[FoRK] Smarter spam harvesters vs. FoRK archives

Justin Mason jm at jmason.org
Thu Aug 26 11:47:36 PDT 2004


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


Ian Andrew Bell writes:
> Nifty way to obfuscate email addresses in HTML / JavaScript:
> 
> 	http://www.u.arizona.edu/~trw/spam/spam.htm
> 
> ....goes one step beyond popular JavaScript methods like the one here:
> 
> 	http://javascript.about.com/library/tools/blnospamemail.htm	

My favourite, btw, is http://automaticlabs.com/products/enkoderform/ .
Pretty similar to the trw one above.

- --j.

> -Ian.
> 
> On 26-Aug-04, at 10:30 AM, Justin Mason wrote:
> 
> > -----BEGIN PGP SIGNED MESSAGE-----
> > Hash: SHA1
> >
> >
> > Lucas Gonze writes:
> >> Spam and scumware are a native mode for making a living on the 
> >> internet.
> >> They're basic to this environment, like wild corn in North America.
> >
> > That doesn't mean I should have wild corn growing in *my* garden.
> > A bit of pesticide (read: laws & enforcement) would be nice...
> >
> > Adam L Beberg <beberg at mithral.com>:
> >> Gordon Mohr wrote:
> >>
> >>> Can we make the obscuring technique a bit more obscure/unique? Some 
> >>> ideas:
> >>
> >> Programmers are paid lots of money (probably more then most FoRKers) 
> >> to
> >> come up with ways to harvest and infest email. All the money is on 
> >> their
> >> side.
> >
> > I just spent some time reading some spammer-to-spammer discussions.
> > Observation: they don't want to share data with each other -- 
> > everything
> > is "I have a way around this filter, I'm selling it for $X"; "don't 
> > talk
> > to him, he's an anti-spammer"; "don't buy that spamware, he claims it 
> > gets
> > past AOL's filters but doesn't", etc.
> >
> > We have openness and data-sharing on our side -- and it's working. (You
> > should see what they say about SPF and how it screws up forging 
> > headers.)
> > They don't want to cooperate unless there's money in it.
> >
> > Another feature: obscuring mail addrs in archives has the power of 
> > numbers
> > on our side.
> >
> > Consider a spammer with one scraping tool, attempting to scrape 2000 
> > mail
> > archives.  If each of those 2000 archives uses a different address 
> > format,
> > extracting the addrs from all of them would be a *lot* harder.
> >
> > - --j.
> >
> >> On Thu, 26 Aug 2004, Lorin Rivers wrote:
> >>
> >>> I'm reading this in gmail.
> >>>
> >>> All the ads are for how to send spam.
> >>>
> >>> Har.
> >>>
> >>> On Wed, 25 Aug 2004 11:19:17 -0500, Adam L Beberg 
> >>> <beberg at mithral.com> wrote:
> >>>> Gordon Mohr wrote:
> >>>>
> >>>>> Can we make the obscuring technique a bit more obscure/unique? 
> >>>>> Some ideas:
> >>>>
> >>>> Programmers are paid lots of money (probably more then most 
> >>>> FoRKers) to
> >>>> come up with ways to harvest and infest email. All the money is on 
> >>>> their
> >>>> side.
> >>>>
> >>>> All you can really do is teach your friends not to fall for the 
> >>>> scams,
> >>>> since noone will ever accept any real solution to the problem, since
> >>>> there is no money in that.
> >>>>
> >>>> --
> >>>> Adam L. Beberg - beberg at mithral.com
> >>>> http://www.mithral.com/~beberg/
> >>>>
> >>>>
> >>>> _______________________________________________
> >>>> FoRK mailing list
> >>>> http://xent.com/mailman/listinfo/fork
> >>>>
> >>> _______________________________________________
> >>> FoRK mailing list
> >>> http://xent.com/mailman/listinfo/fork
> >>>
> >> _______________________________________________
> >> FoRK mailing list
> >> http://xent.com/mailman/listinfo/fork
> > -----BEGIN PGP SIGNATURE-----
> > Version: GnuPG v1.2.4 (GNU/Linux)
> > Comment: Exmh CVS
> >
> > iD8DBQFBLh5CQTcbUG5Y7woRAt3pAJ40TE0fBOL1rVaj4nF8xVEIDnaxIACfR6Jk
> > J1lM1nQsyIou5t9YqAdZwh4=
> > =B+F5
> > -----END PGP SIGNATURE-----
> >
> > _______________________________________________
> > FoRK mailing list
> > http://xent.com/mailman/listinfo/fork
> >
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)
Comment: Exmh CVS

iD8DBQFBLjBIQTcbUG5Y7woRAlGpAKDQ1xgYptbsuVPFbjjZIjlAnuYibQCg5sH4
jFFNpBZGNBR/34NMX3lQzbI=
=9VSL
-----END PGP SIGNATURE-----



More information about the FoRK mailing list