Free Republic
Browse · Search
News/Activism
Topics · Post Article

Skip to comments.

Technology: Spam busters' new weapon: the honey trap
Keralanext.com ^ | 02/23/2005 | n/a

Posted on 02/23/2005 7:11:07 AM PST by holymoly

[Technology News]: Spam fighters are cheering from the sidelines a recent US court decision that dovetails with their technological efforts to turn the tidal wave of spam that threatens to drown the world's computer networks.

Jeremy Jaynes was found guilty last November by a state court in Leesburg, Virginia, of sending more than 10 million unsolicited emails a day. He was hawking pornography, work-at-home schemes and stock-picking software.

The spams are estimated to have earned him about $750,000 a month. He is now on $1 million bail, forbidden from using the internet and will be sentenced this month. The jury has recommended he gets a nine-year jail term.

"A successful trial with all the time and resources we're spending on this issue just feels so good," says Jonathan Zdziarsky, an anti-spam software expert.

Washington-based Internet Law Group lawyer Jon Praed, an observer at Jaynes' trial, says it was the first time criminal law had been used so well against a spammer, and the case highlights how legislation and technology are joining to beat spam. "Everyone in the court understood that this verdict was a precedent-setting, awe-inspiring moment," he says.

Jaynes' operation was run from a chaotic office in Raleigh, North Carolina. Cabling to 16 high-speed internet links snaked everywhere. There were CDs packed with spammed email addresses and servers with spam emails. Even as the police arrived, spamming was in progress. The place was littered with to-do lists. One read simply: "Solve spam filters".

That note provided a rare window into how spammers think, says Paul Graham, author of the first content-based spam filter and organiser of a recent anti-spam MIT conference. He says it shows that spammers believe email filters are easier to beat than they really are.

Filters installed by the ISP are the main line of defence against spam. These scan messages for words typical of unsolicited commercial emails, and discard those that they find.

But a percentage always seeps through, partly because spammers are sometimes able to fool the scanners by including large quantities of random text in their messages.

Spammers improve the chances that at least some of their messages will get through by using viruses that turn infected computers into "zombie" machines that are fooled into sending spam.

But Praed says technology alone will not to stem the flood of unsolicited email: "The solution to spam is the marriage of technology and law." Lawyers are just beginning to learn how to use Australian and European Union laws enacted in 2003, and the US federal Can-Spam Act, to bring spammers to book.

Project Honeypot, the brainchild of Chicago lawyer Matthew Prince, is a marriage of law and technology. It takes advantage of a clause in the Can-Spam Act that makes harvesting email addresses for spamming purposes illegal. Spammers collect email addresses using "crawler" software that trawls websites looking for them. These addresses are the spammers' lifeblood, and Prince hopes to cut it off.

Webmasters who want to help fight spam download Project Honeypot's software, which is designed to turn their website into a magnet for harvesters.

If the site detects that a crawler is visiting, the software generates a fake email address for the crawler to grab, and records the address of the crawler and the time and date. The fake address then vanishes from the site, but remains valid as a mailbox. Because it is a fake, no one will send it legitimate mail. If any mail arrives it can only have come from the spammer who grabbed it off the Honeypot site.

Detectives then begin building their case.

Three months into Project Honeypot, Prince is using the data the software returns to plot spamming networks for future busts.

"These are the tools and data we need," Praed says.

In the spamming arms race, spammers are likely to begin programming their harvesters to detect honeypots and ignore them. But Prince says he is ready for this with counter measures.


TOPICS: News/Current Events
KEYWORDS: canspam; email; honey; internet; isp; pot; spam; spammer; trap
Navigation: use the links below to view more comments.
first previous 1-2021-32 last
To: xm177e2

And you can look in the message body. Anything lacking a sales pitch or even link is probably just a typo.


21 posted on 02/23/2005 11:55:23 AM PST by discostu (quis custodiet ipsos custodes)
[ Post Reply | Private Reply | To 8 | View Replies]

To: anniegetyourgun
I hate spammers, and hope spammers rot in their own skin. Now, what I REALLY want is something that returns the spam to the sender and melts down their hardware instantaneously. Did I tell you that I hate spammers?

Me, too, annie... I've used mailwasher for years to bounce spam back to the sender. Recently, it has become erratic about bouncing- can't figure out why, but often as not, it won't bounce spam-- so I am trying this one, which seems to bounce reliably:

IncrediMail - Email has Finally Evolved

Backgrounds for your Email IncrediMail lets you take full control over what your emails look like. Select from hundreds of email ...
www.incredimail.com/ - 13k - Cached - Similar pages

The install is fairly automatic, it imports your accounts, and reading the furnished tutorials will explain how to filter and bounce spam. Some folks claim you shouldn't bounce the garbage, but it gives me great satisfaction, anyway.

22 posted on 02/23/2005 12:24:52 PM PST by backhoe (Just an old Keyboard Cowboy, ridin' the trackball into the Sunset...)
[ Post Reply | Private Reply | To 7 | View Replies]

To: backhoe

Thanks, BH!


23 posted on 02/23/2005 1:16:38 PM PST by anniegetyourgun
[ Post Reply | Private Reply | To 22 | View Replies]

To: anniegetyourgun
You bet- I can't say which I hate worse- virus propagators, or spammers.

They should all be triple fined for lost time and damages, frog-marched to the public square, stripped, whipped, and then chained to the whipping post for a week, and made to trim the grass-- one blade at a time, with manicure scissors.

