Slashdot Mirror


Spammers on the Run

ericald writes "An interesting update from Blue Security, the group that introduces the Blue Frog initiative to fight spam, claims that during the past few days at least one spammer had frequently deleted domains he owned as a result of their system. In another update in their blog they report they have already recruited over 21,000 users. It's about time spammers start feeling the heat! I'm just surprised they show results so soon."

66 of 297 comments (clear)

  1. Spammers fate by bigwavejas · · Score: 4, Insightful

    Spammers must realize by now they run an awful risk by having their true identities tracked down and then posted for punishment. It won't be long until search engines (Google, Yahoo, etc.) start compiling results for them such as, "Mr/ Mrs X Illegally spammed millions of people." Employers certainly will rethink hiring someone with such tainted credentials. It just isn't worth it nowadays to harass people with unwanted/ unwarranted emails. This is a resounding wake-up call for these cretins to rethink their ill-fated profession.

    --
    "Simplify, simplify, simplify!" Thoreau
    1. Re:Spammers fate by SFalcon · · Score: 5, Insightful

      When the spammers can afford to pay $7m to Microsoft, I don't think they need to worry about being hired by anyone.

    2. Re:Spammers fate by KiloByte · · Score: 4, Insightful

      Not really. The notoriety will give them some fame, and tell potential advertisers that those spammers know how to send spam in really large amounts.

      --
      The creatures outside looked from Alt-Right to Antifa; but already it was impossible to say which was which.
    3. Re:Spammers fate by crimson30 · · Score: 2, Funny

      Not every spammer is as successful as Scott Richter (who agreed to pay $7 million).

      Remember, he's not a spammer... he's a high-volume e-mail deployer.

    4. Re:Spammers fate by quasi_steller · · Score: 2, Interesting

      But wouldn't it be better to make spam unprofitable by creating better spam filters? This way so very few people even see the spam that no company will even invest in this sort of marketing anymore.

      --
      ...interesting if true.
    5. Re:Spammers fate by Dunbal · · Score: 5, Insightful

      Employers certainly will rethink hiring someone with such tainted credentials.

            I know we're living in the era where corporations and employers believe they have the right to do anything they want. But while refusing to employ someone on hearsay is within an employer's rights, there's a chance of shooting yourself in the foot and actually hiring the guy who was smart enough to cover his tracks, rather than the silly, average person whose box was "owned" and spammed without thier knowledge.

            Oh but we all know that search engines are infalliable and are the best way to screen a potential employee, right? Come on. If I can steal your identity and borrow money in your name, how hard can it be to spam in your name? Frankly this would not be an employer worth working for.

      --
      Seven puppies were harmed during the making of this post.
    6. Re:Spammers fate by tacocat · · Score: 3, Insightful

      I dunno.. If I was a greazy marketing type I would love to find someone who was a greasy as myself and this kind of Google information would be perfect. And you have a hard time using the word illegally on any of this since you would have to have proof. How many spammers have been convicted?

    7. Re:Spammers fate by tbarstow · · Score: 2, Funny

      What's really interesting about spam is that it must actually be somewhat successful, otherwise the spammers would have died out long ago.

      Who wants to buy Windows XP or enlarge their penis so badly that they are clicking links in unsolicited emails? Whoever you are, please stop, for the good of all!

    8. Re:Spammers fate by m2bord · · Score: 2, Insightful

      most marketing companies don't believe that there is such a thing as ethics and any method used to deliver your message is good so long as the ends justifies the means...ie..the message gets delivered.

      spammers know how to deliver messages and are thus very hireable. plus...while we know who these vermin are...and the marketing companies/employers know who they are...john q. public doesn't know.

      so what preventative is there to not hiring spammers?

      and don't get me wrong...i detest spammers and report/fight them as hard as i can but i'm being realistic.

      if the motivation to hire a spammer exceeds the potential downsides, a company trying to market a product or message would hire them in a heartbeat.

      --
      Is it 5:30 yet?
    9. Re:Spammers fate by xiando · · Score: 2, Insightful

      You are so right! "tell potential advertisers that those spammers know how to send spam" not only makes it simpler to get a job in related industries, but this is probably THE biggest client generator too. Hey, this guy managed to get is spam through my filter, heh, he must be good, eh? Why not hire him to send our company message to the millions, eh? aiiya, he probably makes this spam-advertised product sell, why not ours, eh?

