Skip to main content
GameDev.net gamedev.net
🔒 Locked

Reverse Spam?

Started by griffenjam Jan 28, 2004 at 11:43 AM 14 replies 550+ views
Original Post
griffenjam
griffenjam
I was thinking about writing a program that crawl the sites advertised in the spam I recieve looking for e-mail addresses, and send an e-mail inquiring about their services, with a faked return address. If I were to get enough people doing this do you think it might be effective in stopping (much) spam? I think it might. Companies use spammers to find business, but if it gets to where they are wasteing too much time dealing with fake e-mails they will ahve to find some other way of doing things.
VenDrake
VenDrake
I''ve had this thought. I would attach large (several megs) bitmaps reading "PLEASE STOP SPAMMING". And send them every 10 minutes or so.


-----------
VenDrake

"When you and a friend are being chased by a King Cheata, you have but one chance, trip your friend."
-------------VenDrakeTo understand recursion, you must first understand recursion.
Facehat
Facehat
Most spammers don't provide any sort of real contact address, so trying to spam them back would be useless.

I think a better approach would be to use Bayesian filters that crawl to any links provided and also analyze those pages, which will help stop spam like:

quote:

Hi,

I thought you might find this interesting: [link to spam site]



Also, as an added benefit, it'd raise bandwidth cost for spammers by a *lot* if almost every spam they sent resulted in a hit on their site, but it wouldn't cause any harm to non-spammers (well, except for newletters, but you'd want to whitelist anything you're subscribed to anyway so that it doesn't get junked if it contains ads).

----------------------------------------
"Before criticizing someone, walk a mile in their shoes.
Then, when you do criticize them, you will be a mile away and have their shoes." -- Deep Thoughts
"If you have any trouble sounding condescending, find a Unix user to show you how it's done." - Scott Adams
FaceHat Software -- Wear the hat.


[edited by - The Senshi on January 28, 2004 2:00:52 PM]
dede
dede
Some spammers don''t use real address, although most do.

If you try to email one, you''ll either
1. Email a victim the spammer selected at random.
2. Get a MLM scheme pitch.

Yeah, if you email enough spammers, you''ll find out that quite a few have a script that reads you email and sends you information about a get rich quick scheme.

My brother spent the summer tuning his non-existant l33t skills by tracking down spammers. He started with the social engineering approach, but all he got were these sorts of schemes, where he''d open his computer up for spam in exchange for a couple of dollars.

Which would add up FAST!!

He never went through with it, because the spammer sent him software and a promise for money, but no contact information.
griffenjam
griffenjam
I guess I didn''t really explain my idea well.
The program doesn''t e-mail the spammer. Spammers work for others to generate revenue/traffic for companies. Notice that all spam will link to a website that will try to sell someting, almost all website will have an e-mail address somewhere on it. Use that e-mail addy. It''s no the spammers, but the people that are paying the spammer, so it''s even better. If the company gets too much noise in their mail then it''s not worth it to spam.

It ruins the reason spam works, if you send 1,000,000 mails, and only 1% respond, you are making money. If all million resond and 99% are bogus then you can''t sort out the 1% that arnt.
monkeyman
monkeyman
Maybe we could start a list..all could participate

"Like all good things, it starts with a monkey.."
"Like all good things, it starts with a monkey.."
krez
krez
i thought it would be nice to have central server/website for collecting the URLs that SPAM sends you to... people could submit their SPAM for the database, and everyone can click on the links to bring their servers to a halt. a program could do it, but then it is getting into illegal territory.
--- krez ([email="krez_AT_optonline_DOT_net"]krez_AT_optonline_DOT_net[/email])
dede
dede
quote:
Original post by griffenjam
It ruins the reason spam works, if you send 1,000,000 mails, and only 1% respond, you are making money. If all million resond and 99% are bogus then you can''t sort out the 1% that arnt.
Well, mailbombing is against the law, kinda.

