Where Is Spam When You Want It?
Sean writes "In a complete twist to what everybody else is trying to do these days, I need to attract spam to an e-mail address for a research survey I am conducting. I have submitted a few articles to a handful of Usenet groups, and I have signed up to some general mailing lists but so far I have nothing to show for it. How come by personal account gets 100+ spam each day yet when I try to find it I get nothing? Where should I post my address so that it attracts spam?"
I ran an experiment to do just this... Originally USENET (a decade ago I did that one), web pages, etc... Hundreds of trap address' across many of the domains in my control -- harvest and block 'em early has been my general method... :)
I recently took 1 Windows 2K box (SP2) and put it directly online in the DMZ type zone. Do NOT patch it and add no virus software. Load some trap address' (never used before) into the Outlook address book.
It took twelve (12) minutes from plugging it in to getting many, many infections, to the final spam. Typical time is 3-4 hours usually and I've seen the test go for as long as 8 hours.
How many people do you know that use Outlook and may have your email in their address book? The bitch of the matter? No Windows here anywhere, well, except for VirtualPC which makes such tests so damn easy -- too bad Microsoft had to buy them up too...
But why don't you just use your personal email address in that case?
Sign up for an account there, forward the spam to your new mailbox and start following links to advertisements and such. If they ask for your email address, give it to them. Won't take long.
Register with every "reputable" company with a "privacy policy" you can find, and make purchases with them. Register a domain with the addy. Put the addy on tons of those little fill out cards that you have to mail in from magazines for free this, free that. Buy subscriptions to tons of Pr0n sites with the addy. Instead of usenet, post on several pay or exclusive product-support forums, where spam-runners can be assured of sure-fire hits. Damn! It's expensive to acquire SPAM!
If you really want to get spam, just sign up for a few "free" porn web sites. That should do it fairly quickly.
main(O){10<putchar((O--,102-((O&4)*16| (31&60>>5*(O&3)))))&&main(2+ O);}
LN2 is cool!
Me as well as other slashdotters will send you some of ours. We don't want it (I hope).
Try signing up for a few mailing lists for marketers. Usually they will sell these to other companies who will in turn sell it to other companies and so on. Most email addresses are not spammed by having it available on google but rather giving it to the companies that do the spamming.
I get spam from my domain registry, which has an email associated with it. I get the Nigerian stuff this way.
You want spam? You should have put in your email address into the submitted article...
I had to get on some spam lists for an experiment as well. I signed up for everything you could imagine and recieve less spam on that account than my other accounts.
Just put your email adress in a lot of those 'get free pr0n pictures every day!' Works wonders. I heard.
sign up for those "free porn in your email" things.
works every time.
Want to get lots of spam? Just post your email here, this place gets crawled all the time.
For even better results get an editor to add it to the story on the front page.
If Murphy's Law can go wrong, it will.
We all know that the Spam won't show up if you want it. That's against the very nature of spam.
All annoying things always happen every time except for the one time you try and prove the phenomenon to a non-beliver. Well known fact.
Good luck at finding the spam (wow, I never thought I'd have say that.)
Make an ebay account with your email address in it and just start bidding. This is an excellent way to ruin an otherwise perfectly good email address. I was doing all right on the spam front until I did this. Big whoops. *hits head on desk* Yeah, stupid me.
You'll quickly become inundated with "How-tos" to Ebay, "official" emails from Ubid by people attempting to fraudulently gain access to your personal information, more tips-and-tricks, more offers from uBid, and of course a plethora of marvelous online drugstore advertisements.
Enjoy.
Seems like there's more than a few people suggesting signing up with free porn sites to get spam.
Personal experience?
also try porn sites, gambling sites, and more importantly, paste it on slashdot. My spam trap address here gets hit ALL the time, usually several times a day, which has helped me greatly in tuning my firewall.
Lawyers, MBA's, RIAA? A jedi fears not these things!
If you deliberately bait spam, your research will only be about spam as it effects bait e-mail accounts. Your conclusions won't be applicable to normal e-mail use habits.
Want to survey spam as it effects a normal, real-life, daily-use e-mail address? Get a new address and starting using it as your primary account. Anything less will be irrelevant statistics.
www.spam.com
you should've posted your job there. That would've got you in top 10.
just kidding. on offense intended
if you want spam you just need to get a hotmail account.
New year Resolution: Don't change sig this year
Give it to some of your friends and relatives, soon you'll recieve 20 or so joke chain letters every day...
Seriously, search for porn sites and sign for their "free pics every day" lists. Err... at least that's what I heard about. Not that I sign for such lists...
Disclaimer: If I disagree with you I'm probably trolling...
in Austin. The registrar will give your e-mail address to all who ask, including merchants who must promise not to resell your e-mail address.
And that promise isn't worth the paper it is printed on.
(you can of course choose to opt out of the official directory, but this prevents _any_ of your information from being available, which is unacceptable for some)
Contact me at the email address on ddent.net -- I have a domain that has accumulated over 200 megabytes of spam in a matter of days.
SSL Certificate
In your own inbox, get a couple of hundreds of spam.
.....
Take the urls (DO NOT CLICK ON THEM) and strip them of the stuff after the '?'
Go to each of those 'unsibscribe' pages and put the test account in the email to be removed box.
Its the best way to get spam. The spammers will generally use it as confirmation that your address does indeed exist, and theyll happily put you in their alive list, where you are shure to get everything they are selling.
I was in the exact same situation, actually, and found spamarchive.org to be very helpful. Any one of the files on their ftp site should have enough spam to keep you busy for a while.
"(Man) tries to live his own life as if he were telling a story. But you have to choose: live or tell." --Sartre
Why not just download some from spam archive?
find a bunch of pr0n sites and sign up there you will be all set. After you get a couple of spam just start replying to them asking to be taken off their list this should get you on a bunch of other lists.
Send an email to the unsubscribe address listed in spam that you've received on a different email account.
-
"Vengeance is fine," sayeth the Lord.
Based on a friend's suggestion, I created an alternate e-mail address and used it to create user IDs on classmates.com and match.com and, sure enough, until I kill the ID months later, I was getting 30+ spams a day after my ISP was done with its own filtering. I wasn't being very scientific and I don't know if it was one or the other or both, but it's a place to start...
"I'm a scientist! I don't think, I observe!" - Dr. Clayton Forrester
- Post a comment on Slashdot with the e-mail address visible
- If on a popular e-mail provider such as AOL, Hotmail, or Yahoo, put up a profile and go to a chat room.
- Allow your e-mail address to be listed on any of the directories.
- Put your e-mail on a Geocities website.
1) Use a screenname that's a name and then a number like bob123 or andy78.
2) Register for things at places like AOL and MSN. I have no proof that they sell out their customers, but my experiences with both are strong indications.
I think that's all I have for now.
Esoteric reference.
Post your email address (plaintext, not obfuscated) on as many websites (the more popular the better) as you can. You may have to wait a while for the address harvesters to go by. It will come ...
New research shows spam no longer a problem!
I think your best bet for simulating spam would be to give the account to a 14-16 year old kid for a week or two. One of the types that plays stupid games and talks to their friends on messaging programs all the time. They drop their email addresses all the time without really thinking about it.
Sign up for a Yahoo! Games account using the address.
I opened a fully new email account (at hotmail) just to sign up there (I didn't use the address anywhere else) and a week later I was receiving about 20-30 (!) spam mails daily.
parasight.de
Just sign up for a make-money fast pyramid scheme. You will get plenty of opt-in crap within days of signing up. This isn't a subtle thing: You apply, You open the floodgates with one simple reply to these jackasses. Try this clicky. Then apply to a few of the douche-deals they vomit your way.
Put it on a web page which gets any moderate amount of traffic. I did that with some spam-bait addresses, and it's amazing how much they generate. In a few months, they've identified over 22,000 unique servers sending spam.
steve
Oh, you're not stuck, you're just unable to let go of the onion rings.
Take some spam with an 'opt-out' option from another address and 'opt-out' from the target address. That should add you to spam lists quickly as spammers will have confirmation of 'a live one' e-mail address!
You can have some of mine... In fact you can have all of it.
"Research Survey" = getting back at evil ex-girlfriend.
If you give the the adress I will forward ALL the e-amil to my domnain and you will reciece about 300+ spam's a day
http://Lenny.com
Some links of the sweet, sweet google:
Here
Again
And Again
If you search for 'contests' and click on the sponsored link then you should have an abundant source. Also, if you sign up for a few of those "Free" trials at porno websites, you should start to get some serious spam.
Go hang out in chat rooms (like Yahoo chat, that's a big one), and post your e-mail there. Bots will get your e-mail. Also, I'm sure posting on yahoo message boards has increased my spam count!
Also, for spam you do get, reply to it! And make sure you have html and graphics enabled in your e-mail so "web beacons" can broadcast when you view the e-mail--both of these will flag your e-mail as an active address, which I'm sure puts you on many many lists circulating in dark back alleys where spammers do their bidding!
Also, make your address something that's a really easy combination of letters, so the computers that randomly auto-generate e-mails are more likely to getcha. Oh and try to use hotmail...a hotmail address is the biggest spam sponge in the universe! (Not sure about some of the parallel universes though).
and in two days or less you can get offers from Nigerian buisiness people. What a deal!
That and better yet the sites that will submit your web site to hundreds of search engines. That will get you to the FFA style sites quick. I did this when I needed an account to test SpamAssassin on. Worked like a charm. Better yet, give /. ers an Email and we can set a forward to you of some junk.
Hey I got plenty!
Post to Google Groups on many well-frequented lists (don't cross-post!) with the address. Sign up for a Slashdot account and write generally informative (+5! +5! +5!) tripe with your real email address tied to it.
You also should've specified the test email in your story submission (i.e. Sean writes:) -- too late for that now, of course. In the slashdot@myname.endjunk.com emails I've provided, I've easily gotten 10+/day within a few hours of first posting. Neat.
We recently had heard in the office over one of the Yellow Machine that's made by Anthology Solutions.
I made up a semi-bogus email addy, it's real in that mail sent to it gets to me, but when I'm done, I'll flush it down the tubes.
I used it to attract spam so that I could train spamassassin for my use and for a few friends and family.
I went and dropped it all over usenet in the pr0n groups, went to every viagra site I could find, clicked on every banner add I saw.
