least I get to piss off them by forwarding the spam. I have a vague hope that swamping the ASA with UK spam might get the problem addressed.

      I don't believe that contacting someone to tell them to cease and desist constitutes having a business relationship. I'm sure that J. Random Spammer would assert otherwise, but you do need a record of telling them to get lost. What have you got to lose?

      --
      If you were blocking sigs, you wouldn't have to read this.
    3. Re:UK Spam by hawthorne · · Score: 2, Insightful
      All of the above

      First, complain to their ISP. State clearly in the complaint that their customer is sending unsolicited email, and have not had your permission to mail them. If they are advertising a website hosted by a different ISP then complain to that ISP too.

      According to the DPA, they need to have obtained your consent in order to process your data - ask the ISP if they can obtain that proof for you.

      Second, post a copy to news.admin.net-abuse.sightings so evidence of their spammishness will be archived for all time.

      Thirdly, complain to the information commissioner's office (DPA head)

      Incidentally, if their ISP (or indeed the spammer) responds with something like 'you have been unsubscribed' then that means that your original complaint has been passed to the spammer - and that is where the information commissioner's office is likely to get very interested as they are passing your details between businesses with no permission to do so - so complain again about that!

  20. Don't spam the people in power.... by dspisak · · Score: 2, Funny

    for they find annoying people & problems crunchy and rather tasty.

    In Soviet Russia, spam spams you back!

  21. At last by fatquack · · Score: 3, Insightful

    a minister who reads his email. If more politicians read their own email (and not a hapless assistant) the problem of spam would be evident to them and antispam legislation would be nearer.
    And yes, I know legislation is not the sole solution, but legislation plus technical solutions is the best bet in my opinion.

  22. Re:Wild West - not quite by trikberg · · Score: 4, Funny

    Very disappointing really. I was

    - praying for "shock and awe".
    - hoping for bunker busters.
    - expecting at least a few tanks.
    - prepared to be slightly dissapointed by a few snipers.

    But phone messages? Sheesh. Russia just isn't what it used to be.

    --
    This post is free (as in cheese in a mousetrap).
  23. Since when is sci-fi defined by films? by SubliminalLove · · Score: 5, Funny

    In Soviet Russia, the dead horse beats you.

  24. In Soviet Russia by Rogerborg · · Score: 5, Insightful

    Just shut the fuck up, already. It wasn't funny six months ago, it's not funny now.

    --
    If you were blocking sigs, you wouldn't have to read this.
  25. In Soviet Russia... by poptones · · Score: 5, Funny

    we already ate the horse - and we don't HAVE bats, you insensitive clod!

  26. Now before everybody goes doing this... by Pflipp · · Score: 2, Informative

    ...remember that there are some (lots of) spams out there that make money on the price-per-minute of the phone line you're trying to flood!

    --
    "We can confirm that Debian does *not* ship the version with the trojan horse. Our version predates it." [CA-2002-28]
  27. Re:Russian Rules of the Game by Anonymous Coward · · Score: 5, Funny

    Very arrogant putting Russia among the communistic dictator countries it is a democratic country with free elections just as US.

    Very arrogant to put the US among democratic and free countries such as Russia.

  28. Hit them in the pocket. by aaaurgh · · Score: 5, Interesting

    I recently got on the mailing list of a surf company in Sydney, I've no idea how since I'm in Perth and can't surf (Ex-pom).

    I started receiving almost weekly newsletters and updates and, despite numerous phone calls and e-mails with the usual promises to comply, I just couldn't get off the list... then they sent the 2.5 Mb Word document, you know the type!

    I e-mailed back and told them that they'd filled up my e-mail account and caused me to miss some important e-mails, plus cost me time and money due to the download costs. I advised them that, as they were now affecting my business, I'd be invoicing them $25+GST administration fee for each and every e-mail I received from then on and that if they didn't pay, I'd hand the account to a debt collection agency - one that takes a cut of the recovery value.

    I cautioned them that it would not concern me if I received nothing from the agency but that such action could affect their credit rating. What a surprise(!), I've received nothing since.

    If you can justify charging a fee to the spammer for administration or storage or anything like that, sufficient to stand up reasonably in a small claims court, then you should threaten to invoice the spammer and use a debt collection agency - it just might work for you too.

    --

    Go permanent? In your dreams and my worst nightmares.
  29. Go for the source by zornorph · · Score: 5, Interesting

    This is the avenue we should be pursuing when trying to stop spam. Instead of trying to stop the spammers themselves, go after the source (advertiser) instead. If enough advertisers are convinced/shamed/etc that spamming is a bad thing, they will go elsewhere to get their message out, and the spammers will magically disappear.