All while wearing a shirt saying "I was a CyberVandal."

24 posted on 02/23/2005 1:40:33 PM PST by backhoe (Just an old Keyboard Cowboy, ridin' the trackball into the Sunset...)
[ Post Reply | Private Reply | To 23 | View Replies]

To: Drango
"What always seems to sell well and will always, I know it sounds stupid, are loan leads. People respond to that. They say, 'What the hell,' " the former spammer said. "I got $10 to $12 per lead. That's good."

Anyone idiotic enough to respond or do business with a spamvertised lender, however remotely, is too stupid to have a house, anyway. I don't want them as neighbors.

25 posted on 02/23/2005 3:34:07 PM PST by Gorzaloon
[ Post Reply | Private Reply | To 20 | View Replies]

To: Gorzaloon
Essentially NO real products are advertised by spam.

Wired did an informal study on this once (actually responding to spam), for the most part, things were either scams or no response -- the latter was apparently a way to verify "hot" email addresses to sell to other spammers.

Oddly enough, Wired found that porn spammers generally were the most "legit", in that they were in the business of providing exactly what they said they would far more often than other types of spam...

26 posted on 02/23/2005 3:40:01 PM PST by kevkrom (If people are free to do as they wish, they are almost certain not to do as Utopian planners wish)
[ Post Reply | Private Reply | To 19 | View Replies]

To: kevkrom
Oddly enough, Wired found that porn spammers generally were the most "legit", in that they were in the business of providing exactly what they said they would far more often than other types of spam...

But that entire industry assumes that most "customers" would be hesitant to complain when scammed.

27 posted on 02/23/2005 4:30:34 PM PST by Gorzaloon
[ Post Reply | Private Reply | To 26 | View Replies]

To: holymoly
Jeremy Jaynes was found guilty last November by a state court in Leesburg, Virginia, of sending more than 10 million unsolicited emails a day... The jury has recommended he gets a nine-year jail term.

I recommend that he get drawing and quartering.

28 posted on 02/24/2005 8:27:58 AM PST by steve-b (A desire not to butt into other people's business is eighty percent of all human wisdom)
[ Post Reply | Private Reply | To 1 | View Replies]

To: anniegetyourgun
Just to follow up on this?

I've used mailwasher for years to bounce spam back to the sender. Recently, it has become erratic about bouncing- can't figure out why, but often as not, it won't bounce spam-- so I am trying this one, which seems to bounce reliably:

IncrediMail - Email has Finally Evolved

Backgrounds for your Email IncrediMail lets you take full control over what your emails look like. Select from hundreds of email ...
www.incredimail.com/ - 13k - Cached - Similar pages

The install is fairly automatic, it imports your accounts, and reading the furnished tutorials will explain how to filter and bounce spam. Some folks claim you shouldn't bounce the garbage, but it gives me great satisfaction, anyway.

In the couple of days I've bounced spam with Incredimail, there has been a noticable drop in the amount of spam coming into my Junk mailbox. It seems to be doing some good.

I still want to see the vermin crippled financially, jailed, horsewhipped, and humiliated.

29 posted on 02/25/2005 2:38:15 AM PST by backhoe (Just an old Keyboard Cowboy, ridin' the trackball into the Sunset...)
[ Post Reply | Private Reply | To 23 | View Replies]

To: backhoe

I thought I read on another thread a day or two ago the IncrediMail was a spyware.
Am I mistaken?
I want something to filter out these e-mails. Until a few months ago I only had a few per week. Lately I get about 5-10 per day. Really sick of it.
I've set up filters for .de, ru.,au.,as., etc. but the next day I get a stack from a new source.
Making me crazy.


30 posted on 02/25/2005 3:14:46 AM PST by Vinnie
[ Post Reply | Private Reply | To 29 | View Replies]

To: Vinnie
I thought I read on another thread a day or two ago the IncrediMail was a spyware. Am I mistaken?

All I can tell you is that MSantispyware, Ad-Aware, and Spybot don't say a thing when scanning it. For whatever that's worth.

31 posted on 02/25/2005 3:17:23 AM PST by backhoe (Just an old Keyboard Cowboy, ridin' the trackball into the Sunset...)
[ Post Reply | Private Reply | To 30 | View Replies]

To: Vinnie
The late Phil Goldman invented Mailblocks - an amazing technology that virtually dried up the flood of spam that went into my MSN mailbox. I've never used it and it has cut the spam to a trickle. Mailblocks works by using a human response algorithm. Most spammers use robots to authenticate emails and that's were they get caught. They've stopped taking on new members since they were acquired by AOL - which is planning to integrate their technology into its online service. Yes Virginia, spam can be stopped cold.

(Denny Crane: "There are two places to find the truth. First God and then Fox News.")

32 posted on 02/25/2005 3:25:10 AM PST by goldstategop (In Memory Of A Dearly Beloved Friend Who Lives On In My Heart Forever)
[ Post Reply | Private Reply | To 30 | View Replies]


Navigation: use the links below to view more comments.
first previous 1-2021-32 last

Disclaimer: Opinions posted on Free Republic are those of the individual posters and do not necessarily represent the opinion of Free Republic or its management. All materials posted herein are protected by copyright law and the exemption for fair use of copyrighted works.

Free Republic
Browse · Search
News/Activism
Topics · Post Article

FreeRepublic, LLC, PO BOX 9771, FRESNO, CA 93794
FreeRepublic.com is powered by software copyright 2000-2008 John Robinson