It took a few weeks but I finally got the desired results. You'll have to put up with some extremely offensive email for awhile so make sure the wife and kids can't get to it during this phase.
After doing this for a few weeks I was getting 50+ spams a day. Now that I have spamassassin all tuned up I just don't check mail on that account. Once I feel that I no longer have the need to tweak SA, I'll just dump the account..
Too bad this doesn't work for TV commercials...
HEY! How about an app that, er, nevermind...
Search for FFA submission pages the ones that do not verify via google then just submit your email address and any url..you will get 1000s within 48 hours..
Don't Tread on OpenSource
I guess nobody mentioned this: the best way to tell spammers that your mail is, indeed, valid, and that there's a real person behind it, is by trying to unsubscribe from their spam list. That's why so many spam emails provide such an option (usually a web link).
Buy a throw-away domain name and post an index page with a email address. you could also use the method where you record the IP address of the spider by generating the email address on the fly. with [IP of spider]@domain.com and then set up a catch all email box. then you are monitoring the spiders ips and the mail servers ips. this idea was posted on /. a few months back but I couldnt find the link.
pretzel_logic
Simply respond to your own post here on /. with your e-mail address. /. is a spam magnet. The majority of spam I receive is from an e-mail address I used to use here that I quit using over a year ago.
I can actually confirm this - a yahoo address I used for mailing usenet has got very few spam emails. I think the spam-bots are replete, they have feasted on all your mail boxes for so long, they barely need new ones....
"You lied to me! There is a Swansea!"
Didn't get a great view of the pictures... but they looked like gay porn with fat men... honestly... if you clicked like I did, YHBT, and HAND.
and have a bunch of people on slashdot forward you their spam. Hey, everyone, let's help this guy out.
It may look like I'm doing nothing, but I'm actively waiting for my problems to go away.
--Scott Adams
Would seeding addresses invalidate your research? Earlier this summer I seeded a little over 525,000 spamtrap addresses to numerous spammer's remove forms. I get more spam than I know what to do with now. :-) I report it all via Razor2 and Pyzor. I was also auto-forwarding it to the FTC and Bob the NANAS bot. Unfortunately my auto-forwarding scripts can't handle bounces so when I was Joe Jobbed I was forwarding the bounces to the FTC and NANAS. I haven't had time to fix that minor detail yet though. If this wouldn't invalidate your research I'd be glad to show you how I did it. If you want me to help, reply to this post.
Hi, I'm pissed off at someone and would love to get them bombarded with spam. No, I don't think that'll work on slashdot. Better say "research" instead of "pissed off". Yeah, that should work.
riding round the world on an old motorcycle
"My deadbeat roommate has pissed me off once too often. On a completely unrelated note, I'm looking for ways to attract lots of spam to an email address for... er... research. Yes, research sounds plausible."
Post the email address on Slashdot! :-)
Put yourself on every porn mailing list known to man, look for 'shady' spam from other sources and opt-in, once you get a few going the address shareing should kick in.
Jesus saves, everyone else takes full damage from the fireball.
spamthistohelpusout@someresearchcompany.com
You can't judge a book by the way it wears its hair.
It takes more then a few days, but I've used a generic hotmail account for 4+ years now and after just a few usenet posts, I get about 100 spams per day.
:)
Spam takes time, have patience.
Did this really need to be an Ask Slashdot? Besides a simple google search I am sure it isn't that hard to attract spam. Just put your email address out there. Message boards, Usenet groups, and send emails out to porn web pages (free pr0n!). I have a hard time believing that spam is hard to come by if you take 30min trying to attract it.
Put your email address in the slashdot article, unescaped. Don't include stopwords like "spam", "nospam", "gov", "fcc", "fte", etc. Don't use +, -, _.
www.spamarchive.org.
Reality has a notoriously liberal bias -- Stephen Colbert
Too bad you didn't include the e-mail address in the write-up you submitted.
I have a separate email address for slashdot. And as soon as I submitted an article that was displayed on the front page and agreed to allow that email address to be publicly visible with the article announcement, I was suddenly flooded with spam. It looks like you missed out on a golden opportunity when you submitted your article without a link to your email. :)
You could have sent your email address along with the article!
1) Put your email address on a web page
2) Register a domain name
I've been using sneakemail for a couple of years. I shows you where they got your address when you get spam. By far these are the two most frequent sources of spam.
To avoid seeing this message again, always shut down your computer properly by selecting Shut Down from the Start Menu.
Reply to this and I'll post your e-mail on my website. It's amazing how many spams I get just for having an e-mail address on a not so popular game fan site. I'll check later for the reply
Especially with Network "Solutions". My spam count tripled when I did this.
-E2
The evil monkey commands you to dance.
I have been doing the same think for the past couple of weeks(harvesting spam) but it just stuck me that it may not be the best way to find a solution for spam. For one what's spam to me would be an "useful" article to you. your thoughts on this?
if possible please spam deadmongrel@yahoo.com
thanks!
Like the subject says, most spammers use pre-harvested addresses. Most (90%+) will buy them from people who just harvest addresses, 24/7.
The run-of-the-mill spammer doesn't want to take the time to actually spider through and get his own addresses. Why not let someone who specializes in that do it for them.
CD's (and now DVDs) FULL of email addresses are available for sale. At a higher premium is of course databases full of email addresses where they can verify that a person is there. Either via an "unsubscribe" request or an "opt-out" clickthrough, or even an html image request that is unique to the email id.
At an even higher premium are people's addresses who have received spam, and then actually buy something from it. Those are like "in the money options" on wall street.
If you wanted spam today, you should have posted your messages six weeks ago.
-dK
-- dK
yes really... :-)
...but I know where to find info on penis enlargement.
And generic Viagara to go with it!
(tig)
Ignorance and prejudice and fear
Walk hand in hand
You can have my spam! I really don't need it!
:)
Anything I can do to help!
step 2) Make the webmaster@yourdomain.com email account
step 3) Watch the spam flowing...
This way will get you going in no time. No advertisement, no other action from you is needed. Of course if you view the html spam mails, reply and follow their links you will have much much better results.
If you deliberately bait spam, your research will only be about spam as it effects bait e-mail accounts. Your conclusions won't be applicable to normal e-mail use habits.
The relevance of a baited addres depends on how one does the baiting. I'd say that a handful of usenet posts, pasting it to a couple of web pages, use of it to create accounts on websites (e.g. here), etc would be very representative of common patterns of address disclosure.
Sign up for Free Pizza. I did so and was receiving dozens of spam emails within days.
If you want spam then you want to attract ruthless spammers who have no scruples and will stop at nothing. The answer to achieving this is easy - SIGN UP FOR AS MANY PORN SITES AS POSSIBLE - and your wish will be granted. BTW, I`m not joking, I`m absolutely serious.
Recently, I just got spam form earthlink. I believe they have some sort of spamming policy, but look who's spamming. Although they use some spamming company to handle their dirty job, it is still originating from earthlink. Good thing the spam assassin manage to id the spam with 7.4 hits ..
1 &m=865& e=spammer@spamming.me
8 1&m=865& e=put@your.addr.here.to.get.spam.and.click.me
enough say
From: Earthlink web hosting
EarthLink(R) Web Hosting
Host your Web site with the small business specialist.
And try it for Free!
http://65.110.13.26/cgi-bin/clickthru?c=18
You can trust EarthLink(R) to help you successfully launch your Web site - no
matter how long you're been in business. And now, you can try it for free. One
of the most trusted names on the Internet is ready to get your business online
today!
Your risk-free trial includes:
- Award-winning customer support
- Easy-to-use, customizable Web site builder
- Access to online Web site marketing guide
- 200 MB webspace and 30 mailboxes
- First month Free & Free setup
Click below or call 1-866-321-4944 and mention promotion code 13315.
http://65.110.13.26/cgi-bin/clickthru?c=1
Where should I post my address so that it attracts spam?
/me shakes his head.
How about the front page of Slashdot?!? That ought to help you out a bit.
I'm not a prophet or a stone-age man,
I'm just a mortal with potential of a super man.
Start a hotmail email account. Within days of starting mine and not using it anywhere I was inundated with spam at the rate of approximately 50 per week.
I shudder to think what that rate would be like if I'd actually used it in a web form/rebate submission/blog reply.
(Now I know what you're thinking: why create a hotmail account and then not use it? Well...before I had a chance to use it I started getting spammed, so I figured it would be a neat experiment to see how bad the spam would get.)
My fingers are at the ready =D
Looks like....
I have been collecting them as I spot them, when I have enough samples and enough time I will have a bash at decrypting them.
So if you want to add a flourish to your thesis, you can also figure out what they are using the encrypted text for. (Probably some sort of tracking to measure success of campaigns.) I will happily send you my collection of spam + encrypted messages.
It did occurred to me that if you were a distributed illegal group that wanted to communicate in a way that was untracable from you to the component cells, you could do worse than sending out spam + encrypted message to millions of random addresses, some of which are your cells.
Comment removed based on user account deletion
You have to _not_ want it. If you want it, they'll just increase the flood to your personal account.
Slashdot: Failed Car Analogies. Amateur Lawyering. Anecdote Battles.
When ya want to be spammed there's non to be seen
Introducing VP-RX Pills
NO.1 Penis Enlargement Pill On The Market!
* Gain 3+ Full Inches In Length
* Expand Your Penis Up To 20% Thicker
* Stop Premature Ejaculation!
* Produce Stronger Erections
* 100% Safe To Take, With No Side Effects
* Fast Distribution Worldwide
* Sold Over 1.2 Million Bottles!
* No Pumps! No Surgery! No Exercises!
READ MORE HERE
For the past couple years I've forwarded all emails for a domain to one account. Whenever I give out my email, I give their website/company@my-domain.com and try to insure they will not spam by doing the usual unsubscribing. Classmates was a violator, however I went back through and reunsubscribed and rarely get anything. The worst offenders I found were morpheus-musiccity, iseekyou(icq), and my-domain. Hotmail was pretty bad when I originally signed up because I didn't unsubscribe at passport.net.
I happen to have several email addresses that are like my username here. I get spam for willy001 willy002...willy134...willy156.... If you set up an email address on a domain that is very well spammed (hotmail excite yahoo...) with a name like john12345 and that might induce spam.
Can you ping me now?... Good!
Doh... Just sign up for free pr0n on a couple of websites.
;)
Google is your friend.