    --
    http://bike.stu.ph/rides - free GPS routes available for Garmin, Magellan, GPX and Google Earth
  30. Exploit! by skinfitz · · Score: 2, Interesting

    ...cut to spammers setting up premium rate numbers to put in their SPAM messages in the hope that people will spam them back by calling them all the time.

  31. Wild West by Wordsmith · · Score: 2, Funny

    Was there a lot of spam in the wild west?

  32. SETI-style spammer bamming by G4from128k · · Score: 5, Interesting

    How about an open source software project that creates a piece of software that attacks spammers using a SETI-style approach. Using spare bandwidth and CPU time, the software would repeatedly send requests to the links found in spam.

    Repeatedly loading the homepage of some spam-spawning viagra sales site would hurt the viagra sales company. Companies that advertize with spam would find their bandwidth charges skyrocketing and their conversion rates plummetting. The key is to create disincentives for the e-commerce sites that try to flog their products and services using spam. While spammers can be anonymous, the e-commerce sites that use spam to get eyeballs need more permanence. Eventually, these companies would even penalize the 3rd-party spam sending companies for using email lists that generate too many spurious requests or that have low conversion rates (the spammer's pay drops if they send emails that lead to long streams of spurious requests).

    --
    Two wrongs don't make a right, but three lefts do.
    1. Re:SETI-style spammer bamming by mangu · · Score: 2, Interesting
      However, such a concerted effort to melt a webserver is actually a crime.


      Why is that? If the spammer sends you a link to his site, it means that he wants you to see his site, right? Why would it be illegal to click in a link someone sent to you? Even if you click a million times, there isn't any legal limit on how many times you can access a site, is there?

    2. Re:SETI-style spammer bamming by theskipper · · Score: 2, Informative

      A few months ago I was ready to open up a project based on a variation of this method but decided not to. The reason was simply that there didn't seem to be a bulletproof way for the action to *not* be interpreted as an attack from the legal/moral perspective. Yeah, in most cases the vendors are only slightly less scummier than the spammers but an acceptable solution would need to take the high road to be used widely enough.

      In any case, here's the thought process I (and probably lots of others) have gone through so maybe others could clean it up and iron out the wrinkles.

      It seems that one could make the method acceptible by framing the app as a way to increase traffic to the target sites. i.e. an app+site that's sole purpose is drive traffic to the vendors under the guise of a push directory for lack of a better term.

      Outline mode:

      - Application is a standalone executable with an embedded browser which downloads a number of "Sites of the Day" from (let's say) www.iluvspam.com.

      - The "Sites of the Day" are the freshest sites gleaned from an inbox and *provably* spammed. All headers are saved and dropped emails documented. Or maybe couple it with a voting scheme for "most valuable products" at the iluvspam site. Obviously, there's lots of ironing need here to meet the high road philosophy.

      - If you're really interested in making your penis larger and don't want to miss out on any late breaking penis enlargement breakthroughs, set default reload (with nocache of course) for every 30 seconds. This seems fair because if a stunning breakthrough is posted then its likely that they'd sell out of it that quickly.

      - Or to be really sure that you're catching the latest breakthroughs for all of the fantastic products being offered by spam, the app auto scrolls through the list of sites and reload each.

      - The application shouldn't be run as a transparent background service. Remember, its purpose is to serve as a useful tool for users to become aware of important products by reaching the sites. Otherwise it is simply a program the eats bandwidth with no other plausible purpose. So the purposes is no different than searching Yahoo and clicking on the URLs to those sites. Of course the value added feature is that it's better because it goes a step farther by reloading them so you always get fresh information on the products being offered.

      - Allow disabling of the (default) auto reload setting. There might be some vendors who would complain about getting so much interest in their product so it's only fair to offer a way to disable reloading their site.

      - The Sites of the day could be set for daily download. The link provided would need to be scrubbed to a raw url.

      There are a number of other considerations and all of this is just a "cute" way of justifying a (insert more appropriate term than DOS here) attack. But what kept my interest in this scheme is that it could be rationalized and all it would take is 100k slashdotters running it to bring a majority of spam product sites to a halt.

      Not to mention that the code would be simple and transparent; a few lines of cross platform code that could be trusted since it it's open source.

      Of course the problem is that www.iluvspam.com would most likely be DOSed by some script kiddies hired by the larger spammers. Also, the maintainer of the iluvspam server will be the target of any legal mortars lobbed at them. Getting around that problem is left as an exercise for the reader :)

    3. Re:SETI-style spammer bamming by BigBadBri · · Score: 3, Funny
      I can see the defence lawyer now -

      Your Honour, my client was so excited by the prospect of increased penis girth that he inadvertently leant on his 'F5' key while reading the plaintiff's web page.

