FreeLists / arachne / [arachne] Re: Spam

[Rob <robo13@xxxxxxxxxxx>]

Arachne at FreeLists---The Arachne Fan Club!

Udo,
 The U.S. produces most of the world's spam. Those who
run botnets are paid between 1cent and 10cents for each
zombie they control. A zombie in the U.S. brings 8-10
cents for each zombie, while a zombie in China is worth
only 1-2cents. Canadian zombies are second in worth only
to U.S. zombies. American and Canadian zombies are usually
much higherend machines than those of other countries, and
more likely to be using broadband.

http://www.sophos.com/pressoffice/news/articles/2006/01/dirtdozjan05.html
http://www.spamhaus.org/statistics/countries.lasso

Rob

--
     -----Pine Email on Slackware GNU/Linux-----

On Mon, 1 Jan 2007, Udo Kuhnt wrote:

> Arachne at FreeLists---The Arachne Fan Club!
>
> > The changing IP Address may be "good for the spammer", as they
> > use forged and hijacked IP Addresses anyway.  What I'm trying to
> > get across is the fact that my computers, none of them, in over
> > 12 years of some sort of dialup access, has been hijacked.  Call
> > it luck, or diligence, but that's the way it is.  When I connect
> > to my ISP, via dialup, each time I get a different IP address.
> > This makes me a moving target, hard to get crosshairs on, and
> > by extension much harder to compromise.  If some jackass on a
> > dialup connection wishes to spam a newsgroup, email list or what
> > ever it may be, then the time it is going to take is multiplied
> > by the slower speeds of dialup.  To best of my knowledge, no known
> > "spammer" uses hijacked dialup only connections...they go for the
> > always on broadband highspeed connections.
> Wiz,
>
> did you not read what I have written before? I already told you that the
> majority of spammers that pollute my web forum use this approach to make
> themselves a "moving target", as you have aptly called it, to keep the
> administrator (that's me) from locking them out by simply entering their
> IP address into the block list. They cannot do this with an "always on"
> type connection. And BTW, one cannot "forge" or "hijack" IP addresses -
> they are assigned to one by the ISP or IP address registry organisation.
> Most of the Spam in my forum comes from addresses in Asia or Latin
> America which shows that the spammers operate from countries with weak
> or non-existent anti-spam laws, rather than from "hijacked zombie PCs",
> as you seem to suspect. Besides, it costs much less time to post a
> message in a forum than to write a trojan horse that could do the same.
> I have even found hints as to which software the spammers use for their
> abuse, and those are Spam robot programs, not trojan horses. Even Spam
> mails often come from a server that is only connected to the Internet
> for the time it takes to post the mails, and disconnected thereafter to
> avoid detection.
>
> And just like Steve mentioned, modem speeds are much higher nowadays
> than your measly (sorry) 56 Kbps. Spammers can get both, large bandwidth
> *and* dynamic IP addresses. I do not have a fixed IP address myself, so
> I know what I am talking about.
>
> Even though you seem to find the thought disgusting that Spammers use
> the same methods that you use to protect yourself against hackers to
> protect themselves against anti-spam measures, it is a reality. I did
> not write this to insult you (in fact, I hardly understand why you take
> this personally), but rather to inform you that things are never as
> simple as one wishes them to be. Claiming that all evil in the Internet
> comes from always-on broadband connections and that therefore they
> should be banned is just like claiming that the opposite is true - there
> are good points to both arguments, but obviously a solution could not be
> that simple.
>
> Regards,
>
> Udo
>
> -- The DR-DOS/OpenDOS Enhancement Project - http://www.drdosprojects.de
>
> -- This mail was written by a user of The Arachne Browser - http://arachne.cz/
>                  Arachne at FreeLists
> -- Arachne, The Premier GPL Web Browser/Suite for DOS --
                 Arachne at FreeLists                  
-- Arachne, The Premier GPL Web Browser/Suite for DOS --