    10. Re:Spammers fate by Dunbal · · Score: 4, Insightful

      that it must actually be somewhat successful,

            Of course it's successful. Any biological system obeys a gaussian or normal distribution. This includes patterns of behaviour in a population. There is always a bunch of people on the edge of this curve who will buy anything. The gullible, the impulsive, the mentally handicapped, the bipolars in their manic phase. If you spam enough people, you will hit enough of this extreme population to make a "business" out of it. What sucks is that the entire rest of the population who are not at all interested in the "product" will also have been spammed at this point.

            But the spammers don't care, all they want is cash. I wouldn't be able to live with myself knowing I did this for a living, but the spammers obviously have no problem with it.

            If the spammers were smart they would have a list of gullible people by now and target their population more intensly, to save on effort. You might as well bleed em dry, right?

      --
      Seven puppies were harmed during the making of this post.
    11. Re:Spammers fate by pete6677 · · Score: 2, Insightful

      Most employers wouldn't think twice about hiring spammers. Why would they care?

      Because somebody who has as little morals and ethics as spammers do will extend their beliefs into other aspects of life. A spammer wouldn't think twice about stealing from their employer if they think they wouldn't get caught. A spammer wouldn't hesitate to get the company in trouble over some shady deal if it means personal profit for them. When you hire a spammer, you can guarantee some sort of damage will be done due to this persons' complete disregard for other people. Some companies may not care about things like this, but many do.

    12. Re:Spammers fate by joto · · Score: 4, Insightful
      The "better" spam filters described by Graham are already getting pretty common in decent mail user agents. And yes, bayesian filtering works well.

      However, it will not make spam unprofitable. To make it unprofitable, the costs of sending spam must be higher than the money you get from it. So in some way, we need to increase the costs of sending spam, or reduce profits.

      The cost of sending spam is essentially zero. Sure, you may have to switch ISP once in a while, register some new domains, invest in some CDs with email-addresses, buy some software or consultants to infect machines, etc... But it really doesn't matter. Even with todays hostility towards spammers, the cost is still essentially zero.

      The profits of spam is:

      • price_of_whatever_you_sell * number_of_email_addresses * some_really_low_fraction
      where really_low_fraction is the number of idiots who fall for your scam.

      Bayesian filtering doesn't address either costs or profits. It does not make sending spam more expensive, and it does not change the some_really_low_fraction, because the idiots who respond to spam wouldn't be using bayesian filtering anyway.

      So Bayesian filtering is nice for the end-users who just want to get through their mail, but it doesn't really help solve the problem of making spam unprofitable.

    13. Re:Spammers fate by Yocto+Yotta · · Score: 3, Funny

      LOL, yes as we all know that Windows XP is only part of the cure for a midlife crisis and/or idiocy. "I love Windows, but it makes my penis look small. Ooh look, an e-mail just for me? How'd they know what I needed? This interweb is amazing!"

      --
      A B A C A B B
    14. Re:Spammers fate by mattspammail · · Score: 2, Funny

      Let's work the term "engineer" or "specialist" in there somehow.

      How do these sound?

      • Port 25 marketing specialist (PMS - my favorite already)
      • Annoyer via e-mail (AVE)
      • Canned meat over e-mail specialist
      • your ideas?
      --
      Now accepting PayPal donations!
    15. Re:Spammers fate by Vlad_the_Inhaler · · Score: 3, Insightful

      In other words: the Microsoft approach is the best one. Go after the barstewards and make them pay.

      Part of the problem is the legal framework, unsolicited mass mailing needs to become 'more illegal'. Paying someone else to spam needs to be targeted, if a company in the US pays someone in Uzbekistan to send spam, that company in the US has to suffer. Follow the money.

      Blacklisting entire countries is a different approach, once strong anti-spam laws are in place in some of the main jurisdictions, recalcitrant areas can be *persuaded* to adopt/enforce similar measures by blacklisting. That blacklisting has to be done at the ISP level though, not by law.

      --
      Mielipiteet omiani - Opinions personal, facts suspect.
    16. Re:Spammers fate by jeremy_faller · · Score: 2, Informative
      I don't know where you got, "Any biological system obeys a gaussian or normal distribution. This includes patterns of behaviour in a population." That is not necesarily true, as you haven't demonstrated independence of the "random variables" in your biological system.

      IANAS(tatistician), and I admit you will see the central limit theorem take over in some aspects of human behaviour, but I'm pretty sure I can so show some correlation in others.