      --
      oh brave new world, that has such people in it!
  33. Turnaround is fair play: SQL injection by TheMidget · · Score: 5, Interesting
    Another method of turnaround: Sql injection!

    It's crazy how many spam websites are running on IIS with .asp scripts (or even better: .aspx!) as a frontend, and Microsoft Sequel Server as a backend .

    Just type a spare single quote into the "remove me from your list" box, and watch as parts of the SQL query are displayed. Experiment a bit, and transform this into a query that clears the entire subscribers list, or that changes their spam messages to something funny, or that keeps the subscriber list but replaces all e-mail addresses by their own whois contact (or better: their upstream provider's whois..), etc.

    For starters, the following string often removes the entire list when entered into the remove me box:

    ' or '' = '

    (that's two single quotes between the or and the = sign).

    If the site has an "affiliate program" (look around a bit...), the same string entered as a user name into the affiliate programme's login box might let you in, with a little bit of luck. If not, try the following instead (again, there are only single quotes in the string, no double quotes):

    ' or ''='' or ''='

    If it still doesn't help, try to repeat the same string in the password box.

    If still not ok, you may need to use a union statement:

    x' union all select top 1 null,null,null from sysobjects;--
    Start with one null, and keep adding more until the "parameter number mismatch" error disappears. Patience may be needed, certain login scripts require more than 40 nulls! Then start replacing the nulls with your desired password string, and attempt to find a combination which doesn't give you a type mismatch error.

    Example:

    x' union all select 'zozo', null, 'zozo', null

    Then enter zozo into the password box. With a little bit of luck, this method may let you in.

    Once you're in, you've access to the affiliate's (i.e., the spammer's) account:

    • home address: always nice for a baseball bat expedition, or to pull an Alan Ralsky on the spammer.
    • phone number: on your way to work, give your friend a call! One from each phone booth that you encounter! Write the number on bathroom stalls! Post it to slashdot!
    • bank account number: well, just change it to your own!
    • website URL: change it to you know what
    • social security number: post it to as much places as you can
    • ...
    The benefit of such actions is twofold: not only does it teach the spammer not to spam, but it also tells him that Windows (and especially aspx + Sequel Sewer) is not a very secure technology.

    Have fun!

    1. Re:Turnaround is fair play: SQL injection by Kalak · · Score: 3, Insightful

      An Insightful goatse - I'm impressed. It didn't really offend me in this context. I even expected it coming in the cotext you set up, and I'd love to add a "funny" on it for the punchline. Nice website defacement idea.

      Too bad screwing with their database technically illegal, since the database is an "asset" for the company. The injection you propose would hurt their asset. You might be removing addresses that opted in (yeah, right).

      I wouldn't try this at home, kids.

      --
      I am, and always will be, an idiot. Karma: Coma (mostly effected by .hack)
    2. Re:Turnaround is fair play: SQL injection by TheMidget · · Score: 3, Interesting
      As long as the webmaster has an ounce of brain,

      You forgot that we are talking about spammers here. And Windows administrators. Neither of which are known for their smartness.

      they have most likely configured their server to automatically replace a single quote (') in a query string with two single quotes (''),

      You'd have a case if that was a PHP server. By default, PHP escapes all input (i.e. ' is replaced with \'), which pretty much defeats most of such attacks. However, if there are some places where the web-app expects numbers (such as affiliate id's) it may still be vulnerable (no need to close a quote to slip SQL code into a number).

      which will escape it to MSSQL server.

      With ASP, the admin has to specifically set up his rig to do this escaping. With PHP, it is the default setting. However, an admin dumb enough to run sequel sewer in the first place would probably not even know about the issue.

      Which means no matter how many single quotes you type, you won't be able to doctor the query. Sorry.

      Try it out. Just search for aspx news.admin.net-abuse.sightings on google groups and try out the links. Sort by date, or you'll find that most spams are too old and the site already has been closed. Or if you are in the habit of keeping your spam, just search your own collection for .aspx links. You'd be astonished at how many of these the SQL injection works! (I'd say one out of 3). However, for some weird reason, probability of success is much higher for .aspx than it is for .asp (For .asp it indeed takes quite a bit of patience to find anything worthwhile...)

  34. A person could really start some trouble by kmilani2134 · · Score: 4, Funny

    Wondering what would happen if you spammed this Russian politician and placed the number for the White House or some other important number in the body of the spam. I bet George W. would like it if the Russians were spamming his office. :)

    --
    Those who trade freedom for security will lose both, and deserve neither" -- Ben Franklin
    1. Re:A person could really start some trouble by suwain_2 · · Score: 2, Funny

      The next day, he "discovers" that Russia's buying some nukes from Niger... :)

      --
      ________________________________________________
      suwain_2 :: quality slashdot p
    2. Re:A person could really start some trouble by shaldannon · · Score: 2, Funny

      Given Russia's present economic condition, I think you meant to use the word "selling" :)

      --


      What is your Slash Rating?
  35. Not always by AndroidCat · · Score: 4, Insightful
    The exception to the rule are pump'n'dump spammers. They push the virtues of some penny stock in hopes that some suckers will buy, pushing up the price. Then when the stock hits a peak, they unload their stock (profit!) and let the suckers take the fall.

