The Old Days Are Gone....

[John Draper]

Come on you guys, can the "groupie" crap. I'm just like anyone else. A little "worse for wear", getting old and senile... but alive and kicking.

You should appreciate my efforts to eliminate and track down spammers. It must be working, I'm getting threats from spammers. I shut down about 5 spammer domains already, and more are on the way.

Spammers are still very stupid... like putting up web sites with forms pages that don't check for "Referrers", allowing people to DDOS the crap out of their forms pages.

Not to mention poisoning their large collection of Email addresses with "honeypot" addresses, setting up honeypot mail relays and proxies to lure them in so I can find out who they are.\

"It LOOKS like an open relay, it smells like an open relay, it don't bounce mail like an open relay, but is it an open relay - NO!"

Famous last words....

[-DaRK-RaiDeR-]

Originally posted here by John Draper
Come on you guys, can the "groupie" crap. I'm just like anyone else. A little "worse for wear", getting old and senile... but alive and kicking.

No, you're not like anyone else, at least not for me. If getting old and senile make me do the thing you did, are doing and will do, then i'd like to have a thousand years.

I... can't... believe... i'm part of this thread... neither...

Good luck captain,

-DaRK-RaiDeR-

PS: Do you still like whistles??? j/k

[prodikal]

Come on you guys, can the "groupie" crap. I'm just like anyone else. A little "worse for wear", getting old and senile... but alive and kicking.

You should appreciate my efforts to eliminate and track down spammers. It must be working, I'm getting threats from spammers. I shut down about 5 spammer domains already, and more are on the way.

Spammers are still very stupid... like putting up web sites with forms pages that don't check for "Referrers", allowing people to DDOS the crap out of their forms pages.

Not to mention poisoning their large collection of Email addresses with "honeypot" addresses, setting up honeypot mail relays and proxies to lure them in so I can find out who they are.\

"It LOOKS like an open relay, it smells like an open relay, it don't bounce mail like an open relay, but is it an open relay - NO!"

Famous last words..

Any thing we can do to help ? every one hates spam

[MicroBurn]

*gasps*

Good luck Cap'n with yer spam killin bergade.

*gasps agian*

Everyona hates spam as prodikal said! And I'm sure some people want to help out around here, becasue spam annoys them

-MB

[ZomBieMann77]

Okay im going to disregard the comment about groupie crap for just a second. <GROUPIE> OH MY GOD. that is so awsome.</GROUPIE> I guess its safe to say that the old days arent gone. And even if all the original hackers were gone there will allways be those some who will carry the torch. Sorry, i gotta do it again: thats just too cool. Its kinda like god responding to a thread.

[John Draper]

Someone had mentioned the possibility of helping out. This is great. Because I'm soon going to open up the project to others wanting to help out. We are looking for experienced Python programmers to join our Open Source Project.

The overall design of the system is still ongoing, but I figure to have the design done in a few weeks.

My plans are to put up a web site (URL to be released later) announcing the start of the project. We are looking for the following skill levels...

1) openBSD people - Must have really good experience with PF (packet Filter) and the new
openBSD anti-spam features.
2) Python - Especially in the CGI fields. Must be aware of all the CGI security issues
3) PostGreSQL/Python modules - interacing Python with PostGreSQL database stuff.
4) C or C++ programming in OpenBSD environment.
5) Socket level programming and setting up IPSec Tunneling flows between two hosts.

If you, or anyone you know, has this kind of experience, then have them contact me.
As this is an OpenSource project, there is no financial compensation, except after the
project is completed, they can go off and setup their own systems and charge whatever they
want for it.

[Negative]

It's been exactly 25 years since a Digital Equipment-employee sent an unsollicited e-mail inviting all people on ARPAnet to a presentation for new equipment.
A silver jubilee, and you want to *gasp* get rid of it?

I hope your project has a better chance to succeed than the ridiculous Project Lumos.

Spammers aren't that stupid... just wait untill SMS really breaks through in the States, and you'll know what I mean :s

[RogueSpy]

Figured you guys might like this. Its very interesting. The interview of the Cap. by PC Chat Computer Radio Show.

http://www.pcchatshow.com/audio/PC-Chat_2003-03-01.mp3

edit: 32:44 min/sec into the Interview he talks about spam. Enjoy.

[bigb]

I must say, I feel all warm and fuzzy inside now! That's not just the tequilla either.

[Dr Toker]

What I find people doing more often than not is using Spam Bots. Ya know, Infect someone with a backdoor, and have them do their bidding. We are refocusing our fight with spam to this aspect. We seem to be getting great results. I work in the NOC for an ISP, and we are blocking Incoming mail BTW.

We have a nice little program called the SpamBot Killer. It basically takes a capture/mirror of the Inmail SQL/SLB, and displays every peice of mail sent with reverses, Fromomain,Elho packet, number of recipients.. ect. Hell, we can even take a look at the message their sending out, if its still in the queue.

It makes catching/blocking these guys easy. Here, I'll attach a picture of the GUI, to let you get a better Idea of what I am rambling about.You can easily differenciate the Spammers from the Legit mail users, by looking at the reverses.

200.158.40.35 mx4.hotmail.com (1) 200-158-40-35.dsl.telesp.net.br [email protected] (1)

If the mail is coming from [email protected], the reverse should come up as mx4.hotmail.com , or something like that. But the reverse shows us that a DSL customer of telesp.net is sending out this message. mx4.hotmail.com is in there, but its not true.Thats a forged Elho, or HELLO packet. Another indication of spam. So in the end, 200.158.40.35, among hudreds others were batch blocked at the backbone, to thwart our customers from recieving their crap.

Just a bit of news on the ISP side of the fence, so you know were not just sitting on our asses, letting everyone get spammed.


PS> John, thanks for all the inspiration you have given the younger generation. Its because of your story I opened up Telix for DOS. That got me where I am today. Not that I'm a 'Hacker of Lore" or anything, but I have carved quite a comfortable living, of the interest that people like you sparked in my young mind.