It takes time for your address to really get into the spam-swap lists. Do a domain registry with your address, post to some web-archived mailing lists. When you get spam, make sure you read it spam with HTML images enabled so they will know it's a "live" address.
When you get the spam offering to sell you millions of email adresses on CD, you'll know you've arrived.
On places like GeoCities and other free spots. Sprinkle each page liberally with "Mailto's." They'll find you eventually.
DUCT TAPE: The Election Supervisors' Secret Weapon
The best way to get spam? Put your email address into a popular HOWTO, or run a 3-letter domain (a friend of mine gets about 2/second to his three-letter domain). And be patient.
But if you want some of mine, I'm happy to get rid of it. ;)
Do you really need reason for beer? Wingman Brewers
One word: porn.
That isn't any sort of encrypted text. It is simply a (pathetic) attempt of evading filters...
You have to make sure you click the opt-out check boxes if you're signing up places. If you go to a porn site and sign up to recieve mail from them it's hardly spam. Yes, I know you'll still get a lot of stuff you didn't ask for. But since this is for research, it seems like the distinction ought to matter.
Hi! I make Firefox Plug-ins. Check 'em out @ https://addons.mozilla.org/en-US/firefox/addon/youtube-mp3-podcaster/
Whole$ale Internet Pharmacy!
Buy your personal Medications Online and $$$ave!
Our Doctors write your prescriptions 100% FREE!
Weight Loss, Muscle & General Pain Relief, Allergies, Men & Women's Health, Impotence, Heartburn, Migraines Allegra-D, Zyrtec, Nasonex, Nasacort, Flonase, Phentermine, Viagra, Propecia, Didrex, Meridia, Soma, Zanaflex, Retin-A, Renova, Valtrex, Celebrex, Buspar, Nexium, Zyban, Valtrex, Prilosec, ect... ect... ect... ect...
Click Here to visit our Internet Pharmacy
(No Prior Prescription Required)
No Thanks, please remove my email!
Klick on the 'don't send me information again' link at the bottom or respond to those viruswarnings.
BTW:
Your just asking about getting spam to an Email address with actually doing the obvious and using the mails that that address recieves. Could it be that your bullshitting us?
Timothy, what ever you where smoking when you passed this 'Ask Slashdot' post, please don't ever offer me any of it.
We suffer more in our imagination than in reality. - Seneca
http://emailrevenge.tk
muwahahahahaha
It's not encrypted data - it's merely random text intended to throw off spam filters.
Unsubscribe a few days after you subscribe. Ha ha! 'Unsubscribe', I love that term. Seriously though, the spammers will sell your addresses to others and you'll get a healthy flow of spam soon enough.
Specifically, not one that's from an actual brick and mortar greeting card maker. 9 times out of 10, you'll be sure to be not only adding YOURSELF (the sender) as a future spam victim, but whoever you entered as a recipient for the e-greeting card.
All I know about Bush is I had a good job when Clinton was president.
If you get so much spam in your regular email, why don't you just use that?
Create Several Email Addresses - Be scientific ...
.....
Address 1 - (Control Address) Post No Where and read no messages until the testing time is over
Address 2 - Post On Usenet (Deja.com)
Address 3 - Post In Public ICQ program
Address 4 - Porn Sites
Address 5 - IRC
etc
i'll give you my pop3 user/pass combo.
vodka, straight up, thank you!
Just sign up for 'free' access to a porn site that requires your email.
I have an address I used for about three months on usenet, only in the comp.lang hierarchy.
I may have used it for a few web sites, but the only one I recall is a local political organization which I doubt would have sold, or had the expertise to sell, its list. Still, the data is tainted, and I can't say it all comes from usenet.
According to DejaGoogle, I last used it 18 April 2002, and it was last referenced in a follow-up message 5 May 2002. I first used it 15 February 2002.
For a while I had my ISP forward mail to that address to "nothing" until I worried it might be piling up on the server somewhere (I don't know what forwarding to "nothing" means in the ISP's web control panel). So there are no messages for most of the month of May 2003.
Disregarding the emails from the political organization, there are 1733 emails; the earliest is dated 16 July 2002, the lastest today 21 Sep 2003. (There are probably earlier emails to this address which have been archived.)
So that's a span of 432 days, not subtracting the period when I wasn't having the email forwarded. Again not subtracting the un-forwarded days, that's ~4 per day.
Note that this is only spam to this particular "sacrificial" address; it does not count the large amount of spam that, thanks to having some idiots as "friends", hits my "real" address.
I have not been subject to any dictionary attacks on my domain name, but I have gotten about 105 spams to admin@mydomain in the same time period. This pushes the daily average to ~4.25/day.
Since I started getting a lot of spam, I've made a practice of assigning each commerical contact or mailing list a different address (theirdomain.tld@mydomain.tld generally); surprisingly, these get very little spam, despite getting large volumes of legitimate mail each day.
Opinions on the Twiddler2 hand-held keyboard?
I doubt that it's encryption. My assumption is that it's random text, generated to
- avoid exact matches/digests by spam filters (though it won't help much against Bayesian ones, and would in fact help finger spam if the Bayesian filters could recognize "non-words".
- uniquely identify email so as verify your address. The "click to unsubscribe" scam has stopped fooling people. But they can still send you html mail that opens a URL with a randomly-generated tag in your subject line that matches the database of what they sent out.
That's what they want you to think!
*looks left, looks right*
--Fesh
Kill -9 'em all, let root@localhost sort 'em out.
I think you have to wait, as from what I understand most of the people who spam actually buy spam lists from other people. The spam lists seem to be compiled like phone books, so they send out batches of addresses like every month or so. I'm sure your mailbox will be stuffed to the breaking point about two months from now.
In order not to recieve spam on my primary account, I registered for some accounts to use whenever I had to give an email to a questionable entity. In order to support these free accounts, they tell you in advance that they're sponsors will send you emails. Some example of these are yourmom.com, beer.com, and rock.com.
Your first 30 minutes alone on the Internet should tell anyone that.
The surprise isn't how often we make bad choices; the surprise is how seldom they defeat us.
ah, little grasshopper, the spam will not come if you wish it to.
it senses your wanting, and stays far, far away - hidden in the forest like a wild dog which only approaches you when the camp fire is out and you are asleep.
to have the spam come to you, you must learn to put it out of you mind. fill your mind with good and happy thoughts, and let those thoughts cloud you intentions, much like a straw mat hides the bug from the birds that hunt it.
then, and only then, will the spam come up to you.
f64 : my ninja skill is far superiour to your ninja skill
Is the account you want spammed provided by the same ISP as your personal account? It sounds like the ISP you are using for the research account might be doing a really good job killing off the spam before it ever gets to you. In order for the research to be uncorrupted you need to verify that your ISP passes all e-mails through to you, rather than spam filtering.
Guns don't kill people; Physics kills people! - John Lithgow as Dick Solomon on Third Rock From The Sun
Also they break up words to avoid spam filters, like the following spam I recieved:
"Ge ni tal Enl arge ment - Me dic al Bre akth rou gh F or Me n ! 2 a m azi ng wa ys to e nl ar ge y our man h ood - re ad bel ow..
D oct ors work ed for ye ars crea ting a p il l to en lar ge t he ma le ge nit al ia b y len gt h a nd wi dt h. .
T he ye ars of wo rk p rodu ced a pi l l c al led "V P R X", - V P R X P i l l s inf o c li ck her e
a nd al so a pa tch simi lair to the qu it sm o king pat ch . - P e n i s P a t che s i nf o cl ic k her e . "
I just hope they don't discover this, which is much more readable and still produces the same filter avoiding results. Fortunatly Bayesian filters learn these tactics and significantly reduce their useable lifespan. Expect to see the face of spam change more often and more dramticly with the widespread adoption of such filters by AOL and others.
Respond to liberal outbursts on Slashdot with a conservative counterpoint and you will start getting penis implant and virus emails from leftists who post here.
Dawn of the Dead
Submit your email address to some adult websites. You will get plenty of mail.
That'll do the job. Spammers will not only add the reply-to address in that usenet post to every spam list on the planet, but you will also receive, for about three days, a large number of virus-laden attachments with losers desperately hoping that you'll install Back Orifice and let them into your machine. If you were an FBI agent and need to demonstrate your ability to catch a "hacker" and reduce the "terrorist threat", that'd be an easy way to do it.
do questions like this make it to the front page?
"For a successful technology, honesty must take precedence over public relations for nature cannot be fooled." -Feynman
Or use it to register a domain name. The moment it gets into the WHOIS database, you'll be inundated.
Any address that I register a domain name with seems to get added to *ALL* the spam lists....
That's where you should submit your e-mail address. Before you know it, you'll win a lot of spam.
Get a hotmail account with a very short user name.
Using a short name (~3 characters) or a very common first name before the @ sign guarantees that you will be found on any domain. I used to have adrian@ as an alias my job, but I got slammed with spam. I then asked them to remove it. Presto: no more spam. Then I got added to a d-list (ops@). Now I get the spam again.
Physics: Making the universe open source.
Just get a domain with Verisign.
avoid exact matches/digests by spam filters (though it won't help much against Bayesian ones, and would in fact help finger spam if the Bayesian filters could recognize "non-words".
It's definitely a black mark. It's been my experience that bayesian filters only need to be "taught" two filter-evading spams before they start tagging them over 90% of the time. They usually reach 100% accuracy before the 10th spam.
I recommend NewFunPages for getting lots of spam to an account that never used to get spam.
Then start clicking on the Unsubscribe links.
There are two kinds of sysadmins: paranoids and losers. I'm both kinds.
The WHOIS database works wonders for ya.
get someone to send you a picture from a camera phone, after my friend sent me some pics, i got like 20 emails that all look the same, using the name he entered for me.
Give me your address and I'll send you all of mine... about 300/day! :-(
That isn't any sort of encrypted text. It is simply a (pathetic) attempt of evading filters...
You insensitive clod!
You've ruined the poor boy's dream!
Just think of the hours of fun he could have had "cracking" the "code".
Just think of the elaborate code -- and equally elaborate conspiracy behind it -- he might have created in a desperate obsession to make his data fit his theory!
It could have been a new formularization to rival the Illuminati, Ancient Astronauts, secret codes in the Bible, or some other tortuous, contrived theory! Why, he might even have constructed the ultimate conspirarcy theory, a religion!
But no! You had to cruelly disillusion him. And rob us of the fruit(iness) of his labors.
