Live data from Hacker News

Mailbait- Fill your inbox with SPAM

mailbait.info

21–26 of 26 posts

Re: Mailbait- Fill your inbox with SPAM

#22
post #16

Earlier quoted context omitted.

> It would cost lots of money to do the same kind of attack on a physical box. Find a couple of professional magazines. Find the "response card" in that magazine. Fill it with victim's name and real world mail address. Tick 10 boxes. Repeat this a few times. (Wear gloves when doing this and carefully destroy the magazines afterwards.) This is free for the person doing it. It's low cost for each company involved. > th…

You've just taken this to a whole new level. Should mailbait be extended to pair name/address with forms online? I could modify my woodburning stove and heat my house... think how much energy i'd be saving and not have to draw from a coal-fired powerplant!

It seems the post office would probably thank you. According to Time Business - it means jobs for postal workers.

http://business.time.com/2012/03/22/why-the-post-office-love...

Re: Mailbait- Fill your inbox with SPAM

#23
post #10

This kind of service, promoting mass single opt-in is tailor-made for abuse. Something similar has been tried before and was shutdown as "spam support": http://www.google.com/search?sourceid=chrome&ie=UTF-8&#3... There is no excuse for promoting this malicious garbage.

Thanks for the link - I had never heard of spamza. It is interesting that it appears to be about 4 years ago. 87 emails in 8 minutes [1] seems pretty pathetic as a spam tool.

for mailbait to keep from the same problem as spamza, it would seem using email confirmation would be the bare minimum they should setup before going public with this.

[1] http://www.zdnet.com/blog/security/spamza-opt-in-spamming-se...

Re: Mailbait- Fill your inbox with SPAM

#24
post #14
post #6

It looks like the system sends packets to the client computer to process the website posts (signing up for email). The end user is really the person sending the sign ups. A little side story: I worked with a person that must have made someone really mad. His corporate email account got signed up for some really bad ongoing email and he had to put some really strong filters in place to screen his incoming. It got to t…

Are you trolling? "It looks like the system sends packets to the client computer to process the website posts (signing up for email). The end user is really the person sending the sign ups." You understand tcp right?

yeah - sorry, wasn't trolling. Just trying to point out that the client is not hiding behind the server. anyone logging traffic will log the traffic directly from the client machine. I could have worded that differently. sorry.

Re: Mailbait- Fill your inbox with SPAM

#25
post #13
post #3

Earlier quoted context omitted.

Please don't get me wrong, I didn't write this, and don't endorse it, but I find it interesting. My suspicion echos yours, particularity based on the name (A play on http://en.wikipedia.org/wiki/Jailbait perhaps?) That said, I think it's an interesting project, and could legitimately be quite useful in the right circumstances. I'm a SysAdmin- I've had to train and test SPAM filters quite a few times in setting up new…

You can't train spam filters with 100% spam. Moreover you should train with the spam your users actually receive.

No, but you can look at what got through and figure out why it got through, then adjust settings accordingly. You might find you need to give more weight to specific blacklists or something.

Re: Mailbait- Fill your inbox with SPAM

#26
post #13
post #3

Earlier quoted context omitted.

Please don't get me wrong, I didn't write this, and don't endorse it, but I find it interesting. My suspicion echos yours, particularity based on the name (A play on http://en.wikipedia.org/wiki/Jailbait perhaps?) That said, I think it's an interesting project, and could legitimately be quite useful in the right circumstances. I'm a SysAdmin- I've had to train and test SPAM filters quite a few times in setting up new…

You can't train spam filters with 100% spam. Moreover you should train with the spam your users actually receive.

mailbait is not intended to signup for spam. The email returned is solicited from legitimate services; including listservs, newsletters, and anything else users dig up to add to the system. This makes it a good fit for some tests, as inbound email is not necessarily from illegitimate sources with negative intentions.
Post reply on HN