    17. Re:Spammers fate by bluGill · · Score: 2, Insightful

      He can declare bankruptcy. However that won't matter much. Bankruptcy just turns your bills and assets to the courts. The court then decides how to pay your bills for you. First the lawyers get paid (of course), then all court judgments get paid, next secured loans, then unsecured loans. (I'm likely to have missed something in there) The court can sell anything (often with exceptions like your house, but this varies from state to state) to raise funds.

      Bankruptcy isn't a free way to get rid of debts and keep everything you have. It is a way to start over from scratch. Own nothing, owe nothing, bad credit rating, but at least you are not getting phone calls/letters about bills you can't pay.

      Beyond that, not all debts can be gotten out of. You cannot get rid of child support with bankruptcy. The court is unlikely to let your out of a judgment. You cannot get out of credit card bills.

      If Richter can come up with 7 million he will pay, no matter what is involved in coming up with it. The question is can he then afford to pay off everyone else he owes?

    18. Re:Spammers fate by Flendon · · Score: 2, Interesting

      Annoying Commercial Emailer: ACE has a more positive tone to it that the spammers would flock to and everyone prefers acronyms that spell words.

      --
      chown -R us ./base
    19. Re:Spammers fate by robogun · · Score: 2, Insightful

      But the spammers don't care, all they want is cash.

      It's more than that. Everybody wants cash. But spammers are psychopaths who see themselves as more valuable than all other humanity put together, and do not care if the $1000 they earn by spamming actually costs others $1,000,000.

      The world is much better off if they were locked up permanently or dead.

      Similarly, any company which hires such people is probably also better off missing.

    20. Re:Spammers fate by Dunbal · · Score: 2, Insightful

      I don't know where you got, "Any biological system obeys a gaussian or normal distribution.

            Med school, biostatistics and epidemiology classes and years of experience dealing with biological systems like "human beings"? There may be a few exceptions, but as generalities go, it's a pretty fair statement. We are all somewhere on the Gauss curve. Most of us are in the middle.

            In fact, central tendency is so strong we even look for it instinctively. Why do you think that people gamble, or play the lottery, knowing that their lucky number just "has to come up" because it has been so long since it hasn't? Sometimes it's hard for us to recognize independent events for what they are because of this "built-in" bias we have.

      --
      Seven puppies were harmed during the making of this post.
    21. Re:Spammers fate by budgenator · · Score: 2, Interesting
      In many jurisdictions it's not illegal to send unsolicited bulk email
      WRONG, it's a violation of federal law, specificaly a violation of the federal anti-junk fax law, computers are capable of sending and recieving faxes, violators are subject to a $500.00 fine per message.

      47 U.S.C. Section 227. Restrictions on Use of Telephone Equipment
      (a) Definitions. As used in this section -
      (2) The term ''telephone facsimile machine'' means equipment which has the capacity
      (A) to transcribe text or images, or both, from paper into an electronic signal and to transmit that signal over a regular telephone line, or
      (B) to transcribe text or images (or both) from an electronic signal received over a regular telephone line onto paper. ...
      (4) The term ''unsolicited advertisement'' means any material advertising the commercial availability or quality of any property, goods, or services which is transmitted to any person without that person's prior express invitation or permission. ...
      (3) Private Right of Action. A person or entity may, if otherwise permitted by the laws or rules of court of a State, bring in an appropriate court of that State -
      (A) an action based on a violation of this subsection or the regulations prescribed under this subsection to enjoin such violation,
      (B) an action to recover for actual monetary loss from such a violation, or to receive $500 in damages for each such violation, whichever is greater, or
      (C) both such actions.
      If the court finds that the defendant willfully or knowingly violated this subsection or the regulations prescribed under this subsection, the court may, in its discretion, increase the amount of the award to an amount equal to not more than 3 times the amount available under subparagraph (B) of this paragraph.
      see Junk Fax Law for complete verbage.
      --
      Apocalypse Cancelled, Sorry, No Ticket Refunds
  2. Excuse me... by JonN · · Score: 2, Interesting
    Is it just me, or does anybody else think that these attempts might show some promise, but in the long end probably won't work. Basically this is the spamming world versus an organization which, in reality, uses spam right back to get the results they wish. Yes yes, I know you will all say they are using spam in the 'name of good' and all that, however, an organization without political ties will not be able to battle all those companies responsible for the spam in the first place. Until we see more government movement against spammers, I don't see much of a dent on the spam I am getting in my Inbox...

