Re: Proposal: First URI black list, how about email address black lists?

2006-05-23 Thread Maurice Lucas
On Thu, 2006-05-18 at 07:23 -0700, Marc Perkel wrote: URI based black lists have been extremely effected in identifying spam. I propose another kind of black list. A list of email addresses embedded in the message body as replies to nigerian type spam and other spam where you are instructed

Re: Proposal: First URI black list, how about email address black lists?

2006-05-20 Thread Michael Monnerie
On Freitag, 19. Mai 2006 11:07 jdow wrote: I generalized - in ANY spam there is a URL they want you to use. Except for those spammers who are just too stupid to configure their tools. I've received some SPAM where they wanted you to contact them at [2]r Account is Blocked, please update it.

Re: Proposal: First URI black list, how about email address black lists?

2006-05-20 Thread Roger Taranto
On Fri, 2006-05-19 at 02:19, jdow wrote: (It would be a real serious gas to hook a 419 phish to Eliza and watch for the results. Generate a somewhat paranoid Eliza then sit back and party. Of course, if *I* could think of this extension of the lead them on counter phish then I am sure somebody

Re: Proposal: First URI black list, how about email address black lists?

2006-05-19 Thread jdow
From: Rob McEwen (PowerView Systems) [EMAIL PROTECTED] jdow said: It'd be easier to simply click fraud the sites until the vendors who commission the spam catch on and turn off the money up front. I think you've misunderstood Marc's proposal. He is talking about identity theft schemes via

Re: Proposal: First URI black list, how about email address black lists?

2006-05-19 Thread jdow
From: Marc Perkel [EMAIL PROTECTED] Chris Santerre wrote: We have a hard enough time with tons of new domains in URIBL. Those cost money and IMHO a bit more steps to go thru to setup then an email address. I can't imagine trying to keep up with it. They would expire within hours.

Re: Proposal: First URI black list, how about email address black lists?

2006-05-19 Thread jdow
From: Craig McLean [EMAIL PROTECTED] -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Dallas L. Engelken wrote: Well, the only thread on sa-users I found about this was from Dec 2005. http://www.nabble.com/A-thought-about-phone-numbers-and-URIBLs-t716464.h tml We had a thread on uribl staff

RE: Proposal: First URI black list, how about email address black lists?

2006-05-19 Thread Kurt Buff
| I generalized - in ANY spam there is a URL they want you to use. Find | it and send it spurious input, either click fraud or a Gotcha email | message. Eat their time or discredit their click counts. The idea is | to raise the expense for the spammers and those who use them. | | {^_^} You

Re: Proposal: First URI black list, how about email address black lists?

2006-05-19 Thread jdow
From: Kurt Buff [EMAIL PROTECTED] | I generalized - in ANY spam there is a URL they want you to use. Find | it and send it spurious input, either click fraud or a Gotcha email | message. Eat their time or discredit their click counts. The idea is | to raise the expense for the spammers and

Proposal: First URI black list, how about email address black lists?

2006-05-18 Thread Marc Perkel
URI based black lists have been extremely effected in identifying spam. I propose another kind of black list. A list of email addresses embedded in the message body as replies to nigerian type spam and other spam where you are instructed to reply to the email address in the message body. One

RE: Proposal: First URI black list, how about email address black lists?

2006-05-18 Thread Dallas L. Engelken
-Original Message- From: Marc Perkel [mailto:[EMAIL PROTECTED] Sent: Thursday, May 18, 2006 9:24 AM To: SpamAssassin Users Subject: Proposal: First URI black list, how about email address black lists? URI based black lists have been extremely effected in identifying spam. I

Re: Proposal: First URI black list, how about email address black lists?

2006-05-18 Thread Marc Perkel
Dallas L. Engelken wrote: The only problem I have with it is that it would be very manual, and address rotation per msg would be very easy to defeat this. Dallas Even if they used a lot of email addresses in the body they would all have to be good addresses that got the response back to

Re: Proposal: First URI black list, how about email address black lists?

2006-05-18 Thread jdow
From: Marc Perkel [EMAIL PROTECTED] URI based black lists have been extremely effected in identifying spam. I propose another kind of black list. A list of email addresses embedded in the message body as replies to nigerian type spam and other spam where you are instructed to reply to the

Re: Proposal: First URI black list, how about email address black lists?