For shame!
Opinions on the Twiddler2 hand-held keyboard?
my own expirience with spam is that i'll start getting spam the same day i enter my e-mail adress in the user-details of my icq account. seems like the spammers have some bots to scan all icq-accounts for e-mail adresses
...for that damn GOATSE link in his sig.
If you really haven't had any success at all in getting spam (or, say, you've only gotten a couple of spams), you might want to check whether your mail provider is filtering spam for you.
For example, I can only remember getting maybe one spam email in the past two years of having used my present email account. The account is through my university, which maintains a rather agressive (and effective) anti-spam program.
E-mail spam is a lot less useful for revenge. Want to really piss someone off, go to the library, grab as many subsription cards as you can from the magazine section, fill them out and check bill me later. Also all sorts of free samples of things are annoying and can be damn confusing. As a prank i got signed up for some stuff, somehow i got on some list and recieved; condoms, depends, astroglide and menopause medicine. Also if your really out to get someone and want to get them looked at by the feds, sign 'em up for the NAMBLA newsletter or something like that.
"Sic Semper Tyrannosaurus Rex."
Try the unsubscribe pages or links in spam you may already get on your personal email account; just change the email address that might be in the url to your target email.
So you want a lot of spam, do ya?
p e= www
http://www.spamcop.net/w3m?action=inprogress&ty
That's Spamcop's list of spam-vertised web sites. All of those sites have submission forms; just put the email address in there and you'll be rockin' and rollin' within a few hours. I got into a 'spam war' with one of my roommates back in college, and with that Spamcop list I was able to render his email account COMPLETELY useless within a couple of hours (If you're reading this, sorry 'bout that Brian... )
Speaking of spam, on a random side note, I've recently started checking all of my email accounts with Shadango.com. Anybody else tried that yet? Shadango allows you to have advanced filtering applied to ALL of your existing accounts (both POP and IMAP). It's frickin' great. So now I don't get any more spam, plus I can check all 5 of my email accounts from one place. They've also got file storage, a calendar, etc. It's money. Check it out.
-Nate
I'm not sure how effective it is, or if it would change your results, but there is a website geared towards generating spam email. it's called http://www.emailrevenge.tk/.
Why? Because I had an account there. At some point they had a beta board, which had the amazing bug of changing your account's gender to female. The second it does this, I start getting all kinds of female-oriented spam. Hooray for sleazyboard.
Research already conducted demonstrated that usenet
is generally not harvested for spam targets. Especially if the address appears only in the body and not in the headers.
Similarly, whois registration doesn't yield much spam.
If you want spam, you need to post your email address to the web in an unobfuscated fashion.
I suspect completing forms on supposed porn/warez
sites may also be fruitful.
Barring that, find some Yahoo! groups that are sex-related but (a) low traffic, and (b) subscription only. Typically these claim to be for some webcam or exhibitionist. Join up using the spam candidate's address. Odds are you have given your e-mail address to a spammer.
Go to any sex-related Website that offers free samples in exchange for your e-mail address. Enter the spam candidate's address. You have given the address to a spammer.
Ask me how I know.
This is not my sandwich.
5 of the 6 spam mails I got last night went to my student account, where my username is simply daniel.
It is listed nowhere and I've never really used it.
My longer main address is in use since November 1999 and yields 13 web and 3 newsgroup results at google. But hardly any spam there, although I've configured it at my ISP to not discard spam.
...to all spam. Just reply with "Please, sir, may I have another!"
Go to a couple of pr0n sites that let you in for your e-mail addy, sign up and, in no time, you'll have so many Viagra, penis enlargement, breast enhancement, "hi, sweetie" and other less interesting spam pouring into your machine that your head may melt. And download historyKill, Gator and Bonzi. That ought to do it for you.
post it here!
Go to AIM or AOL chat rooms and post it in there. you'll get spam within a few hours, guaranteed.
Make some enemies online, and make sure they know your email address. You will magically be subscribed to every porn, viagra, and Nigerian mailing list on the planet.
-William Brendel
And give your old address - you'll get huge amounts of spam on both. It's best to have an eBay ID identical to the email address, just to be on the safe side. Next, order anything from etronics.com.
These are just my top three based on personal experience, YMMV.
My daughter wanted her own email address, and she talks to her friends using messenger, so she signed up at hotmail. She neglected to tick off the 'advertise my email address in the hotmail direcdtory' when she did, and in about 15 minutes, she was swamped - with up to 200 emails a day. Topics included viagra, penis enlargement, US based credit, dipolmas, find-a-fuckbuddy, and so much more.
I'd advise doing this, and forwarding the mail to your test account.
Robert Anton Wilson
The only time I don't receive AOL CD's in the mail is when I really need some more coasters for my coffee table.
Ergonomica Auctorita Illico!
Perhaps knowing exactly the sources spammers get addresses from is the most effective way at preventing spam.
I am sure there are plenty of places we give our email address out that we think are benign, but are not.
Join Tor today!
I just filter all HTML messages as SPAM now.
Dare I ask: Did he not use an e-mail address from Hotmail? Problem solved.
Sign up for porn sites and free offers that pop up in your browser. You will get plenty. And once it starts, it will never stop. ;)
Post in on a website. I read a university-run study into sources of spam that concluded that the vast majority of email addresses spammers collect were obtained from websites using automatic bots (the same way search engines catalog sites). I confirmed this myself. My primary email address was being hammered by spam (at least a hundred a day), so I changed addresses and made sure that it remained unposted on any website (in HTML...Flash is safe, at least for now). It has been months since I changed the adress, I have registered for many things on the web since, but have not received a single scrap of spam. The university used far more exhaustive methods to reach the same conclusions, and I can vouch for the results. They did much the same thing you are doing...setting up dummy email accounts and then exposing them to the scrutiny of spammers in a variety of ways. The accounts posted on the web were far and away the most abused. Interestingly, they also found that, once an address is removed from the web, the spam begins to fall off after only a few weeks. Maybe spammers have an artificially short life span? We can only hope...
What about my 'a nullo'?
Yeah, I got an account on there a couple of months ago. It's definitely very cool.. it can even check Yahoo/Hotmail accounts.
I always just used my Yahoo account to get spam when I signed up for stuff online. BUT, just today I found out that Shadango allows you to generate temporary, 'disposable' email accounts. See, you generate a random email account, sign up for whatever online (using that new account), and all the crap goes to the temporary account, which you can delete/change at will.
It has definitely helped to cut down on the amount of spam I get. Kevin Hanson recommends it highly.
-Kevin
Post your email address on Slashdot. Have all of the mailserver admins forward all received SPAM to the posted email address before deleting. When the SPAM starts to flow simply reply to every last one of them.
From excellent karma to terible karma with a single +5 funny post...
Do you happen to live in Soviet Russia?
this will get you added to spam lists fast - make some bids that you know you'll lose on - or post something for sale
You'll get on every list going
webmaster@domain_name.com
http://www.ftc.gov/bcp/conline/pubs/alerts/spamalr t.htm
I registered my domain about a year and a half ago, and used different addresses for each thing I used and then set the catch all account to go to an address called junkmail. The nice part about this is I could see where the spam was coming from.
I get no spam to my primary address, which only my friends and family have for the most part. Websites I've registered with send me an e-mail a month related to their sites, but I haven't gotten any spam on those addresses from anyone else. The e-mail on my resume gets about half a dozen per month and they're related to job-finding services.
So where's the actual spam coming to? Almost entirely to the address posted on the main page of my website. I occasionally get an e-mail to just some random address.. and I get a very tiny amount to an address I used in a campus newsgroup which usually isn't visible off campus. So basically, it's all spiders snagging addresses.
So, if a person signs up for free p0rn, they get spam?
But, do they actually get the free p0rn or not?
50 spams per booby sounds fair to me
To get signed up for spam, you need to post your email address in the same places that AOL lusers would. For instance, Greeting Cards, Online Games (not battle.net) like those at excite.com. Take some surveys at emode.com. Click on various ads and fill out their forms. In about a couple weeks you should start seeing tons of spam.
You do not have to taint your results by signing up for anything.
Just a few posts to that newsgroup and you'll hear back from all the organ enhancers, Nigerian widows and orphans, and other scammers you could ever want, 100% unsolicited.
"Ain't no right way to do a wrong thing."
Or just forward what you get from your personal account to your study account.
"It's the height of ridiculousness to say for those 9 lines you get hundreds of millions."
From my "isp" comcast. Oh wait, my mistake. Turns out this is just a "special offer for our important customers" -robbie
People say my sig is the best thing about me.
Sign up for some porn accounts. They LOVE selling your name, but you will have something to keep you busy while you wait for the spam to roll in.
.adios/losers ~snake
The funny part is, the bayesian filters will recognise the "random" letters as being gibberish and will filter against it.
Yo, I was involved in the alpha testing of shadango awhile ago. When I signed up I used the word "alphabase" in the promotional code box. It got me a paid tester account...i think it might still work. From my experience Shadango is definitely worth the try. Ian Welsh
Look up FFA on google and submit your E-Mail to thier forms. You should within minutes get a constant stream of spam that will never ever end.
Well, you could post the e-mail address right here on Slashdot. I'm sure we could help you out. :)
Macintosh humor! MacComedy.com
Preferrably flame a couple of them on usenet, using your spam-harvester email address. That should reward you with a couple of joe-jobs. Presto, spam coming out of your ears.
Just get hold of anyone's SPAM, email the person or company back threatening to sue them for use of your account and harassment. You will then receive 100's of SPAMs shortly thereafter.
Sign some guestbooks that publish email addresses. The guestbook.pl script from Matt's Script Archive seems to attract them.
Sorry for the caps... Seriously, ever since I :^)
began selling on eBay the two e-mail accounts I
use for that have been drenched in Spam. I'm
getting 10 copies of the Swen/Swan thing each
day! Just list something cheap, and include
your e-mail account. They WILL find you!
comegetme@Phreaker.net
the address you want to receive spam on. Then surf away, on news sites, porn sites, etc. I bet you'll get lots of spam.
spam (online advertisement via Email) research
v1.0 final
Spam SUCKS
end of research
It's affect. The fucking verb you want to use is affect. Effect as a verb means to cause to come into being. Spam does not effect bait e-mail accounts. It affects bait e-mail accounts....