    ...Unless of course Blue Security would like a list of the spammers who are filling my email, then perhaps I will change my opinion ;)

    --
    do.what.promptcmds
    1. Re:Excuse me... by hackstraw · · Score: 2, Interesting

      Is it just me, or does anybody else think that these attempts might show some promise, but in the long end probably won't work.

      This may not work. I don't know.

      The thing here is that there are basically 3 types of SPAM.

      1) Annoying mails from a legitimate company that you may or may not have explicitly told them they could spam you, or you are just being punished for being their customer. The difference here is that they _DO_ comply with opting out.

      2) Annoying mails from a semi-legitimate company that will not unsubscribe you without physical intervention with a baseball bat. Ticketmaster is a prime example of this, and my baseball bat is ready.

      3) Annoying mails from a non-legitimate company or other entity, often outside of your country, that will never stop sending you more and more mail until your email address does not work. Even then, they will probably send mail, it just will not be delivered.

      Number 2 is very annoying, but hey, maybe I will or some bozo like me might actually want to see Britney Spears someday, and a reminder that she is coming to town from Ticketmaster will bring out my weakness for such a thing. You never know.

      Number 1 is tolerable.

      Number 3 is not. This is were all of the phishing scams come from, the V_1_@_G_8_A, the black market software sales, rolex watches, pr0n, Nigerian scams, and whatnot. These mails often have either a deceptive subject and/or to or from address. The domain names are registered in bulk and do not have an index page at the top level of the website. The domains often have inaccurate information in the registrar's records. The products are either nonexistent, illegal, quasi-illegal, or simply a front to confirm your address so you will get more.

      There are 2 things in common with the Number 3 group that do not exist in the others. A need for anonymity via email and the web as part of their "business model" and a need for that 1 in a million sale to that 1 in a million moron, so a million mails are required for one sale, and X times a million mails for enough sales to make money. In my opinion, if registrars did their job by validating the authenticity of a domain name request, a vast majority of the spam domains would no longer exist.

      I don't get hardly any spam in my inbox because of a tuned installation of spamassassin. I've also reduced the amount of incoming spam by using spamgourmet from http://www.spamgourmet.com/. Its an excellent way to easily and dynamically create disposable addresses that will not receive spam after a configurable number of mails have been forwarded to you. It also lets you look to see who has tried to spam you! So far, the leader is the email address I used for an NYTimes registration. About 40 mail a month try to get to that address (I just use one of those random ones now).

      I hate spam. I will foe anybody that puts spam in their slashdot sigs like for the "free" stuff like iPods or Minis. I have nothing against you wanting to make money, but if I'm not interested in either your product or helping you make money and I ask you to leave me alone, do it. DO NOT SHOUT LOUDER THINKING I WILL NOW RESPOND. DO NOT KEEP SHOUTING AND SHOUTING LOUDER THINKING I WILL RESPOND.

    2. Re:Excuse me... by C0deM0nkey · · Score: 2, Insightful
      Bad points...

      Did you take a look at the Blue Security site and see how their technology works? The spammers are not getting spammed in return...the Blue Frog program essentially sends an automated "Opt Out" to the spammers; if they fail to respond and the recipient continues to receive mail from that spammer then Blue Frog submits complaints to the MERCHANT SITE.

      I would hardly call any of this vigilantism. One spam - one opt-out request. Continue to ignore those requests? Complaint to the merchant paying the spammer to spam.

      Sounds like a great solution. I wish they made a linux client.

      ...then the government involvement will probably have a negative effect on all of us.

      Some people would say that the "government involvement" has already had a negative effect.

    3. Re:Excuse me... by Anne+Thwacks · · Score: 2, Informative

      Shame the web site doent make that a bit clearer. And also how to sign up for the service. It just tells you how to become a member, and explains that that is not how you sign up for the service.

      --
      Sent from my ASR33 using ASCII
    4. Re:Excuse me... by Tony+Hoyle · · Score: 2, Insightful

      i used to send a newsletter to roughly 500 addresses, some of which were opt-in and some of which were scavenged by other methods. As the merchant, I always took the "take

      So you're a spammer. End of conversation. FOAD.

  3. That's funny. I'm still getting spam. by bigtallmofo · · Score: 4, Insightful

    I'm amazed at Blue Security's success. They've gotten a few spammers to shut down a few domains.

