Live data from Hacker News

FSF trying to contact Google about spammer sending 10k+ mails from Gmail account

daedal.io

221–230 of 242 posts

Re: FSF trying to contact Google about spammer sending 10k+ mails from Gmail account

#222
post #68

gmail, outlook and salesforce create about 90% of the spam that gets through blacklists. Salesforce is simple to fix: I just block anything from salesforce from our network, as it just seems to be 100% used by spammers. Gmail and outlook are the major problem, as there is no way of addressing their spam issue.

Add Mailchimp in there as well. I have never gotten an email from someone using Mailchimp that was not spam.

Many of my consciously subscribed-to newsletters use Mailchimp, such as record shops and labels.

They're also one of the mail services I have a better impression of given their responses to my reports.

Re: FSF trying to contact Google about spammer sending 10k+ mails from Gmail account

#223
post #128

Lately I've been using SpamCop.net to make spam reports. It seems to work, and it's free. You are encouraged to donate, and they don't ask for much. It's not perfect though. For some reason, it doesn't find (or deliberately ignores) OVH hosts that are relaying spam.

I've been using SpamCop for years (decades?) but lately I've been wondering if they're still relevant. One example: they seem to have a size limit of 50KB when you report a spam mail via their web form. I've received quite some spam that exceeds that because they use base64 encoding of the body, add non-visible filler content to drown out the actual spam/phishing message, etc. SpamCop suggests to cut off the message…

I've started using phish.report along with SpamCop to specifically report phishing sites separately. They do a hosting lookup and link directly to the abuse contact or form.

Phishers are definitely trying to become cleverer. My "favourite" so far is adding the phishing link only in a QR code in an embedded PNG.

Re: FSF trying to contact Google about spammer sending 10k+ mails from Gmail account

#224
post #3

Good luck. These big tech companies have no incentive to care about support or really anything that isn’t tied directly to making money. And unless you have a friend there, Google staff have no incentive either. Solving this won’t help with their promotions.

Cynicism helps no one.

I will double down on this. Cynicism is the refuge of the ignorant that wishes to take comfort in their helplessness.

It isn't helpful.

Re: FSF trying to contact Google about spammer sending 10k+ mails from Gmail account

#225

I got a human being at Google to look into my problem and take action after sending a police report to Google‘s legal department certified mail return receipt along with a letter describing how someone was impersonating me and my business using a Gmail address in an attempt to commit fraud. Yes, it was a pain to take all of these steps and it probably took about 3 hours but it was absolutely necessary considering the…

Oh that's a good idea! I got locked out of my YouTube premium account and they kept charging me. Couldn't get in contact with anyone at YouTube because the YT premium support line is behind the YT login. So I had to change my credit card number. Somehow they still kept billing the card, so the credit card company said they'd have to close my account entirely to get Google to stop billing me for a service they wouldn'…

Yup. I need to figure that out with Microsoft too. Paid for a 365 subscription on an account using one of my secondary email addresses. Being charged every month. None of those secondary emails will let me login/act like there's an account there/forgot password doesn't work. Support has no way to see what email account is linked to a credit card (which, admittedly, I get, somewhat) and wouldn't disclose that information anyway. So even armed with a transaction ID...

Re: FSF trying to contact Google about spammer sending 10k+ mails from Gmail account

#226

Earlier quoted context omitted.

They're not trying. I've seen an advertiser remain active for months with literally tens of thousands of ads where clicking them directly downloads a malicious exe file that most antivirus scanners flag.

They're definitely not trying - in any form. I run a marketplace for dogs (i.e. craigslist for puppies & dogs) and scammers are always trying to post fakes ads. They always use Gmail accounts. Every time I ban a gmail address, they scammers will just get a new one. Same scammer/person has created thousands of gmail accounts and Google doesn't care. I have reported this to Google. For the amount of info Google has on…

Meanwhile, because I've worked for several startups who have used Google Workspaces, if I (try to) open a new Google account, phone verification fails because my phone number "has been used too many times".

Some places suggest "try logging into Google with your phone number, and deleting the account that's associated, if you don't need", that just ... doesn't work.

Re: FSF trying to contact Google about spammer sending 10k+ mails from Gmail account

#227

Earlier quoted context omitted.

Not me, but then most people are allergic to paying $10 a month. I figure an email is worth a beer.

That must be some good beer!

Worse than private email.

Re: FSF trying to contact Google about spammer sending 10k+ mails from Gmail account

#228
post #93

Earlier quoted context omitted.

But theres not even that going on. Most of the problems people have spinning up their own email servers, like getting blacklisted by the big boys, are less bad societally than actually accepting and routing the quantity of spam they are blacklisting. Does it benefit them? Kind of. But its not anticompetitive in any real sense. These restrictions are obvious and basic. If you really wanted to, you could spend a signif…

You are missing the point. The point is that they don't provide the level of services required by their position, which is dominant. When you have a legitimate problem with Google, they don't reply to you. The news here is again an example of that. The only thing you can do is abide by their rules, which often requires you to subscribe to their services or be at their mercy.

Thats the point? The point seems to dance around and shift every time I address it.

I have had this specific issue with an absolute laundry list of email providers and senders, including Google. Googles probably not even in the top ten worst offenders. Getting Sony to remove an ip from its PSN email blacklist was much more difficult.

So they are a monopoly in the sense that they aren't a monopoly, and just have massive corporate power, and that massive corporate power translates into them acting like every other email provider with a spam blacklist and that's uniquely bad somehow? Is that a good description?

Or will the point now shapeshift into something else?

Re: FSF trying to contact Google about spammer sending 10k+ mails from Gmail account

#230

Earlier quoted context omitted.

You can't send high volume through new accounts. Usually when a gmail account is being used for real spamming, it's an established one that's been taken over and the spammers are just discharging the accumulated reputation of the account.

> Usually when a gmail account is being used for real spamming, it's an established one that's been taken over My incident is unlikely to be a real account being taken over. The name format was "firstnamelastnameofficial@gmail.com" and I have a somewhat rare name ... probably well under 40 people worldwide with the exact spelling.

I just encountered this exact pattern. I recently created a new app...recieved an email from what seemed to be a promenant app reviewer on YouTube [youtubersname]corporation@gmail. I said how do I know you are him? Then the weird part was somehow he was able to send me a email from the actual YouTubers public listed email but it went to my spam folder... Then after he told me everything that would be included in the price he said he could only accept payment in giftcards or crypto.

I emailed the YouTuber and told him I think your account is compromised.

Post reply on HN