    For that, they don't need a contact method.

    --
    One line blog. I hear that they're called Twitters now.
  36. Cowboy Baby by mr_luc · · Score: 3, Insightful

    The turn of the century SUCKED.

    It marked the death of the frontier. (I know, blah blah Indians were there first, but the population density was never that great and there were always massive sections of uninhabited land). The remaining frontiers are largely closed to the ordinary man, and are unlikely to ever be truly opened again to the point where you can just go somewhere, stake off a chunk of land, and just LIVE there, and have it be LEGAL.

    I know, I know. Progress. We live 1.6 times as long, that's a good thing. Diseases can be treated better.

    But, still . . . the death of the frontier marked the inability for a man to be physically independent. Now our lives are played out within the boundaries of 'The System', while our freedom must exist only in our minds.

    cue matrix analogies.

  37. Re:Give this a guy a medal by BrokenHalo · · Score: 4, Interesting
    What middle-east spammers? I don't recall *ever* having had spam mail from a middle-eastern IP (with the rare exception of Israel).

    To date, my stats indicate that 98.3% of the spam I get originates from the US.

  38. Easy Money by donutello · · Score: 3, Insightful

    1. Set up 1-900 number.
    2. Spam Russian minister.
    3. Profit.

    Ha!

    --
    Mmmm.. Donuts
  39. Finally a "Profit" plan with no "?" step! by Animus+Howard · · Score: 2, Funny

    1) Change your phone number to a 976 number, where the caller is automatically charged $49.95 just for connecting.

    2) Spam the Russian Deputy Communications Minister.

    3) Allow the Russian Deputy Communications Minister to tie up your phones for several days.

    4) Profit!!!


    P.S. In Russia, spam profits YOU!

  40. Choice Quotes by Bugmaster · · Score: 2, Insightful
    "I want to warn you that if you continue your illegal activity, then the necessary measures will be taken not just by me," the Korotkov voice intoned, after giving his name and ministerial affiliation."
    As for how Korotkov's message was received by the language center's staff, Petrova said, "That question is for the management, who are not available." In fact, they were "very far away, too far away to receive phone calls," she said...
    Remember folks: this is Russia, where the leaders of the country are also the biggest crime lords. The spammers did the right thing when they suddenly became "very far away". If you're too far away to receive phone calls, you are also too far away to receive "necessary measures", such as a bullet to the head.

    This may sound cool and exotic, but it's actually pretty sad... Westerns are only fun to watch, they are not fun to live in. Especially when the robber gangs grow to the size of entire cities.

    --
    >|<*:=
  41. Blocking Logarithms, eh? by EvilStickMan · · Score: 2, Funny

    "Spammers have ways to get around anti-spam filters, he said, but it's possible to collect patterns from their e-mails and block certain logarithms."

    Yes, how dare those spammers try to calculate the correct power of a number. I'm surprised that so many spammers use the same kind of mathematical equation in their e-mail....

  42. There is no place like localhost by Mr.+Arbusto · · Score: 2, Interesting

    I've always filled in my address as root@127.0.0.1

    Damn people using Microsoft

  43. Fight fire with fire? by DaveTibet · · Score: 2, Interesting

    The fun part is that while spam is technically legal in Russia, flooding somebody's phone number isn't, and is classified as a minor criminal offense.

    On the other hand, the American Language Center is THE evil spammer of the .RU net and completely deserves such treatment. Their spam volleys are regular, annoying, and use all sorts of clever tricks to circumvent spam filters. By contrast, a lot of russian-originated spam (at least spam that I receive) is very business-oriented and largely contains honest-to-God offers to sell you tires, or electric cable or some other commodity, or seminar invitations; stuff you wouldn't show to your kids is extremely uncommon.

    In fact, more than once incoming spam had left me thinking that had I been involved in commerce, I'd probably even react to those offers.

  44. my revenge stories by menscher · · Score: 2, Insightful
    Once got an (800) number. Told my computer there was a BBS at the other end. Then left for the day. It probably dialed them a few thousand times.

    Also once ordered toner cartriges. Got a shipment worth $400 or so sent out to a university (and told them to bill us for it).

    The trick to dealing with spammers is that everyone has to respond to the ads. If everyone responds, they'll never be able to filter the legitimate responses from those of us who are making up fake info because we're pissed.