Plus, there are filters for that sorta thing.



~~~~~
"First off, kneel when you speak to me..." - Programmer One
Download and play Slime King I.
coldacid
coldacid
Is there not a list online of major spammers and their domains? I wonder why nobody has started a worm to DDoS the spammers. I''m certain that Novarg could be used for this, just change the target of SCO to spammers.

However, one must be aware that the average major spammer has a lot more bandwidth than SCO. But if other spammers could be tricked into DDoSing them too...


Christopher S. ''coldacid'' Charabaruk <chrisc*meldstar!com> [journal]
Meldstar Entertainment - Creation, cubed.
maxd gaming
maxd gaming
WARNING SILLY IDEA:


[silly idea]
Why not make an add-in for outlook or [insert the non-microsoft email client you guys use here], which takes the emails, opens the links... downloads the pictures (just to internet temporary), deletes them, and downloads them again a few times, do this for each piece of spam and you have 1000x''d their bandwidth cost... distribute this around and there you have it...
[/silly idea]

Might work...

P.S. I am sick so don''t listen to me







It''s Maxd Gaming, put in an underscore and I will beat you with a rubber ducky!
{ My Site! - Banner } { My Site! - One time popup }{ My .Net Information }{ A upcoming space RTS codenamed Gruntacktica . }{ . }

Not following the new trend:
Looky here mommy! No cow pic!


Phoe''s Forums
coldacid
coldacid
You'll be kicked off your ISP for flooding before the spammer is kicked off of his. LOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOONG before.


Christopher S. 'coldacid' Charabaruk <chrisc*meldstar!com> [journal]
Meldstar Entertainment - Creation, cubed.


[edited by - coldacid on January 28, 2004 4:24:03 PM]
maxd gaming
maxd gaming
quote:
Original post by coldacid
You''ll be kicked off your ISP for flooding before the spammer is kicked off of his. LOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOONG before.


Christopher S. ''coldacid'' Charabaruk <chrisc*meldstar!com> [journal]
Meldstar Entertainment - Creation, cubed.


[edited by - coldacid on January 28, 2004 4:24:03 PM]


Neh... only do it one or two times per email.... all you are doing really is visiting all your spams webpages... I am sure many idiots do it,

ex. "Whoa! I am the 1,245,343 visitor to this site? I better go collect my prize"

**20 minutes later**

"Whoa! This is the 1,243,343 email that they have sent out! They aren''t spammers... I gotta go collect this prize too!"

**20 minutes later**

"Whoa! I am the 1,245,343 visitor to this site? I better go collect my prize"





It''s Maxd Gaming, put in an underscore and I will beat you with a rubber ducky!
{ My Site! - Banner } { My Site! - One time popup }{ My .Net Information }{ A upcoming space RTS codenamed Gruntacktica . }{ . }

Not following the new trend:
Looky here mommy! No cow pic!


Phoe''s Forums
griffenjam
griffenjam
I'm not sure, but this program would probably be illegal, just as illegal as spamming is (in some parts). Once I get my home system back up I am going to start work on this. If just one or two people would want to help that would be great.

How the program would work.

You send it an e-mail somehow, most likely automatically through mail filters. I know how I would do it with Evolution, but not with Outlook or others.

It visits all the sites in the e-mail and visits all liked sites and collects as many addresses as possible. Once it's finished crawling it mails each addresss four or five times asking simple general questions about the product being sold. It fakes a from address, but uses plausable addresses ( something@hotmail, yahoo, msn...com) so it seems that the request for information is valid.

The point isn't to waste bandwidth, it's to waste time. Companies outsource spamming because all they want is the customers it brings, not the hassle of actually doing it. If we make it so spamming starts wasting too much company time, it won't be profitable anymore and they will have to stop.


[edited by - griffenjam on January 28, 2004 4:56:58 PM]
coldacid
coldacid
Don''t use common webmail providers for your fake e-mail addresses. Rather, slurp addresses in spam text, or from spam websites, or domain squatters.


Christopher S. ''coldacid'' Charabaruk <chrisc*meldstar!com> [journal]
Meldstar Entertainment - Creation, cubed.


Magic chain! Find someone with this block in their sig, and then add it to yours! Don''t forget to add to the end your user name, and don''t remove anyone else''s.
The chain: coldacid
Dmytry
Dmytry
Let''s name those who use spammers to promote their pages "spambuyers"

I think,script that just opens spambuyer pages would be nice.It''s even better to send questions about products to emails listed on those pages...and sometimes use addresses from other spambuyer as back address,or use fake addresses just to make filtering harder. It''s couldn''t be illegal to respond to every mail you have received via autoreply-and it''s only kind of autoreply when back e-mail is not provided inside message,but on page that are linked to message. It''s named hypertext,isn''t it?.As long as you reply once for one message,it''s ok!

And responsibility of killing spambuyer''s mails is spreaded over many peoples Programmer who will code the script should release the script SOURCES under GPL and all ok- programmer are protected by "free to speak" law.

You could put that script(s) on server(s),and scripts should do that for e-mails it receives. And there''s should be e-mail of that script, say,"killer@spamkiller.org" .Everyone could forward his incoming emails to that script. Script collects krawled spammer(?) e-mails. If one spambuyer e-mail was crawled more than 1000 times(from same page or from different ones),that''s mean, it''s really a spambuyer.

(protection against bad use of this script to kill,say,my webpage,or my mailbox)

When it''s decided that it''s really spambuyer mailbox, for every time server saw spambuyer address,server will send fake messages to spammer.

Are my suggestions good?

(and last but not least-if spambuyer''s page contain form,why not fill form with fake data and send? that''s not against the law)

Topic Locked

This topic has been locked by a moderator. New replies are not allowed.

Sign in to reply to this topic.