    The odd thing is, I'm still receiving as much spam as I've always received. No matter how many tens of thousands of users they sign up for this process, I fear this is going to be a very small drop in a very large bucket.

    --
    I'm a big tall mofo.
  4. Blue Security by kevin_conaway · · Score: 4, Informative

    For those that don't know what Blue Security does, see this thread.

    Basically, they DDOS spammers websites in hopes that they will shut them down.

    1. Re:Blue Security by rcamera · · Score: 2, Funny

      so upgrade your win98 box to 2000... what's the problem?

      --
      Wave upon wave of demented avengers March cheerfully out of obscurity into the dream
    2. Re:Blue Security by amliebsch · · Score: 3, Interesting
      How is Option #2 any different than the sit-ins done during the 1960's civil rights movement to businesses in Alabama?

      Those are lauded in all of the history books as an application of peaceful economic pressure.

      Peaceful, yes; lawful, no.

      --
      If you don't know where you are going, you will wind up somewhere else.
  5. Re:what do they do? by shawnmchorse · · Score: 3, Insightful

    I actually sat through a Flash animation because I was wondering what the heck they did. And... I still don't know.

  6. Re:what do they do? by CDarklock · · Score: 5, Informative

    Blue Frog essentially responds to spam with complaints. So spammer X sends fifty thousand spam mail messages to Blue Frog users, and he gets fifty thousand complaints back. It's an eye-for-an-eye technique done properly: one spam, one complaint.

    I see this as having two major effects. First, it keeps the spam away from you. Second, it informs the spammer that nobody read his spam. Spammers *depend* on human beings reading their spam. As long as nobody reads it, nobody buys.

    --
    Microsoft cheerleader, blue flag waving, you got a problem with that?
  7. Running out of hiding places by Iriel · · Score: 2, Insightful

    I liked the mention of the domain registrar taking up a zero-tolerance policy after the spammer shut down their domain. I'm starting to think that with more people around the world getting online, more people around the world are getting sick of spam. This could help us eliminate some of those off-shore servers that spammers love to hide behind.

    Give everyone in the world email for a week and then see all the government action we desperately crave ;)

    --
    Perfecting Discordia
    www.stevenvansickle.com
  8. Anti-Blue Frog by JonN · · Score: 4, Informative

    An interesting article over at TechNewsWorld about how Blue Frog is not what we need in the battle against spam. "It's the worst kind of vigilante approach," said John Levine, a board member with the Coalition Against Unsolicited Commercial E-mail. "Deliberate attacks against people's Web sites are illegal."

    --
    do.what.promptcmds
    1. Re:Anti-Blue Frog by darkmayo · · Score: 4, Insightful

      Personally I think the "worst kind" of vigilante approach would be getting the spammers home addresses and savagely beating them... or killing them. I dont think DDOSing some spammer pricks domain is that bad if you compare what could happen to these people.

      --
      "I am a kernel in the linux army"
    2. Re:Anti-Blue Frog by Quiet_Desperation · · Score: 5, Funny
      Personally I think the "WORST kind" of vigilante approach would be getting the spammers home addresses and savagely beating them... or killing them.

      You misspelled "best".

    3. Re:Anti-Blue Frog by RealAlaskan · · Score: 5, Insightful
      Personally I think the "worst kind" of vigilante approach would be getting the spammers home addresses and savagely beating them... or killing them.

      Isn't that spelled ``best''?

      Seriously, the grandparent post refered to this as a DDOS. If the spammer sends me an email, he's certainly got no right to complain if he gets one back. If he gets enough back to shut down his website, well, he shouldn't have sent so much spam, should he? My understanding is that Blue Frog tries to send an unsubscribe message for every spammed address (their website is slashdotted)? If so, the spammers have already announced their willingness to get that message, and it is obviously legal.

    4. Re:Anti-Blue Frog by darkmayo · · Score: 2, Insightful

      I dont recall saying I advocate this type of action at all but considering people have been beaten or killed for less I could see this being something that may happen.

      Spammers arent unreachable targets either ,they are surrounded at all times by security or bodyguards (well maybe a paranoid few are) they are average joes for the most part how hard would it be to stalk one of these people beat them down and get away with it.

      --
      "I am a kernel in the linux army"
    5. Re:Anti-Blue Frog by Dunbal · · Score: 2, Insightful

      LOL!