While I'm on the matter, good is not an adverb it's an adjective. Please use it accordingly. If you want to use it as an adverb, don't. Use well, instead. Grrrr.
Sorry, that really gets under my skin.
http://yetanotherpoliticalrant.blogspot.com
Another good use for spam e-mails is (surprise) they can nab you a very good list of proxy servers if you look at the headers. :)
When one of my articles got accepted with
a traceable email address, i started getting
10+ emails a day to jonslash@directfreight.com
an address i used just for that purpose.
Here , and here , and here too ...
Register a domain with Verisign, and put your target address as a contact for that domain.
-----
PGP Key ID 0xCB8FF658
Sign up at http://www.coolsavings.com and you should be able to harvest about 100-200 spam messages a day.
You should never link to sci...sci...the unholy creature! They are evil, may google be with you. I have never been here, of course. *me burning my house down and preparing to leave the continent*
1. news.admin.net-abuse.sightings
2. spamarchive.org
3. Build a Spam Honeypot
hth
pete
"The cup... the drop... it's a YES!"
Comcast issues an email address with a cable account. I have never used mine ever, for anything. Spam piles up in it reliably.
Simply, just sign up for AOL. I signed up a freind and within 5 minutes of picking his "sign in" name he had at least 10 Spams. Don't ask me how !
BlueCat Networks www.bluecatnetworks.com have this really cool product called Meridius. It's an anti-SPAM Mail Relay appliance. Typically sits in the DMZ. Why don't you contact them and ask them about SPAM?
pi=sigma{n:0-infinity}[(1/16)^n][(4/(8n+1))-(2/(8n +4))-(1/ (8n+5))-(1/(8n+6))]
What you're describing is called the attractive nuisance doctrine , and really only applies to the situation with the neighborhood kid, not to an adult upon whom different expectations are placed.
One could argue that the real issue is negligence , but proving negligence turns on the phrase (from the referenced definition) "the care of a reasonably prudent or ordinarily careful person in the circumstances".
It's unclear whether or not you'd be able to point to an "average user" and call them "ordinarily careful", in which case you'd definitely be doing about what's average. It might, instead, turn out that the court would say "you're a professional, a sysadmin, and we hold you to a higher standard of "reasonable prudence" by virtue of your knowledge of the consequences. This would be analogous to the trained fighter or black belt getting into a fistfight and whaling on some poor schmoe. Regardless of who "started it", the fighter is going to be held to a higher standard of control and "carefulness".
Of course, that said, you could also use a defense based on trespass, in which you argue that, because the attacker was not authorized to use your system, as long as you weren't specifically stockpiling "munitions" there :-), you're not liable for the attacks based out of your system. I'm not sure what case law in the real world says about this. If you left your front door open and a sniper walked in, sat down in your living room, and started taking potshots at passers-by, would you be liable? Would the court say that, because you failed to lock your door, or deadbolt it, or whatever, you were negligent?
Tough to say, these days.
Thankfully, I'm not a lawyer, so I don't have to worry about such weighty theoretical issues :-)
There's always spamyousilly, although they seem to have disappeared. If it wasn't for their confirmation email, I would have subscribed a few former clients already and watched their mail servers explode... :)
Create a webmaster@you.com account. Place it all over your web site. Bonus if your web site is on a dedicated IP (reachable by the IP sweepers)
Or you could just click the remove link in the spam you do receive.
I use Macs to up my productivity, so up yours Microsoft!
mportant Stuff:
Please try to keep posts on topic.
Try to reply to other people's comments instead of starting new threads.
Read other people's messages before posting your own to avoid simply duplicating what has already been said.
Use a clear subject that describes what your message is about.
Offtopic, Inflammatory, Inappropriate, Illegal, or Offensive comments might be moderated. (You can read everything, even moderated posts, by adjusting your threshold on the User Preferences Page)
If you want replies to your comments sent to you, consider logging in or creating an account.
Problems regarding accounts or comment posting should be sent to CowboyNeal.
"Reality is that which, when you stop believing in it, it doesn't go away." - Philip K. Dick
Want spam? Try ecards, or adding your address on the hotmail addressbook.. or what about making it your microsoft passport address? register for MSN and use the email account which you want to be bombed :)
Instant SPAM guaranteed!! And more than you can handle.
just email someone at hotmail. You'll get lots of spam form then on.
I agree with you, but at the same time I also believe the issue is not the same. The machine with Outlook installed is what Microsoft provided. Using your arguments you could argue that installing Outlook on a machine is the same thing as putting a destructive virus on a floppy and leaving it in public place. Wouldn't the creator of the software/virus be held liable?
and see who it's to :)
It's nothing but crumpled porno and Ayn Rand.
With Comcast internet, you have to sign up with Giganews to get Usenet news. Before signing up with Giganews, I got 0 spam emails. After signing up with Giganews, I get tons of spam.
I don't use the email account at all, and didn't give it out to anyone except Giganews, who requires it for service.
E-cards are technically opt-in by deceit.
Try http://www.luckysurf.com
Also sign Bravenet and Lycos guestbooks. You
can start with this site
http://www.4chloe.com or
http://www.godhearsyou.com
When you get done, visit a web site of someone who has signed the book and sign their book and then chain through that book to a third site etc... You should start seeing spam shortly.
Eileen H. Kramer/Roanna
ehkuhall7@tacheiru.every1.net
PS I use a white list because you know what kind of troubles my inbox has.
Please visit ZOID CITY Community and Community Competition http://www.zc2zc3.st
There are plenty of con men and spammers there (in fact, I'd say there are few who aren't one or the other). Try groups with names like alt.business.home.pc or whatever. Oh, and if there's an alt.make-money-fast... ;)
#1 Create web pages with your email address on them, and submit them to various search engines. Wait a few weeks for them to index the page.
#2 Enter the address into your web browser for Anonymous FTP access and access a lot of anonymos FTP sites. Enter it as a default address and visit a lot of web pages and see if the bots pick it up.
#3 Enter the address into ICQ, YIM, IRC, AIM, Jabber, and other chat clients. Join massive discussions. Someone is bound to harvest your email address.
#4 Register the address with various web sites, and be sure to mark the "do not send my account email" options. They will instead sell your account to others. Register it with Microsoft, Yahoo, AOL, and many other companies. Make sure you checked the "Do not contact me" or whatever options.
#5 Post messages on Yahoo Groups, and Web Forums using that address. Someone will pick it up and spam you.
Remember, Slashdot does not have a -1 disagree moderation, and no, troll, flamebait, and overrated are not substitutes.
The simplist way to get spammed is as follws; 1) Join Hotmail. By default your address is publically available (Have a look in the options page of Hotmail!) 2) Wait for the first couple of spam messages and then reply asking them to bugger off and get a life. 3)Wait for the deluge.
Go to www.mail.com. Sign up for an e-mail account (it's free and quick). Send mail from that account to some (other) e-mail address. The other e-mail address will then be getting lots of spam (for online casinos).
You can get spam quick by simpling listing
your email address in your "personal info"
with an instant messaging service like ICQ.
I have experienced this personally, and I
have also seen magazine articles stating that
this is the worst place to let your addr get
out.
I have submitted a few articles to a handful of Usenet groups....
Now just wait...Your job is done. But I get the impression you are not getting results fast enough. No problem! Just post an item on eBay with your real email address. If you don't like eBay, just go with any company that says in their privacy policy "We will never never never never never ever sell your email address"...They are just waiting to rope the suckers.
But if you really think you have a badass mail server, sign up with Earthlink. Don't say I didn't warn you though.
-R
Sign up for a free pr0n site yuo will have a box full tomorrow.
Post to the FFA Lists if you want spam. A good place to do that is http://www.worldsubmitter.com/ WorldSubmitter is a bot that posts a site of your choosing to multiple multiple lists. Each of these lists produces tons of spam. I posted there 15 months ago, and I'm still getting at least one spam message an hour from one of those lists.
...When the program on one of those disks gets run by some curious person, don't you feel that the virus writer is at least somewhat liable, even though he didn't "pull the trigger"?...
Nope! Clearly it's the library's fault for maintaining machines with floppy drives capable of running the virus!
If I was blackmailed into writing a spambot, I sure as hell wouldn't write a good one.
You can't judge a book by the way it wears its hair.
You've got SPAM!
Try posting to the mysql mailing list.
There are a few fuckers that scan the list every couple of hours. Each time I post, I get a flurry of spam coming in over the next few hours, which dies down to the usual 1-2 per hour until I post to the list again...
here's a post from the isp-tech mailing list where someone asked basically the same question, and got many responses; within a few hours the spam was flowing at the rate of 1 per minute!
Give out your email id on public chats/IRC, spam bots will definitely pick it up...
--
I refuse to answer that question on the grounds that I don't know the answer.
I don't have a girlfriend, YIC.
Go sign up for an account at playstation.com. I gave them a +sony tag when I signed up for my account and now I started to get spam from that address. I always make sure I uncheck those "can we give your address to our affiliates" boxes, too.
Bastards!
-David
There. Now go play some cool javascript games!
Where should I post my address so that it attracts spam?
pr0n sites, perhaps?
No TiVo and no caffeine make me something something...
Go check joe at www.mailinator.com .. there is always plenty there (fred and bob seem to do pretty well too)
To maximize Spam on an account that already gets SOME spam, set up an autoreply "vacation" message. (Many ISP's have this feature, or you can write a script). You something that says "I'm on vacation right now, I'll read your email on " Or somesuch. This is the easiest way to reply to all your spam emails which will automaticly bump your name up on their list, because it shows that your email address is still somewhat active (if the date is somewhat near even humans will assume this). Also, if you have budget for such, buy things from spamming companys, if possible let them know how you heard about their great product.
Little Brother, watching the watchers
Right - 'tis the spam arms race.
I suppose the filters that get tricked are the ones on big ISPs that look for completely identical e-mails going to large numbers of their users.
go sign up at some Pr0N! sites!! jesus.
"Champagne for my real friends - and real pain for my sham friends!" http://ericblade.postalboard.com/
This report from the Center for Democracy and Technology pretty much addresses how to get spam:h tml titled "Why Am I Getting All This Spam?"
4 /22/135421 54 220 63 624 9
http://www.cdt.org/speech/spam/030319spamreport.s
The report was covered by slashdot quite a few times...
http://slashdot.org/article.pl?sid=03/0
http://slashdot.org/article.pl?sid=03/04/12/14
http://slashdot.org/article.pl?sid=03/03/19/17
-mrv
Your mistake was putting pictures on your website showing them how large your penis already is, showing your rent receipts indicating you don't need to refinance, and that you hate Nigerians and Microsoft update PIFs with equal passion.