2006-05-18 Thread jdow
From: Dallas L. Engelken [EMAIL PROTECTED] -Original Message- From: Marc Perkel [mailto:[EMAIL PROTECTED] URI based black lists have been extremely effected in identifying spam. I propose another kind of black list. A list of email addresses embedded in the message body as replies

Re: Proposal: First URI black list, how about email address black lists?

2006-05-18 Thread Rob McEwen (PowerView Systems)
jdow said: It'd be easier to simply click fraud the sites until the vendors who commission the spam catch on and turn off the money up front. I think you've misunderstood Marc's proposal. He is talking about identity theft schemes via Nigeria 419 scams where there is only an e-mail address in

Re: Proposal: First URI black list, how about email address black lists?

2006-05-18 Thread Marc Perkel
jdow wrote: From: Dallas L. Engelken [EMAIL PROTECTED] Dallas jdow Directly answering his question - it is not infrequent these days for the answer site to be part of a botnet, I understand. So a blacklist would have to be bigevil.cf in size and then some. It'd be easier to simply click

Re: Proposal: First URI black list, how about email address black lists?

2006-05-18 Thread Marc Perkel
Rob McEwen (PowerView Systems) wrote: jdow said: It'd be easier to simply click fraud the sites until the vendors who commission the spam catch on and turn off the money up front. I think you've misunderstood Marc's proposal. He is talking about identity theft schemes

RE: Proposal: First URI black list, how about email address black lists?

2006-05-18 Thread Dallas L. Engelken
-Original Message- From: Dallas L. Engelken [mailto:[EMAIL PROTECTED] Sent: Thursday, May 18, 2006 9:34 AM To: SpamAssassin Users Subject: RE: Proposal: First URI black list, how about email address black lists? -Original Message- From: Marc Perkel [mailto:[EMAIL

RE: Proposal: First URI black list, how about email address black lists?

2006-05-18 Thread Chris Santerre
Title: RE: Proposal: First URI black list, how about email address black lists? -Original Message- From: Marc Perkel [mailto:[EMAIL PROTECTED]] Sent: Thursday, May 18, 2006 11:09 AM To: jdow Cc: users@spamassassin.apache.org Subject: Re: Proposal: First URI black list, how

Re: Proposal: First URI black list, how about email address black lists?

2006-05-18 Thread Marc Perkel
Title: RE: Proposal: First URI black list, how about email address black lists? Chris Santerre wrote: We have a hard enough time with tons of new domains in URIBL. Those cost money and IMHO a bit more steps to go thru to setup then an email address. I can't imagine trying

Re: Proposal: First URI black list, how about email address black lists?

2006-05-18 Thread qqqq
RE: Proposal: First URI black list, how about email address black lists?Remember we're not talking about the From address but the address within the message that they want you to reply to. That address isn't going to expire very fast because that's how the spammer gets the money. I would say

Re: Proposal: First URI black list, how about email address black lists?

2006-05-18 Thread qqqq
RE: Proposal: First URI black list, how about email address black lists?Remember we're not talking about the From address but the address within the message that they want you to reply to. That address isn't going to expire very fast because that's how the spammer gets the money. I would say

RE: Proposal: First URI black list, how about email address black lists?

2006-05-18 Thread Chris Santerre
Title: RE: Proposal: First URI black list, how about email address blacklists? -Original Message- From: Rob McEwen (PowerView Systems) [mailto:[EMAIL PROTECTED]] Sent: Thursday, May 18, 2006 1:48 PM To: users@spamassassin.apache.org Subject: Re: Proposal: First URI black list,

Re: Proposal: First URI black list, how about email address black lists?

2006-05-18 Thread Craig McLean
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Dallas L. Engelken wrote: Well, the only thread on sa-users I found about this was from Dec 2005. http://www.nabble.com/A-thought-about-phone-numbers-and-URIBLs-t716464.h tml We had a thread on uribl staff list about this last July which we

Re: Proposal: First URI black list, how about email address black lists?

2006-05-18 Thread Marc Perkel
I believe that using email addresses that are embedded in 419 type spams as a spam fingerprint will be as effective against 419 typre spam as URIBL is for identifying spam that has links in it. All spam has one thing in common. Spam wants you to DO something. And what it wants you to do is