Monday, May 08, 2006

Spammers Messageboard

From Digg, here is a copy of the message board where the spammers planned their attack on Blue Security. It's fascinating because the Blue Frog people are clearly participating (under several pseudonyms), trying to persuade the organizers to drop the attack.

One of the postings is particularly illuminating:
Ginsta, they didn't do anything to you YET, but they are attacking many sponsors, some you might even be promoting. They aren't just attacking sponsors, they're attacking our community by the hypocritical position of justifying their means by the end

It's just a matter of time (if we don't take action now) before they have a botnet of which we would have no chance of stopping, you have to understand that. If they built their userbase to say 2+ million, 1 request command to each of their "frogs" would drop the host in a minute. No point letting someone gain power without being challenged. If they want to be on top they'll have to show they have the balls to undergo some deep shit.
As far as I can see, Blue Security only has about 10% of the number of users right now it would need (571,000 emails protected, but I guess most people protect 3 emails).

Another interesting thing - the spam thread links to megafile up/download sites where you can get the list of emails that the spammers 'extracted' from the blue frog database. I did so. It contains exactly 74,184 email addresses - less than 20% of those in Blue Securities database - so its pretty clear they didn't crack the encryption on the database.

The list contains two of my emails. The third I had listed with Blue Security isn't on it (and indeed, it hasn't received any of the threatening emails from the spammers). I consider this to be a true badge of distinction, a great honor.

By the way, the Digg thread contains a link to this site which repeatedly loads images from the spammers message board. It's for people who like *really* fresh images. Unfortunately it seems to have the side effect of slowing the spammer's message board to a grinding halt. Probably better not to click on that link...

2 Comments:

Anonymous Anonymous said...

in order to reverse-engineer your email address out of blue security's database they had to already have your email address in theirs.
i wouldn't worry too much about them.

8:05 AM  
Blogger sheikh X said...

yes but alas, this is the list they are using to mass spam blue security users. and yeah, i'm getting horrible amounts of spam since they started. i feel there should be some cunning way to exploit this...

9:28 AM  

Post a Comment

<< Home