Table-ized A.I.
Good ways to receive spam.
Open a hotmail account and forward on mail from that to your account.
Reply to what ever spam you do get and you will for sure get heaps more.
Post a resume on a searchable website with the email address you want spammed.
Have a website with a page full of your email address pasted all up and down the page.
Anything online that is publicly Searchable and visible should yield good spams.
Use a simple name at a simple domain. john@somwhere.net for examaple. The domain name isnt as important as having a common name. The bots will take care of the rest.
How about I just automatically use your email address for the things I do. Then watch you Spam keep rolling in.
-------
Support Indy Music. Buy
...you should have included your address within the text of your slashdot message. That would have worked. Clearly, from the various cited studies on /. and elsewhere, the most certain source of spam is getting your email address displayed in the clear on a public site that bots crawl over.
That's how all the bastards got me (my past email got unexpectedly included in archives that subsequently were hosted on web servers).
-- We all have enough strength to endure the misfortunes of other people. La Rochefoucauld
If you want spam just go into an aol chat room and you will be set for life, in terms of spam, that is.
It wouldn't stop any spam filter I have seen.
Ah well, probably some ISP out there has such a silly filter.
I was envisioning something smarter along the lines of hidden fields (have a look at ye average web form , a lot of them have hidden fields to hold state and tracking info).
For example as I type this, let me look at the "Page Source". Ooo lookee, on slashdot itself....
I'm thinking along the lines of...
ie. Workout the encoding for the hidden fields and tweak them to freak out any automated processing software the spammers use.
A similar idea is to feed carefully crafted cookies to web servers to crack them.
For example, I would guess that the spammers spam each newsgroup / discussion list with a slightly different URL, the URL goes exactly the same place but records which spam campaign produced the best results.
Now tweak that URL in crafty ways and you may DoS their server.
While a new address might be have a chance at being picked up and used immediately, it seems to me that time is what it takes before you start receiving the '100's of e-mails' a day. See I would highly doubt that the people collecting e-mails are the same people that are actually sending the spam. It seems to me that you have the people that harvest the e-mails, and sell them on cd's and what not to the marketing folks. They buy the cd's with 4-jillion e-mail addresses for $99.95, and start the mailing. At least this is how I've always perceived this 'industry'.
Follow the "click here to be removed" link. Then add you spamtrap account.
The only thing that gets me more spam than posting on slashdot is my slashdot.meetup.com membership. I made a very wise decision to use a separate email addy for that one, and that has saved me a lot of headache. If you want spam, sign up for that! Also go around posting to every forum you can find and put your email at the bottom of the post.
Sigs are out of style, so I'm not going to use one...oh wait..
- I get spam to HometownNewspaperReader@mydomain.com. I posted a response to an article.
- I get spam to Blog1Reader@mydomain.com and Blog2Reader@mydomain.com. Again, I posted responses in the reader comment sections.
As mentioned above, it takes time for the spam to roll in. But it does roll in.Trolling for karma since 2003.
Sign up for lots of free porn I guess. Put your address out there and keep trying, maybe you could sell it to some of those directories and make a little money on the side.
... 22Megs, because I've been saving it to train Spamoricle.
Post your e-mail address here and I'll send the spam.tar.bz2 file to it.
There, what could be more helpful?
The best (worse?) way to get spammed is to fill out online survey. You know those free online IQ tests with the inflated scores (I scored 182 and I have problems doing my taxes ;))? If you use your real email address you will feel very dumb about a week later when your mailbox fills up with "Get a collAge degree at home!!" mails. ;)
Also start sending those cute greeting card emails to yourself. Most of those are just collectors for emails.
I think they stopped cruising USENET for emails. To few people use their actual emails there anymore...
Spell cheek you've failed me four the last thyme!
I seeded my spamtrap by taking all of those 'unsubscribe' links from all of the spam in my inbox and putting my spamtrap address in the box
This means that any spammer who uses unsubscribe links to gather and verify email addresses has my spamtrap address, but anyone who removes addresses via their unsubscribe link does not..
My spamtrap is now on most of the " xx Million guaranteed opt-in email addresses CDs", so I get lots of fresh spam to test my spam filters with every day.
Any spam that gets through is added to as many blackhole lists as I can add them to.
As a postmaster of a small company, one time this happened.
A collegue 'suddenly' received huge amounts of spam. One day it was zero to none, the other day (and every day after it) he got tons of spam (at least 50 a day).
He wondered why.
After a lot of research I found out he had been a paying member of a pr0n site for one month, after he quit his subscription, the spam started pouring in.
I'm sure your now addresses have been harvested by a number of systems already. You'll have to wait, though for a client to buy a list, or another wave of mailings to go out before one is sent to you.
Too big to fail? Does that make me to small to succeed?
I tried to put up what looked like an open proxy on port 8080, which simulated the right error codes in in case people connected to port 25 out in town.
Within a week I was getting 100.000 spam mails a day. Within 2 weeks I was over 1 million spam mails a day.
So just pretend to have an open mail server, and you can get all the spam you want, and harvest all the addresses you care about.
There's an FAQ covering this:
How do spammers get people's email addresses ?
http://www.faqs.org/faqs/net-abuse-faq/harvest/
It lists and describes the following mechanisms:
1. From posts to UseNet with your email address.
2. From mailing lists.
3. From web pages.
4. From various web and paper forms.
5. Via an Ident daemon.
6. From a web browser.
7. From IRC and chat rooms.
8. From finger daemons.
9. AOL profiles.
10. From domain contact points.
11. By guessing & cleaning.
12. From white & yellow pages.
13. By having access to the same computer.
14. From a previous owner of the email address
15. Using social engineering.
16. Buying lists from others.
17. By hacking into sites.
This FAQ also has a number of useful links
to other spam resources.
Sign up for a Bugzilla account over at Mozilla. Every single spam I have received in the last 8 months has been directed at this one address.
A good deal of my spam these days comes from the email address I used solely to sign up for Audiogalaxy.
Recently, based on what turned out to be false intelligence reports, I ordered the invasion of another country, resulting in thousands of deaths and widespread hardship. Did I do something wrong?
---
The Original Anonymous Coward
ToastedSpam.com has a page called Free spam! that has a massive list of web sites where you can sign up for spam.
Not necessarily. The proper way to do that kind of thing is to use rather large prime numbers as ID tokens, and have a mapping from random number token to whatever ID number you use internally. If the tokenspace is sparse, then spotting modifications is trivial, since they (most likely) won't have mappings.
print "Yet another p{erl,ython} hacker\n",
All you have to do is scrape crappy Carlton cards for sappy sayings and you can get the email addresses of hundreds of unuspected lusers.
;-)
If there was a slashdot DDoS service, that'd page would be right at the top of my shit/wishlist. I'd better get cracking writing a smashing article for the front page.
Know any good dirt on 'em?
Fuck Beta. Fuck Dice
I have several email addresses that do absolutely nothing but get spam. They're the byproduct of examples in The Idocs Guide to HTML. I currently forward the email to /dev/null. I'd be happy to forward them to you instead.
I've found that my posts don't format quite right w/o a sig.
and forgot to emasculate my email address. Luckily, it was a generic slashdot@mydomain.com.
Well, my first clue that my article had been accepted was that when my "slashdot@mydomain.com" address started coming in with loads of spam (forwarded to my main address, which I quickly turned off).
Perhaps you should have put a link to email you in your article, I'm sure you'll be seeing lots of spam afterwards
It seems that even spammers do read slashdot, or at least have bots hoarding emails here... good reason for regular users to use an obfuscated email address...
Here's a neat trick that I figured out for building a "honeypot filter" that identifies and blocks all incoming mail that matches the spam harvested in a honeypot e-mail address before any e-mail is delivered to personal mail accounts. Since the honeypot address is used for nothing else but harvesting spam, using the spam received in the honeypot to identify and block incoming spam guarantees that there will be never be false positives (which is more than most filters can say). If the honeypot is being spammed by the worst offenders, you can be sure the spam that is being received there is being sent to millions of others. This honeypot technique is one of the simplest solutions for reliably blocking spam, but it is contingent on having the honeypot being very thoroughly spammed.
So, here's the hack for getting a honeypot address into the databases of real spammers.
First, you need an existing address that is thoroughly infested with spam. If you look at most spams, they usually have some thing at the bottom that says something to the effect of "click here to be removed from our mailing list."
In some of the spams that I've looked at, the link has CGI script variables in the URL. You'll probably see the e-mail address in one of the fields. Replace this e-mail address with the address of the honeypot address, and go to that site.
The page you go to will usually have two options: "remove me from your list" and "Please continue to alert me of special offers". Select the latter, and submit the form. The e-mail address you substituted into the CGI script will probably start receiving spam real soon.
Some spammers will spam you even more if you click on the "remove me" list, because it just proves that the address is live. Before you click on the link, copy it, and edit the field in the CGI script that looks like an e-mail address, substituting the honeypot address for the one in the link. Then, go to the URL and "remove" yourself. You are likely to just start getting spam in the honeypot, especially from unscrupulous spammers.
hmmmm... this must do something really interesting to the computer or disk to have a warning like that...
Next step would be to see if I could induce what the intent behind the restriction would be. If I couldn't reason it out, then I might be tempted to try to dupe the disc and put it in another computer (*Always* mount a scratch monkey.)
In fact, putting an admonition involving tech in front of a geek is like putting something bright and shinny in front of some people.
but on the other hand you just found a way to physically "tar pit" a geek for a better part of an hour....
______
Once: you're a philosopher. Twice: a pervert.
Okay, if you need spam:
(1) Get a Hotmail account, and send an email to the account that needs spam.
(2) Send lots of e-cards from different sources to yourself. Then recieve the announcement emails, connect through from that address, and read the cards.
(3) Get friends who have problems such that they keep installing Windows viruses to their computers [repeatedly!] to email your address once or twice.
(4) Look for info about the wthunk32.dll and c:\msdos.exe worm. Install that to a second computer, and make sure that the second computer has your target email address in its address book (and no other). You'll start recieving tons of spam, all nominally from different sources, but in reality from your infected computer.