            Stands to reason that you got modded Troll. I mean, what kind of person stands in front of an angry lynch mob and says "now now, don't you think a few hours of community service would be more appropriate?".

            I understand your reasonable view. Killing someone for spam is not an alternative. But this is not the time or place.

            (Grabs pitchfork and torch again and resumes up and down motion).

            "Yeah, burn the spammers, burn em slowly!"

      --
      Seven puppies were harmed during the making of this post.
    6. Re:Anti-Blue Frog by Jim_Callahan · · Score: 2, Insightful

      One reply to a recieved spam is a deliberate attack now? I think that if you send out two billion e-mails, the only person making an attack on your web server is you.

      --
      ...it's really a sad day for America when we require a goddamn ACT OF CONGRESS to make our DVD players work properly. ~
    7. Re:Anti-Blue Frog by wohlford · · Score: 2, Funny

      Puts a new meaning to the term "Feeling Blue."

      --
      Jason Wohlford
    8. Re:Anti-Blue Frog by Seanasy · · Score: 3, Informative

      TechNewsWorld? Ah, one of those ECT publications. They have such esteemed writers as Maureen O'Gara on their payroll. Their publications are barely news and frequently contain some form of troll or flamebait to get them posted on Slashdot.

      If you thought ZDnet was crap, ECT makes them smell like roses.

    9. Re:Anti-Blue Frog by jcr · · Score: 2, Funny

      or "Most Effective"..

      -jcr

      --
      The only title of honor that a tyrant can grant is "Enemy of the State."
  9. The missing link by erykjj · · Score: 2, Informative
  10. domain names by dotpavan · · Score: 2, Funny
    look at the domain names, makes a good read..

    asdlkjfea.com, alsfajega.com, aksdfaewl.com, hkassautdn.com, egmymaridjk.com, lhperdixnd.com, clthriftbf.com, bibiae.com, romisingfeasibility.com, betheuplift.com, fundamentalstojoy.com, dealandvaluematch.com, valueandassets.com, oursuperbiz.com, and best of them: truthfoundhere.com

    maybe spamfoundhere.com?

  11. Nibbling by dal20402 · · Score: 2, Insightful
    This is nibbling around the edges, but nothing else is possible, so we should keep doing it.

    Sue/fine/arrest/jail spammers? They'll move abroad where we can't find them.

    Get a legal framework that will be enforced in all the countries connected to the Internet? Good fscking luck.

  12. System Requirements? by Grimster · · Score: 3, Insightful

    I just hit the "join beta" link and didn't fill out the form, on the page you signup I see:

    System Requirement

    Windows 2000/2003/XP

    Ok so I'm out, last windows I read email on was Win95 or maybe Win98, some bullshit virus or another screwed me over, I ain't "done email" on Windows of any type since. Oddly enough, I haven't had any viruses, spyware, adware, or malware since then either.

    So while I applaud efforts to reduce spam, efforts that requre Windows seems silly at best and are efforts I can't join in on. Even my wife no longer reads email on Windows, the last time her Windows PC slowed to a crawl due to spyware instead of spending 3 or 4 hours googling for the latest cleaners and finding out what new and not at all entertaining spyware she had, I said "fuck this' gave her my new and as yet unpacked Mac Mini and she hasn't had any spyware problems since. Ripped her PC apart and installed Linux on it to replace my laptop as my main "work" pc.

    --
    --- www.f-theocean.com
  13. Re:what do they do? by L.+VeGas · · Score: 5, Funny

    What does this blue frog inituative do thats so magical to get rid of spammers.

    You really don't know? Geneticists have engineered a breed of frogs that subsist entirely on Spam. An interesting side effect is their attractive blue coloration.

  14. Foot, meet bullet by Tackhead · · Score: 4, Funny
    > An interesting update from Blue Security, the group that introduces the Blue Frog initiative to fight spam, claims that during the past few days at least one spammer had frequently deleted domains he owned as a result of their system. In another update in their blog they report they have already recruited over 21,000 users. It's about time spammers start feeling the heat! I'm just surprised they show results so soon."

    An interesting update from Spammers-R-Us, Inc [...] In another update in their blog, they report they have already gotten over 21,000 Slashdotters to hit the Blue Frog site. It's about time spamfighters started feeling the heat! I'm just surprised they show the results within 20 posts on the thread!

