Please create an account to participate in the Slashdot moderation system

 



Forgot your password?
typodupeerror
×
Spam The Internet Your Rights Online

Spammer Hangout's Membership Roster Left Exposed 691

MikeCapone writes "According to an article at Wired News, spammers feel the need to be part of a community too. The Bulk Club is one such community. A message on the site states that it offers, for a $20 monthly fee, a variety of how-to articles, spamming software, a members' message board area, and 300,000 FRESH e-mails/week. Unsurprisingly, the 'Law & Ethics' section is 'Members Only.' The good part is that, because of a glitch, the membership list of this charming organization was left exposed on the website."
This discussion has been archived. No new comments can be posted.

Spammer Hangout's Membership Roster Left Exposed

Comments Filter:
  • hosting sites (Score:4, Interesting)

    by confusion ( 14388 ) on Tuesday September 02, 2003 @10:54PM (#6855817) Homepage
    I'd be interested in seeing the list of bulk friendly isp's :)
  • Oh ho ho! (Score:3, Interesting)

    by MoeMoe ( 659154 ) on Tuesday September 02, 2003 @10:57PM (#6855850)
    The hunters now become the hunted :)

    Think about how many different ways this benefits email users around the world... We now have a portal into the world of these deviants (I love that word). Give me one address, just one address... They don't know what SPAM really is yet... Let alone the true meaning of /. hehehe

    Seriously, I'm sure that atleast a few million people are going to have less spam tomorrow after this :)

    Thank you Dr. Slashdot!
  • by Alizarin Erythrosin ( 457981 ) on Tuesday September 02, 2003 @10:59PM (#6855866)
    From the article:
    In an e-mail interview, Auman said that the club was dedicated to promoting "responsible" business practices and that it offers information about misleading tactics used by some spammers simply to show why they are improper.

    Now, I hate spam and spammers with a passion, but I must admit that the subject lines and stuff I've been getting recently are a lot more appropriate. At least the spam I get, they aren't trying to hide it anymore with stuff like "Re: Your bank account" or "Re: Tech support" and it's about debt management or a second mortgage or my wang. Too bad that their "responsible business practices" include articles about spoofing (probably about spoofing emails and forging headers) and harvesting emails ("opt-in" my ass).

    But anyways... down to the real reason I posted. Did anybody manage to get any info about addresses, telephone numbers, etc? I have a baseball bat and some free time in the mornings before work... and late nights are free too! DId I mention I live in Florida, just like this guy:

    Among the Bulk Club's list of 159 "active members" was Damon Decrescenzo, one of the operators of Rockin Time Holdings, a Florida junk e-mailer sued by Microsoft in June and by Amazon this month.

    I have responsible business practices too! I am responsible for alot of death and destruction...
  • How generous... (Score:3, Interesting)

    by magarity ( 164372 ) on Tuesday September 02, 2003 @11:02PM (#6855891)
    Again, receiving no commission or kick back for listing them. We are here for you and you only. We are not here to tout a company to receive a kick back. Just giving as accurate information as humanly possible so to help your business make it big.

    Wow, I'm glad that they are so fair minded and humanitarian as to only be here for me. In that case, please STOP BEING PART OF THE PROBLEM.

    It's only the second day of the month and my spam filter reports I've already received 75 spams wasting half a megabyte of my ISP's bandwidth. For anyone interested, my ISP has a great spam filtering service; I hardly ever actually get any spams falling through to my in box. You can check it out at this URL: https://www.mailarmory.com/
  • by confusion ( 14388 ) on Tuesday September 02, 2003 @11:05PM (#6855911) Homepage
    It's pretty involved, but there was an expose in one of the media outlets a few weeks ago about this very thing. Basically a reputible company outsources its marketing to a firm. That firm is partially comp'd on how much traffic they drive. Now all good companies do due diligence and would never hire some PR firm that spams. So the PR firm outsources to someone else who does the same until the get to one of the big time spammers. With each step down the ladder, the companies get more and more sleazy. The linkage is so diluted at that point, it's hard for anyone to tell who requested the spam's to be sent on the original company's behalf.

    A company like Symantec can easily say 'my gosh, I can't believe it. we'll talk to our vendor right away.' vendor says 'we had no idea out sub contractor was a spam supporter - we've terminated our relationship with them' and no one has dirty hands.
  • My spam solution (Score:4, Interesting)

    by Felinoid ( 16872 ) on Tuesday September 02, 2003 @11:16PM (#6855986) Homepage Journal
    Forget "Don't send" lists.
    To enforce industry responsability do a national "must include" list.