Correct Horse Battery Staple: 72 bits of entropy. Enter "Correct H" into google. When it generates the phrase, that's
One of my customers buys low-priced secondary MX from us just in case something goes wrong with their main mailserver. (We also sell spam filtering service, but they weren't using it, preferring to do their own.) We started getting dictionary attacks with thousands of attempts per minute. Their main mailserver has a [brand name deleted] spam-filter box as the front end and an older Exchange server at the back end, and the spam-filter falls over and dies when we dump the whole load on them. And their exchange server is apparently too old and lame to hand us or their spam filter box a list of valid usernames, so there's no easy way to kill it off early, and their spam-filter box's alternative to reading every message is to blacklist our mail server in self-defense. (Unfortunately, they've got customers who use our mailfilter, so that fails too...) We're turning on our spam filtering for them and hoping the rule sets are good enough without bothering their legitimate users.
There are ways to reduce the problems - rate-limiting the connections from us to them would have done it, but that means that real mail can get trapped behind a few weeks' supply of dictionary-attack spam, so that was unacceptable, and doing _something_ to get a vaguely accurate user list is out of process for them, and buying a different spam filter box would make them feel dumb and grouchy, and putting a front-end spam filter box between ours and theirs will not only make them feel grouchy, it'll cut down on clues they've got about where mail comes from. Nasty stuff.
1) Web Forumes
.
2) Online Buy/Sell boards
3) Slashdot articles
Will get you about 60-70 per day
You want spam? Just post your email address in the threads on Slashdot :) You think we're a bunch of computer geeks posting these messages? Hell no, we're a bunch of spammers - this whole website is just a big ruse to harvest email addresses ;).
The hell it doesn't! I washed my car this afternoon, left the windows down so the doors would "air out" (some water always seeps past the seals), and within a matter of a couple hours it started pouring.
All my spam seems to come from a posting I made on comp.sys.sgi.marketplace, and a geocities web page I foolishly left an email address on. Luckily I used a made-up tracker email so it filters easily.
Try leaving your email address in a reply to one of the 'spambot snacks' or 'Warez list 200x' messages on usenet, or "unsubscribing" to a spam list if you really want spam.
She visited me recently and I watched her clear out her email. I don't know how it is possible to get that much spam. She had over 300+ new mails in ONE DAY.
She complains that I never email her. Well, I do, but it bounces back all the time because of her account limit. And even if it did go though, I doubt she would see it in that mass spam.
She wonders why I get angry when she puts my email in those "send this to a friend" boxes of an interesting site.
So just pretend to have an open mail server, and you can get all the spam you want, and harvest all the addresses you care about.
This is a great idea for constructing a Blacklist. Just set up a fake open relay, don't list it in any MX records so people have no business connecting to it. And Blacklist anyone who tries to send mail through it. Is anyone doing this yet?
1. You submit a patch to the developer of some open source webtool.
2. The developer adds you to his "Thank you to" list in the documentation - not by name but by email address.
3. Thousands of users of the webtool include the documentation, including your email address, on their websites.
4. ???
5. Profit
Worked for me. I destroyed my email address at work that way. Suddenly Google told me it was mentioned on thousands of websites.
And it was really an insignificant patch, not worth all that publicity.
I know about two effective ways to attract spam:
1. Use Hotmail. Register for an account, and spam will come your way. You don't have to do anything else.
2. Use your email address to get access to free (beer) stuff. I tried this with porn sites, and they keep sending me spam even though the address no longer exists and mail sent there is bounced.
Just my 0.02 euros.
Please correct me if I got my facts wrong.
cheers
dave
I used to have a better sig than this, but I got tired of it
Put your e-mail address on a high traffic web site with a mailto: link. Probably putting you're e-amil address in your slashdot signature and writing a lot of comments will help too. Spammers will eventually scan it and log it.
Much harder than it seems. A spam trap address can take months or even years to get up to the same levels of spam as other addresses.
Some techniques;
Unsubscribe the address.
Apart from proving that some spammers actually do harvest from unsubscribes, this method isn't very effective, because some spammers actually do remove you from their lists.
(of course, if you only unsubscribe addresses that don't get any spam, it can't get worse.)
Dictionary attacks. If you run a mail server, you will occasionally be attacked. Either pick easy to guess names, or accept any name that fits a rule. It's a good idea to always reject the first name (unless it's already in your lists) since some spammers start with a 'test' name.
Also, there will be plenty of names tried, so there's no need to accept a suspiciously high percentage. Choose a simple rule that rejects a fair percentage of the names.
For example, accept any name which has a '5b' as the last hex character when hashed.
If your server has any extra delays after a bad name, remove them.
Buy expired domains.
Some of my best trap addresses are from previously owned domains.
Posting to usenet.
I've not had much luck with this.
Posting to mailing lists.
This also seems fairly hit or miss.
Posting to websites.
Works eventually, but it can take a long time.
Setting them in Ineternet Explorer.
Some web sites have javascript that can grab your email address from your browser.
(bonus points if you write this up in a proposal)
When you get spam...
Read the web pages. Once you actually get spam, either read it in a browser, or download all the links with wget. Some spammers are paying attention, in particular it seems, the ones who sell addresses to other spammers.
Respond. When you get one of those weird messages like "Are you the same noc-staff I went to school with?" Respond with a simple "sorry, wrong guy."
-- this is not a
I used to work for an anti-spam company (called stamplets - now defunct). We did the same as you but found that the best way to get your email address onto spammers lists is to put it on a website somewhere. It took be 24 hours from hosting my current website to getting the first piece of spam!
Spam count has decreased due to Swen.
a previous slashdot article: http://slashdot.org/article.pl?sid=03/04/12/144220 6, studied just this topic: what kinds of activity lead to the most spam to an email account.
-duncan
Spam == undesired mail. so when want it, it is not undesired any more (and thus not spam). so that is why you don't get any spam!!
HOTMAIL
Half Time
Right. You should link to Scientology like this:
<a href="http://www.xenu.net/">Scientology</a>
Imagine that you make cars. You do so with the full knowledge that some of them are going to get into wrecks or be used by irresponsible drivers. How much responsibility do you have for making sure the cars you make are safe?
Well, if your cars are significantly more defective than average and you know it and you do nothing when you could do somthing, then you're certainly in trouble. If you're making Ford Pintos, and you know that a fair number of them will blow up when they get into accidents, even though those accidents are not directly your fault, you can still be held partly liable for the damage done.
But if your cars are less defective than average, it's unlikely that you'll be held responsible. Or to take it back to your example; you are responsible for following a reasonable standard of care with your guns, and that standard of care is very high. Knives would be a little lower because they're utensils. Computers have a pitifully low standard of care, if we're talking about the average user.
Ethics demands that we take reasonable precautions to protect others, even from their own actions, if we're involved with them. And those standards are typically based on societal norms. The question is, what society are you a part of; a society of average computer users or a society of geeks. Your answer to that would probably determine your ethical stance.
___
It's the end of my comment as I know it and I feel fine.
Use your email address while signing up for stuff at websites. Note that "privacy" statements mean nothing.
I'm also doing some research. Results to be published soon.
But I'm currently testing to see how "smart" the bots are.
You know how we all type "myemailATthissiteDOTcom and stuff like that. Well, does it really work?
You'd be surprised at what I've found out so far.
Anyhow.. using a default e-mail address as the baseline, I recieved the bank account scam in less then 2 days. But you need to be patient. It does take weeks for some of these lists to propogate, and your name to get added. But once it does, the flood gates open.
Carter
www.slightlycrewed.com - Because aren't we all?
Step 1. Find the CIO's email address. Also find the helpdesk emails, network managers' emails, and pretty much everyboard on the council's emails.
Step 2. Submit them to several natorious opt-out pages.
Step 3. Wait a few months.
Whalla. Policy goes from "Will not every filter email. If individual users wish to filter mail, they should consult their mail program's instructions" to "... includes several new headings to email using the Spam Assasin software. Instructions to filter your mail with several popular mail programs follow..."
If a train station is a place where a train stops, what's a workstation?
The page you go to will usually have two options: "remove me from your list" and "Please continue to alert me of special offers". Select the latter, and submit the form. The e-mail address you substituted into the CGI script will probably start receiving spam real soon.
But as soon as you tell the spammer you want their email, it's not spam anymore, is it?Hm... I wonder who owns the copyright of the spam that somebody receives. Would it be legal for him or her to sell it? ;-)
See these:
i c_ id=28
http://freshmeat.net/projects/seedspambots/?top
http://www.misel.com/
">.
This makes up an email address which includes the harvester's IP, epoch time and the page URL where it got it.
Replace the 123webhosting.org stuff with your domain.
Sprinkle this everywhere. Rinse. Repeat.
you may subscribe to ads at www.colonize.com
join as many yahoo groups as you like..
it'll start, trust me.
It also wouldn't hurt to go to some porn sites and request info from them. that'll definitely get the ball rolling.
Change a domain you might own so that your contact info has the desired email address that you want spammed. that'll help too.
getting an AOL account wouldn't hurt either..hehe..
... to send you mozilla junk learning data to us you had success.
sign(c14n(envelop(this)), x509)
Body: "help. it doesn't work"
And thats pretty much all thats in the email. HOW THE FUCK DO YOU WANT ME TO HELP YOU IF YOU DON'T TELL ME WHATS GOING WRONG?
Easy. You should reply this way:
Subject: Re: help
Body: "Fix it."
Singularity: a belief in the "God" idea with the "demiurge" relation inverted.
I used to receive very little amount of spam until I registered with PayPal.
Confidentiality, schmonfidentiality.
Artaxerxes
If you really want a lot of Spam, try posting to newsgroups whose topics are frequent subjects of Spam - try posting to penny-stock and other investing newsgroups for starters.
And make sure you follow all the links and open all the Spam you get- not on your primary machine, of course. Often they'll include images with an identifying filename that will tell them you've viewed it. If your bait addresses start popping up on their radar as someone who reads spam, you'll likely get bumped to the head of the line.
Last couple of suggestions - sign those guestbooks, and if you have an eBay account, change your user ID to one of those e-mail addresses, and place low-ball bids on a bunch of stuff you'll never win. Just remember that it'll be a while before you can change your ID again, and you'll have a history of ID changes that may not look good to future buyers and/or sellers.
666-607: 6th floor apartment of the beast
Publish a few Perl modules to CPAN.org. That's guaranteed to get you 30-40 spam messages per day. It worked for me, unfortunately.
