Softpedia
 

NEWS CATEGORIES:



NEWS ARCHIVE >>
SOFTPEDIA REVIEWS >>
MEET THE EDITORS >>
Home > News > Webmaster > Internet Life

July 18th, 2005, 10:46 GMT

Anti-Spam Initiative That Floods the Spammers' Servers

SHARE:

Adjust text size:



According to PC World, one of the companies involved in the battle against spam, Blue Security, has decided to adopt a more aggressive strategy against spammers, by crippling their spreading capacity.

Here is how Blue Security's Blue Frog software and antispam initiative works: When you sign up for a Blue Frog account, you install a piece of software on your PC and get to submit up to three e-mail addresses to Blue Security's Do-Not-Intrude Registry. The company then opens up multiple e-mail accounts on your behalf--accounts you technically own, but never use. Those e-mail accounts are managed by Blue Security and are designed to attract spam.

Blue
Frog analyzes the spam that goes into your Blue Frog e-mail accounts (and those of other community members) and identifies messages that are not compliant with the federal Controlling the Assault of Non-Solicited Pornography and Marketing Act (known as CAN-SPAM). These include unsolicited marketing messages that don't provide an opt-out option or that have an invalid return address.

Blue Security says it will attempt to warn noncompliant spammers to stop sending e-mail to the accounts it has set up for you, as well as to the real e-mail addresses you provided during registration. If Blue Security can't contact the spammer, or the spam doesn't stop, things start getting nasty.

Blue Security follows the links inside the body of the spam message, which typically lead to a site that wants to sell you prescription medications, porn, a get-rich-quick scheme, or the like. It then identifies the form fields at the spammer's site (where you're asked to input credit card data, for example) and then uses the software you installed to direct your PC to insert in those fields a request to unsubscribe you from the site's mailing list. Also included in the form fields is an invitation to spammers to download a Do-Not-Intrude Registry compliance tool from Blue Security's Web site.

Now, the spammer wouldn't care if only one person did this. Even if a thousand Blue Frog users followed suit, the spammer still might not care. But Blue Frog's software causes all of its connected users to submit the request/complaint simultaneously, and repeatedly, for a period of time.

For more information, visit the company's website at this address http://www.bluesecurity.com/register.

TELL US WHAT YOU THINK:

4,283 hits · 1 comment · Link to this article · Print article · Send to friend · Subscribe to news

MUST-READ RELATED ARTICLES:

READER COMMENTS:


Comment #1 by: Tech Maven on 21 Jul 2005, 06:23 UTC reply to this comment

I've concerns about the Blue Frog Community initiative. What's to prevent spammers from: (1) using CAPTRA technology to protect their website forms (CAPTRA puts up a human readable picture of numbers and letters that a computer finds very hard to recognize), (2) planting links and forms on their website to "advertisers" that are actually just sites that a spammer would love to have be annoyed with what would then simply be a DDoS, (3) collective DDoS of email addresses appearing on the downloadable list of Blue Frog member email addresses, (4) raising costs of ISP users because of increased traffic flow, (5) their members getting cut off by their own ISP because of violation of ISP user/ISP agreements (such as relate to DDoS or possible illegal activity), and (6) other spammers getting the downloadable list of email addresses and spamming those on the list. Does (or did) http://www.bluesecurity.com already know that they will be forced to abandon this project and if so then was their intent really just to harvest a nice big fat downloadable list of "thousands" of email addresses before they are forced to shut down? After all, they ARE a "startup", aren't they?

I posted some of those concerns at their website in a very short message WED 20-JUL-05, and my post had not shown up nearly 9 hours later. In fact, NO new messages from anyone had shown up! Isn't that just a bit strange?

Tech Maven

Copyright © 2001-2012 Softpedia. Contact/Tip us at

WindowsGamesDriversMacLinuxScriptsMobileHandheldNews

SUBMIT PROGRAM   |   ADVERTISE   |   GET HELP   |   SEND US FEEDBACK   |   RSS FEEDS   |   UPDATE YOUR SOFTWARE   |   ROMANIAN FORUM