    - with apologies to the original article poster :)

  15. Realistic View? by Saeed+al-Sahaf · · Score: 2, Insightful

    I'm sure all the Chinese, Polish, and Russian spammers are shaking in their boots. For them, there will never be a solution other than IP block banning and similar measures. If you have the time and energy to waste on "dealing" with this group, more power to you, but I'm done even thinking about them.

    --
    "Who are in control, they are not in control of anything - they don't even control themselves!" - Glen Beck
    1. Re:Realistic View? by Rev.LoveJoy · · Score: 5, Insightful
      I think by and large most corporations are taking this tack in dealing with spam sent to their MTAs. If you do not do business with that country, ban their IP block. This is an inexpensive 100% solution to spam from overseas.

      Public ISPs, universities and government centers do not (and can not) take this route. So these orgs must take another path towards dealing with international spam.

      Filtering works. Greylisting works. These technologies help a great deal against the zombie armies everyone said would be unstoppable spam sources.

      I am glad you have a solution which works for you (and to some extent, I agree with your soultion), but I would hate for the balkanization of the Internet to come about due to the misbehavior of a few rotten apples. I think there must be a better way.

      Cheers,
      -- RLJ

  16. A better idea by Quiet_Desperation · · Score: 4, Funny

    I propose the Blue Steel program where spammers are hunted down like animals. Sponsored by Colt. Successful hunters will be allowed to mount the heads on their walls.

    1. Re:A better idea by deathy_epl+ccs · · Score: 2, Funny

      They seem to be having smashing success with the pilot Blue Steel program in Russia. I suggest we hire some consultants from Moscow and fly them over to help us implement our instance.

  17. Make them run using Postfix? by xiando · · Score: 5, Informative

    smtpd_sender_restrictions = reject_unknown_address
    smtpd_recipient_restrictions =
    permit_sasl_authenticated,
    reject_non_fqdn_sender,
    reject_non_fqdn_recipient,
    reject_unknown_sender_domain,
    reject_unknown_recipient_domain,
    reject_unauth_pipelining,
    permit_mynetworks,
    reject_unauth_destination,
    reject_rbl_client ombie.dnsbl.sorbs.net,
    reject_rbl_client relays.ordb.org,
    reject_rbl_client opm.blitzed.org,
    reject_rbl_client list.dsbl.org,
    reject_rbl_client sbl.spamhaus.org,
    permit

    We are also using SpamAssassinn / razor / clamav using amavisd-new. The main mail account used for everything from clients webmaster@ mail to contact@ are getting numerous spam daily, yet only three or perhaps four a month get delivered... and those are added to our body_checks.txt which is publicly available for download by anyone, including spammers who I have a feeling makes spammers think twice and clean us off their list when they find themselves listed there using search engines etc.

  18. This gives me an idea... by Locke2005 · · Score: 3, Funny

    Just as a proof of concept, would somebody please start sending out millions of "fake" spam messages, all with links to every one of SCO's web pages? Thanks!

    --
    I've abandoned my search for truth; now I'm just looking for some useful delusions.
  19. Kill profits by consuming resources by G4from128k · · Score: 4, Insightful

    Blue Frog is effective because it consumes spammer's resources -- it raises the costs of being a spammer. Spam filtering does not reduce spammer's profits in that the same people that filter spam were never likely to visit the spam site and purchase. Filtering doesn't change spammer's revenues or costs.

    In contrast, a bot that visits a spammer's site consumes the spammer's valuable resources in far greater amounts that is consumed by the original spam e-mail (spam emails often being under 10kB and sent via low-cost zombies vs. 50kB or 100kB for most web pages begin hosted on the spammer's e-commerce site).

    --
    Two wrongs don't make a right, but three lefts do.
    1. Re:Kill profits by consuming resources by sploxx · · Score: 2, Funny

      I think so, too.
      And, as far as I can see, the most important resource consumed is the spammer's time to sort the replies to his/her which MAY BE LEGITIMATE.

      Doesn't sound that familiar?

      Maybe spammers will use some modified version of spamassassin to filter for replies to their spam :-)

  20. Re:That's funny. I'm still getting spam. by ameline · · Score: 4, Funny

    Of course I'm sure you don't find it at all ironic that you include spam in your very own signatture line, do you?

    feh.

    --
    Ian Ameline
  21. Re:Russian spammers fate by Ilikeions · · Score: 2, Informative

    Whot about the bloke in Russia who got 'blown away' with a gun for excess spamming?

    Vardan Kushnir was beaten to death as the result of a botched robbery. That he was a prolific spammer was incidental.