    Liccens spammers AND every spammer must be on the must include list AND spam to everyone on the must include list.

    Here is where the fun begins.
    Also on the must include list are spam scounts that track the latest spam to update spam filters.
    But it get's better.
    Also added to the list is fedral observers who check up to be sure all spam is being sent to the must spam list.

    As a member of the must spam list you can opt out IF the spammer honnors the opt out system. Of course opt out to be required.

    Fedral agents will randomly test opt outs, randomly test the list.

    and the e-mail address given for the "must spam" list must be actively read by the spammer. A fedral agent will occasionally contact the spammer at the address to be sure the spammer is still reading his e-mail if not he must pay a hefty fine and repeated offenses msy cost him his liccesn.

    This should inspire spammers to police themselfs quite well and do something about the worst spam tactics.
  • by marko123 ( 131635 ) on Tuesday September 02, 2003 @11:26PM (#6856049) Homepage
    Spammers deprive me of a fair way to defend myself. I don't like being put in a position where I break my own moral code to fight them off, but by their method of attack they have taken away my ability to fight them fairly.

    War fought in this way on these grounds is justified, yet I may still feel a little guilty when I look at their (servers') smoking remains.

    I hate people like this all the more because they give me only two choices: lose, or denigrate myself and win.

    I hope this explains a little better why people here hate spammers SO MUCH.

    (unless I've been trolled :)

  • by www.sorehands.com ( 142825 ) on Tuesday September 02, 2003 @11:28PM (#6856057) Homepage
    How about a few hundred times a day? And that is not the only thing, there is also the issue of overloading the mail server, the amount of time to read each e-mail before hitting the delete.


    Spamming is theft, plain and simple.


    Make money at home with your computer...sue spammers. [sexaffair.us]

  • Terms of contract (Score:5, Interesting)

    by Anonymous Coward on Tuesday September 02, 2003 @11:31PM (#6856076)
    From their site.

    The Bulk Club does not promote any portion of this site via bulk email period. It is against our hosting providers terms of service to do so and we will not tolerate anyone who abuses these rules on our web site

    How Ironic.
  • by swordgeek ( 112599 ) on Tuesday September 02, 2003 @11:33PM (#6856092) Journal
    An interesting point, but flawed.

    These people aren't political dissidents. They're criminals, and they're perpetrating crimes against ME! Furthermore, the data is a list of the members of a willful collusion. The very fact that they're on this list defines that they are actively, and deliberately trying to commit crimes against me and others.

    It's not a level playing field. I'd have sympathy for AA members, even if some of them had caused harm by drunk driving. I have no sympathy for people who gather to discuss and plan how best to commit crimes. I would have no sympathy for an online thieves guild (real thieves, not for games), or a collection of pedophiles who are trying to legitimise their actions.

    How much do you pay per month for your internet access? ~30% of that is because of spammers. If you're paying $30/month, then every year you have had $120 stolen from your person by these people.

    Do we provide safe harbor to unrepentant criminals? Not in my house, and not on my internet!
  • by cluge ( 114877 ) on Tuesday September 02, 2003 @11:33PM (#6856093) Homepage
    How many of the "memebers" are actually anti-spam people sniffing around to see who the spammers are? Then again, most fo the anti-spam community is smart enough to use a throw away e-mail address for this sort of thing.

    Seriously - to help eliminate the innocent bystander from the spammer who needs to be whacked , start by sending an e-mail.


    To: Direct Marketing Vendor
    From: Important Sounding Title
    cc: legal@fakedomain.com

    Dear Sir,

    I need you to help me kick off my marketing campaign by sending my message out to 31 million targeted clients. I will pay you 150,000 USD for this service. If you are interested, then please send your company name, a contact name, phone number and address so that I can have a contract drawn up. We will also need to have the name of your bank, and the address of the branch that you use for our contract as well. Please no account numbers, we only need to get the bank name and branch!

    Sincerely,
    bigcheese@fakedomain.com
    Important Sounding Title Goes here


    Wait for reply - post reply to slashdot/usenet/etc
    include all e-mail headers and or phone
    conversations

    Constantly remind people that :
    A. No one will protect your from these spammers

    B. No one will help you pay for the damages they cause.

    C. No one will give you back the time that SPAM has wasted in your life.

    Show up at the eventual fire with a can of gasoline.

