Re: [Full-disclosure] Phishing and Spammers

2006-06-14 Thread Dave King
Here's a site that does something similar http://www.419eater.com/ . This site is targeted at 419 scammers out of Africa. I don't know exactly how much good their work does, but it's pretty funny sometimes. Dave King http://www.remotecheckup.com > Why not encourage everyone to reply to phishe

Re: [Full-disclosure] Phishing and Spammers

2006-06-14 Thread Aaron Gray
Just another fucking rotten mess... - Original Message - From: "Geo." <[EMAIL PROTECTED]> To: Sent: Thursday, June 15, 2006 2:37 AM Subject: Re: [Full-disclosure] Phishing and Spammers "hey, a valid mail address, let's forward it to my buddy Joe Spammer

Re: [Full-disclosure] Phishing and Spammers

2006-06-14 Thread Geo.
> "hey, a valid mail address, let's forward it to my buddy Joe Spammer and > his \/|agra pills" > > It almost as bad as clicking the "remove" bait some spammers post within > their messages. If you're replying to a spam you just received, assume we are beyond caring about this. Geo. ___

Re: [Full-disclosure] Phishing and Spammers

2006-06-14 Thread Cardoso
"hey, a valid mail address, let's forward it to my buddy Joe Spammer and his \/|agra pills" It almost as bad as clicking the "remove" bait some spammers post within their messages. On Wed, 14 Jun 2006 21:22:08 -0400 "Geo." <[EMAIL PROTECTED]> wrote: G> > if you do this you are not curing the p

Re: [Full-disclosure] Phishing and Spammers

2006-06-14 Thread Geo.
> if you do this you are not curing the problem, rather you are making it > worse. This will never stop phishers from sending emails and you will > tell them that you are an active victim, so they will flood you more! Why would they flood me more? It's not like you can hide your email address if y

Re: [Full-disclosure] Phishing and Spammers

2006-06-14 Thread Nick FitzGerald
Michael Weinert to Cardoso: > > A simple SQL query can delete all records from the same IP/machine, if > > the counter is above 2. You think most (some?) spammers use SQL servers to store their stolen identity data? I've only ever seen scripted Email, other folks' formmail and plain text file

Re: [Full-disclosure] Phishing and Spammers

2006-06-14 Thread mikeiscool
On 6/15/06, Geo. <[EMAIL PROTECTED]> wrote: I would appreciate hearing a little feedback on this idea. It strikes me that phishers and spammers have a vulnerability that we have not yet exploited. They collect information, granted the returns are small but since email is cheap they send out tons

Re: [Full-disclosure] Phishing and Spammers

2006-06-14 Thread Saeed Abu Nimeh
if you do this you are not curing the problem, rather you are making it worse. This will never stop phishers from sending emails and you will tell them that you are an active victim, so they will flood you more! Saeed Geo. wrote: > I would appreciate hearing a little feedback on this idea. > > It

Re: [Full-disclosure] Phishing and Spammers

2006-06-14 Thread Cardoso
I was not clear, sorry. A good "semi-unique-id" must use IP, browser version and other data collected from the http headers. Of course the IP alone is not enough. (except for marketing guys, who trully believe we can magically know exactly now many people are browsing the site..) On Wed, 14 Jun

Re: [Full-disclosure] Phishing and Spammers

2006-06-14 Thread Michael Weinert
Am Mittwoch, 14. Juni 2006 21:30 schrieb Cardoso: > A simple SQL query can delete all records from the same IP/machine, if > the counter is above 2. Ha, you think phisher are that smart? I for myself hit the button only once with fake credentials from my dynamic IP. If everybody does it... Well...

RE: [Full-disclosure] Phishing and Spammers

2006-06-14 Thread Glenn.Everhart
14, 2006 3:31 PM To: full-disclosure@lists.grok.org.uk Subject: Re: [Full-disclosure] Phishing and Spammers A simple SQL query can delete all records from the same IP/machine, if the counter is above 2. Presto, database cleaned. Also the phiser will now that at that address there's someon

Re: [Full-disclosure] Phishing and Spammers

2006-06-14 Thread Cardoso
A simple SQL query can delete all records from the same IP/machine, if the counter is above 2. Presto, database cleaned. Also the phiser will now that at that address there's someone who knows better. Remove the address from the database and add a newbie clueless address instead. Best-case scen