The fastest way I found to get spam was to have my naked e-mail address on a web page. About a week later, I started getting spam. I had it like that for about 2 months, and now I get about 20 spams a day to that one e-mail address. I may have signed up for a porn site with that e-mail address too. About 50% of the spam I get for that address is porn spam.
Use the remove me url from any spam, put in your test address. Just make sure you are not clicking a link that sends them your real address in the url.
How come by personal account gets 100+ spam each day yet when I try to find it I get nothing?
d'uh! why not just use your personal account? If it is actually for research and not revenge then it seems to me that a real addy as opposed to a spam-magnet will make for much more realistic stats plus you've already got the spam there...
It takes time.
Sometimes posting in a newsgroup (especially a computer-related one) with your real address will cause targeted spam to arrive after a day or so, but you won't immediately get the real thing.
One of my addresses remained virtually spam-free for two years after I used it on a public mailing list for months (one of the mysql lists).
All that time, the address was sitting naked on the web, on three sites that copied messages from the mySQL lists (stealing other peoples' efforts to make their own site look like a good place to find information about the subject). Two out of those three sites still exist today and still carry my mails, without my consent, and without stripping the address: dbforums.com, and list.softwareliberty.org (on this last one the headers were altered to make it look like it came out of a usenet newsgroup, but it was an e-mail to the mysql win32 mailing list).
The messages are also archived (for everyone to search, and this I do find legitimate) on MySQL's own home site, but with the addresses stripped: something those others never bothered to do.
Back to the subject: about half a year ago, the first spam started to arrive. At first only some "buy ink here" in chinese.
Currently, it's getting the regular daily potion of porn & viagra spam everyone knows from his own mailbox.
The address hasn't been used in public lists anymore, *no* message was ever opened in a html-aware renderer so bug-bitmaps didn't have their address confirming effect, and no message was ever replied to, yet the volume keeps going up and up almost every week.
You (or better, your address) have to get into the circuit first. They probably keep selling it to each other, so more spammers get hold of it every week.
I guess If its available when you want it its not spam anymore ~G
Just post your email to slashdot.org. Oh yes, you :-)
just did
Online sweepstakes are a great spam generator. Sign up for Publisher's Clearing House and opt-in to everything.
Your fantasies contain the seeds of important concepts.
What about 1994 when we all used to work together?
Are evolving or degenerating? Some days I just want to turn off my net connection altogether and this is one of them.
Cuiusvis hominis est errare; nullius nisi insipientis in errore perseverare.
my father always complained about spam and the quantities he received, and i had almost none. One day, i signed up for Hotwire.com and within 24 hours i was getting 30 spams a day, and all the same stuff my dad gets. I will never use hotwire again.
Anything you say will be held against you.
ignore this, i'm just posting in a day-old thread to test my sig... sorry if you wasted time reading this! :D
The only suspicious place I knowingly submitted my email address to several years ago when I was unemployed and desperate for cash. I am still getting spam every day as a result even though I "unsubscribed" almost immediately. Before that, I never got spam.
MjM
Groovy. Gear. Mod.
XKCD:Xeric Knowledge Comically Dispen
I posted 3 messages on usenet (one of them on no.kultur.diverse, a really quiet place) in June, and since then I got al least 30 messages/day.
Lucky I made a trash address ad hoc for the 3 postings.
Why not just take a few seconds and sign up for a hotmail account. It's an instant spam catcher especially if you select all the spam boxes when you sign up! You'll start getting the get a bigger penis emails right out of the box!
1st known failed CIA coup in South America : http://www.chavezthefilm.com/index_ex.htm
This was modded as funny, but what do you think that people get on their system when they buy it from Dell? Do you think the first (or second, or third, or nth) thing that they do when they get it is patch it? They don't even have to install anything to have an out-of-the-box vulnerable system.
With all of the recent patching because of worms/viruses, I have been wondering why Dell (and all OEMs) aren't required to sell reasonably up-to-date patched systems. I've never bought one, so I don't really know, but don't they sell just plain, no SP, no patch versions of the OS on their systems? Hey, it would be a nightmare for them to install the OS and all required SPs and patches, but couldn't Microsoft provide them with a rolled up installer or image? Maybe they couldn't be up-to-the-minute on the patches, but they could be a lot closer than they are now. They are knowingly selling vulnerable systems.
My beliefs do not require that you agree with them.
...to alt.atheism and alt.fan.furry. You'll start getting spam up the wazzoo, much of it involving putting things up your wazzoo.
If you could actually be held responsible, then millions of old people would now be in court being sued over their completely unsecured computers sitting on their fat cable lines even now cranking out Code Red hits.
I had a hack come in on a box I was administrating, traced it back, figured out whose box it was, realized that it was just an exploited pedestrian, called the guy on the phone, and asked him to get it looked at. Got in a screaming fight with him, while he's threatening to sue ME for the whole (admittedly quasi-legal) process of figuring out whose computer it was.
Grrrr. I finally just hung up on him, and sent the logs and transcripts of the attack on my server to the local FBI office. I'd like to think they did something to him, but I doubt they did, and this kind of thing happens all the time.
ad logicam Claiming a proposition is false because it was presented as the conclusion of a fallacious argument.
Want Spam? Here's where to get it: http://emailrevenge.tk/
Fun for the whole family!
Easily the three best ways to collect spam are to create a hotmail account. Then register a brand new domain with that address publicly available. Then join match.com (I think they still offer a free trial of some kind) and watch the spam pour in.
My wife created a unique (with numbers) hotmail account when she joined match.com (we met on matchmaker.com) and used it only for that purpose. Today she gets hundreds and hundreds of spam on it even though it's been entirely inactive for 3.5 years!
Match customer service claims they don't sell addresses and that it's hotmail's fault. Either way, the two together seem to be a quite effective spam trap
Of course, if you're just looking for a corpus of spam to test against, there's plenty out there. Google for +"spam corpus" to find several good sites.
Hope that helps....
--D
Domain registration is also very good advice. Most of the spam I receive comes in this way.
-Don
Gun's are designed to kill. Computers are not designed for cracking/spaming/etc.
Aaaaaaaaaaaaaaaaaaaarrgh! It's just an analogy! Let's mad-lib it so that everyone gets the point:
If I have a [potentially dangerous tool] and I [perform an action which makes it accessable to dangerous or annoying people] for the purposes of attracting [one subclass of dangerous or annoying people] and [another worse subclass of dangerous or annoying people] gains control of the [potentially dangerous tool] to do [the naughty thing for which we fear them], aren't I partially responsible for [the naughty thing for which we fear them] because I let them have it?
The point he's making is that if you expose (action) your machine (tool) for the purpose of letting it get owned by spammers (subclass) and it gets owned by script kiddies (worse subclass) doing DDoS attacks (naughty thing), aren't you partially responsible for the damage by willingly giving your machine (tool) to them?
It's not that hard! While you could make the argument that people who don't keep up with their patches are also slightly responsible, he's not! He's only making the point that if you deliberately let your machine get cracked, you are willingly contributing to the problem.
If it's for-profit but free, you're not the customer -- you're the product (e.g., the Slashdot Beta's "audience").
There's a simple reason why:
Murphy's law states that if it can go wrong, it will. The desired result of your car-washing is to make it rain, so "going wrong" is it not raining, thus Murphy's law dictates that your plan will fail, and it will not rain.
by a similar reasoning, any attempt to use Murphy's law to your advantage is doomed to failure, by the very effect that you are trying to exploit.
corpseofjackieo@hotmail.com
Just install a few pieces of spy ware. Alexa Gator and Bonzy Buddy come to mind. Be sure and "register" the software with the email address and do some random web surfing at sites that offer products in a variety of categories that spam is known for. You should have a brimming in box in no time.
Because we use our email addresses for something. If you're not tyring to sign up for services that require you to submit an email address, you're never going to get spam. If a few words, you need to market yourself! Let the spammers know you're there. Search for "opt in" sites. See if that makes your unsolicited spam increase. Register accounts with hotmail, yahoo, etc. Hell, start an AOL account and have its mail forwarded. Sign up for a couple pr0n web sites (the free ones that just want you to put in your email address). Your address needs to be in the wild for awhile before it starts getting traded among all the spammers.
Seriously, I ran in 2002 and made the mistake of giving my prefered email address to anyone who wanted to contact me, of course, every newspaper in my district posted it on their website, leagues of voters same, etc.
I now get about 50+ spams a day... nicely controlled with spamassasin.
Just a thought.
I also downloaded an email harvesting program to test some anti-harvesting ideas on webpages. The user email buttons on each phpBB2 post are harvestable. I don't know how many people actually use the harvesters anymore, but some simple tests with the default settings on one thread gave me tons of email addresses.
I get about 200 per day. Is that enough? I can forward it all to you. Plus I also have 250 megs of spam (older spam) I've collected.
I just have to anonymously figure out how to contact you.
Also, the SpamBayes people must have a lot of spam they can give you.
Submit your name to all of the REMOVE lists. I guarentee it will make you very popular with spammers.
YOu can also get a Hotmail account. They are also wonderful spam magnets.
Here are two controlled studies of which activities attract spam, and how much:
"Why Am I Getting All This Spam? Unsolicited Email Six-month Report"
"The Great CNET Spam-off"
With a well-designed honeypot, with your example, the guns would appear to be real, would act like real guns unless you fire them, and might even shoot blanks to make you think you were firing them.
In otherwords, the box full of pinball parts that fooled some terrorists in Back to the Future would be an example of a crude if effective honeypot, had they used it as such. An actual bomb, not so good.
-Looking for a job as a materials chemist or multivariat
Any pr0n site i've visited (just out of curiosity, you understand) has usually resulted in LOTS of pop-ups at the time (usually when I try to leave the page), and then LOTS of unsolicited email a day later, some of which is impossible to un-register from.
just go sign up a new account for AOL Instant Messenger www.aol.com make sure to use the new email address for the account.. : )~
porn sites. ;>
I have 7 email addresses for different business purposes. The 2 Adelphia.net addresses account for 80% of the spam I receive, about 80 per day.
Gently reply
umm... why not slashdot? Give it to us, we'll get you some spam.
my karma will be here long after I'm gone
I've found through personal experience that Gator will get your TONS of spam. Go to Gator.com and download it from the machine you want the spam on. Guaranteed results