    From InformationWeek:

    According to the Kommersant, a Moscow newspaper, police said Kushnir met three women in a club, and invited them to his apartment. The women then spiked his drink, but when Kushnir woke up to find the women's accomplices taking credit cards, a laptop, money, and other items, he was bludgeoned to death, the paper said.

  22. Re:Good old detective work for a chance? by ocbwilg · · Score: 2, Funny

    It's amazing, isn't it? You're connected to the Internet, the world's single largest source of information on nearly every conceivable topic, and you couldn't be bothered to take 2 minutes to actually look up the topic being discussed before commenting on it.

  23. Don't give it out... by adnausium · · Score: 2, Insightful

    I kneow SPAM is a huge problem world wide. However i dont get why people dont learn from thier mistakes. In the late 90's I used to have tons of SPAM arriving in my inbox. Since then i now keep three email addresses; one for personal contact, one for doing online transactions and one for filling out online forms (like contests & website registration). Since then i have had no SPAM in my 2 main accounts and very little (cause im very picky about the places i register) in the account i do give out the address to. Im glad that there are businesses and government efforts to combat SPAM but some of the responsibilty can still be layed on the shoulders of the fools who continue to give out their address to every ipod give-a-way website they see. Come on people, wise up. Help these do-gooders help you!

    --
    Don't ya hate it when the correct spelling of your favorite screen name is taken?
    1. Re:Don't give it out... by SCHecklerX · · Score: 2, Insightful
      well, you must not have many online safe-computing-challenged friends then. Most of my spam is the result of my address being in a friend's address book when they get hit by a worm/virus/trojan.

      I also run mail lists, which adds to this problem

      But running my own server with mimedefang + spamassassin makes life somewhat like it was pre-1994.

    2. Re:Don't give it out... by HermanAB · · Score: 2, Insightful

      Yeah well, you are only considering your personal problem. If you own a domain, then that domain is subject to dictionery attacks. I receive hundreds of thousands of crap messages each day addressed to my domains. Only a handful of those have valid addresses. Also, if you run a business, then you have to have easily accessible addresses such as sales@, info@, hr@ and so on. Keeping crap out of those addresses is a huge problem. My mail server rejects up to 64000 crap messages per hour - probably because that is the limit - the max that the machine can handle...

      --
      Oh well, what the hell...
  24. Re:what do they do? by Fordiman · · Score: 5, Informative
    Almost. The process works as such:
    For each e-mail address you regiester with Blue Frog, they create a honey pot account and seed the internet with it.

    Each spam that honey pot gets is entered into a database, based on links contained, ip address sourced from, etc.

    Humans look over the databased data, using it to find out who the source of common spams are (not the spammer, but the company who hired them).

    Then, for each spam from that company found in a honey pot, a complaint is programmatically sent from the BlueFrog software that sits on the honey pot owner's client computer.

    Essentially, it's a set of software that allows you to complain about spam in an organized way without actually having to do the investigation, etc yourself. Further, since it keeps all information to just the honey pots' data, if the spamming company decided that your complaint is evidence that you want more spam, they get complained against further. The more users that are members of the Blue Community, the more damaging this is to the offending company.

    Spamming is cheap, and virtually without risk. Essentially, this is a legal way to shift reality so that it's more risky to pay a spammer for your advertising.

    Yes it's legal. No, it's not spamming the spammers. They only get one complaint per spam recieved. You'd do it yourself, given the time to do so. Meanwhile, you've explicitly installed a piece of software to do it for you. If that breaks their server, well they probably shouldn't be sending so much goddamn spam.

    --
    110100 1101000 1101000 1100110 0 1101111 1101000 1100011 1
  25. False "Results" by Caveman+Og · · Score: 2

    Spammers change domains the way normal people change underware. The fact that within a few days of Blue Security sending their malcious complaints to a spammer's website (which is set up on a throw-away account at a Chinese ISP, registered through a reseller for one of the minor registrars, who will, in three days, cancel the domain registration ANYWAY), is not evidence of ANYTHING.

    Correlation is not causation!

    Spammers have been rotating through domain names for years now. You can watch it on a week-by-week basis, as a whole series of domains with the same nameservers takes responses for the same spam months on end. Even when the spammers change nameservice, they tend to do it in predictable ways.

    In one week's time Blue Security has manages to slightly ruffle the feathers of a total of THREE distinct spam operations. Big whoop.