On 12/04/2014 05:32 AM, Reindl Harald wrote:

Am 03.12.2014 um 23:56 schrieb Philip Prindeville:
On 11/21/2014 09:49 AM, David F. Skoll wrote:
On Fri, 21 Nov 2014 08:43:22 -0800 (PST)
John Hardin <jhar...@impsec.org> wrote:

On a public mailng list isn't a great place to discuss such tactics...
I suspect spammers are dumb and will just vacuum up any address
they can find.  Also, the scammers who sell CDs with millions of
email addresses on them are unlikely to do anything but the most cursory
checking of the addresses.

Make a honeypot subdomain, put up any web content with
email addresses and I guarantee you'll start receiving email
on those addresses within a few days.

Regards,

David.

Having it appear in a resume on any of the job sites (dice, monster,
ladders, etc) is a good way to get it harvested.

So is posting to mozilla-gene...@mozilla.org or net...@vger.kernel.org ...

and *that* is exactly hwat you should avoid: post a honeypot address somewhere actively - a honeypot address should never be submitted because you ask for troubles and false positives doing so


Not necessarily. If I post to a list with this address, and wait 60 days, I can assume that 99.999% of email that comes back after that date is not related to the original posting.

Further, after 15 days, anything which doesn't also copy the list is almost certainly Spam.

-Philip

Reply via email to