    Now go off half cocked, see if I care!
  • Re:Naughty! (Score:4, Interesting)

    by marko123 ( 131635 ) on Tuesday September 02, 2003 @11:35PM (#6856107) Homepage
    The ethics are the same. But by "taking all means necessary", I will obviously draw a line somewhere between continually deleting/filtering unwanted mail which costs me in bandwidth and time, and beating them to a bloody pulp.

    I am just suggesting that by their methods to get in my inbox, they are not allowing me to make any progress against spam by "taking the high moral ground"/"taking it in the cornhole"
  • by ncc74656 ( 45571 ) <scott@alfter.us> on Tuesday September 02, 2003 @11:36PM (#6856111) Homepage Journal
    Every one of us should send them 10 e-mails each, preferably more, and we have lots of users.. MUHAHAHAHA

    I was thinking a better approach would be to slip their email addresses into comments on a webpage. With the way my websites are set up, a change to one file would get the list sent out with each page on that site...it'd be trivial to include a block like this:

    <!-- Spambots, chew on this:
    foo@bar.com
    joe@spammer.com
    ...
    -->

    Addresses in mailto links are obfuscated so that the spambots won't get them...these, of course, would be left alone.

    Now...does anyone have the list of spammers extracted from this site? I found real names in an archive linked through the Wired article, but no email addresses. :-|

  • Re:Great quote: (Score:3, Interesting)

    by notque ( 636838 ) on Tuesday September 02, 2003 @11:41PM (#6856139) Homepage Journal
    Google Search for number 1 gives....

    "From ebulkemail@yahoo.com Sat Jul 08 22:45:07 2000
    Received: from [208.198.227.115] by hotmail.com (3.2) with ESMTP id MHotMailBB315BF2000FD82197D9D0C6E3730D930; Sat Jul 08 22:43:18 2000
    From: "Drew Auman"
    To:
    Subject: Hi
    Mime-Version: 1.0
    Content-Type: text/plain; charset="iso-8859-1"
    Date: Sun, 9 Jul 2000 01:37:09

    Hello!

    349 MILLION people online are awaiting your offer ! Check This Out !

    Have you seen the new bulk email software? You DO NOT NEED anyone elses mail
    server!!! This software becomes its own mail server to send out thousands of emails per
    hour without using your ISPs resources and it sets up everything for you! Use our Atomic
    Harvestor to get thousands of emails extracted from the internet with a click of a button.
    Targeted emails !

    People have become rich in a short period of time with bulk email and you can as well.
    Even if you dont own a business, I have heard of those offering recipes through bulk email
    and getting a phenomenal response.

    If you would like to learn about the different software packages that are offered, you have
    to check out http://www.ejennys.com

    This is absolutely AMAZING!

    Best Regards,
    Drew Auman
    sales@ejennys.com

    PS: TO BE REMOVED from this list, please respond with the word REMOVE in the subject
    line of your email to us! Thank You !
    "
  • by goombah99 ( 560566 ) on Tuesday September 02, 2003 @11:46PM (#6856171)
    1) start spammer freindly chat room
    2) wait for membership to build trust
    3) "Accidentally" post membership on slashdot.
    4) submit private e-mail addresses to other spammers.
    5) repeat. no rest for the wicked.

    but seriously, do you think that maybe these spammers are really sort of victims of a multi-level marketing scam themselves. "here for 300$ you can buy this software and a list of names that will get you started in the exciting field of spamming.
    PLUS
    you will own these lists and software with the rights to resell it to others. You cant lose just like the thousands before you!!".


    and on and on it goes each chump-would-be-spam-king desperately recruiting ten more, making a few bucks, and down the pyraimd we go. the ones at the bottom lose but by them we have an avalanche of spam. Every assumes theres money in it since why else would they keep doing it....
  • by notque ( 636838 ) on Tuesday September 02, 2003 @11:54PM (#6856221) Homepage Journal
    Read some of my posts, I am working on... listing their brilliant schemes for all of us to take part in...

    yeah... that's it.
  • by vt0asta ( 16536 ) on Tuesday September 02, 2003 @11:59PM (#6856257)
    .50 caliber BMG [impactguns.com]

    In Vietnam, Marines used to zero out their .50s to a mile. Two guys (one shoots the other one is a spotter) on top of hill, would wreck major havoc. Couldn't even hear the report of the weapon. Used to take take out VC as they were getting their hair cut. I imagine this could be employed for a spammer sitting at their computer... Anyway, can't beat the ballistics on a .50 cal.

  • Re:Whois Search (Score:2, Interesting)

    by The Wicked Armadillo ( 123058 ) <dante.k4d4th@org> on Wednesday September 03, 2003 @12:03AM (#6856277) Homepage
    I have heard of this prefix being used by a catholic school of some sort in either TN, or OH. I rather suspect it is an accurate number.

    BTW the school was trying to get the number changed.

  • Speaking of Spam (Score:4, Interesting)

    by sinjayde ( 661825 ) on Wednesday September 03, 2003 @12:06AM (#6856303)
    Speaking of spam, yesterday I submitted a story to /. which was published. Unfortunately, I was stupid enough to include my email address in the story. Today I had over 100 virus' and spam sent to me, whereas in the last 3 months of using the address, I have had 0 spam. Just a warning to anyone else who wants to submit an article. I also wrote an email to Rob about this asking that a warning be put on the submission page about using email addresses on the site.
  • by Anonymous Coward on Wednesday September 03, 2003 @12:09AM (#6856318)

    Might it not be good to add in a referrer as well (--referrer=) (I'll let people think of good ones.)

    Or use the login page (http://www.thebulkclub.com/members/login.asp) with some nice login parameters (I'm not sure what they might be here as I can't quickly see the page source).

  • by Anonymous Coward on Wednesday September 03, 2003 @12:20AM (#6856366)
    Interesting to note that some combinations result in an SQL error. Should be trivial to login without authentication...
  • by frovingslosh ( 582462 ) on Wednesday September 03, 2003 @02:14AM (#6856764)
    Naw, take a tip from them. You don't need your real e-mail address on the e-mail you send. Better yet, put another e-mail address on the list in the reply to field. They soon will spam each other to death.
  • Re:Oh ho ho! (Score:3, Interesting)

    by Neophytus ( 642863 ) * on Wednesday September 03, 2003 @02:42AM (#6856819)
    Registering domains with hotmail addresses is against the TOS and hotmail has been known to terminate any found. hint hint.
  • Re:Spam Nazis (Score:1, Interesting)

    by Anonymous Coward on Wednesday September 03, 2003 @04:55AM (#6857139)
    There was an article on Salon about this guy. If anyone wants to read it check it out. [salon.com]
  • by geirlk ( 171706 ) on Wednesday September 03, 2003 @05:27AM (#6857206)
    Have a look at their webpage, and you'll find this section:
    "Please Note
    The Bulk Club does not promote any portion of this site via bulk email period. It is against our hosting providers terms of service to do so and we will not tolerate anyone who abuses these rules on our web site."

    So what we need to do is bulk mail a promotion for their site, that way their hosting providers will throw them.

    Only one teeny weeny little problem with this plan, the bulk mail part... I just can't make myself do it, it goes against every moral fibre in my body!
  • by Anonymous Coward on Wednesday September 03, 2003 @08:46AM (#6857909)
    Whatever you do, do *NOT* go to their login page [thebulkclub.com]. If you do go there, do *NOT* put in an apostrophe for both your username and your password. If you should somehow make the mistake of doing so, do NOT read the error message from SQL server, and do NOT proceed to read any research papers [nextgenss.com] on how to exploit SQL injection bugs. You have been warned...:)
  • Re:Mailinator (Score:5, Interesting)

    by filenabber ( 628550 ) on Wednesday September 03, 2003 @08:48AM (#6857922) Homepage Journal
    If you like Mailinator, check out a program I recently wrote called Nator - it uses Mailinator as a backend and it can scrape the email on mailinator.com and send it to your home email address. It also does some cool things with random usernames. Details here [tinyurl.com]. It's free, written in Java, and is open source (or will be once we're out of the beta phase) Brian
  • by Hierarch ( 466609 ) <CaptainNeeda @ g m a il.com> on Wednesday September 03, 2003 @10:52AM (#6858874) Homepage

    Am I the only one who's first thought was not "Great, let's blow them off the air!"? My first thought was "Hmmm... I could join the organization and see what tools they use, see where the addresses are coming from, etc., etc. Know thine enemy.

    My second thought was "Um, wait, the hordes of rabid slashdotters will be wreaking major havoc on the list o exposed addresses. I don't want my address on that list - my ISP would nuke me in a heartbeat with the major-league smack-down that's coming."

    Anybody else here want to be a volunteer from the audience?

THEGODDESSOFTHENETHASTWISTINGFINGERSANDHERVOICEISLIKEAJAVELININTHENIGHTDUDE

Working...