Now this is a creative approach to spam management from Lycos! It is
illegal but I can't help enjoying this one from the BBC:
Anti-spam plan overwhelms sites
The screensaver uses idle computers to tackle spam sites
A plan to bump up the bandwidth bills of spammers seems to be getting
out of control.
Earlier this week Lycos Europe released a screensaver that bombards
spam websites with data to try to increase the cost of running such
sites.
But analysis shows that, in some cases, spam websites are being
completely overwhelmed by the traffic being directed their way.
The Lycos plan has also come under fire for encouraging vigilantism.
Attack pattern
Lycos Europe's "Make love not spam" campaign was intended as a way for
users to fight back against the avalanche of junk mail messages coming
their way.
Participants were encouraged to download the Lycos screensaver which,
when their PC was idle, would then send lots of data traffic to
websites that peddle the goods and services mentioned in spam
messages.
Lycos said the idea was to get the spam sites running at 95% capacity
and generate big bandwidth bills for the spammers behind the sites.
The screensaver has reportedly been downloaded more than 90,000 times
since it was launched.
But monitoring firm Netcraft has analysed response times for three of
the sites the screensaver targets and has found that the campaign is
being too successful.
Some sites are being knocked out by the anti-spam campaign
Two of the sites being bombarded by data have been completely knocked
offline. One other site has been responding to requests only
intermittently as it struggles to cope with the traffic the
screensaver is pointing its way.
The downing of the sites could dent Lycos claims that what it is doing
does not amount to a distributed denial of service attack (DDoS). In
such attacks thousands of computers bombard sites with data in an
attempt to overwhelm them.
Finnish anti-virus firm F-Secure advised against using the screensaver
in case of legal problems.
Currently laws in many countries do not explicitly outlaw DDoS attacks
but many nations are re-drafting computer use laws to make them
specific offences.
Lycos Europe has yet to comment on this latest development in its
anti-spam campaign.
Criticism
However, the company has denied reports that the "Make love not spam"
website was hacked earlier this week.
Some users of the site claimed to have got back a message that said:
"Yes, attacking spammers is wrong. You know this, you shouldn't be
doing it. Your IP address and request have been logged and will be
reported to your ISP for further action."
The law has yet to catch up with some aspects of net life
Lycos said the supposed defacement of the site was a hoax. It added
that its campaign must be having an effect if spammers were adopting
such tactics.
It said that the strong interest following reports on news sites such
as Slashdot had made the anti-spam site slow to respond.
The campaign has come under fire from some corners of the web.
Many discussion groups have said that it set a dangerous precedent and
could incite vigilantism.
"If you do manage to swamp the spammers then you set yourself up for
more attacks in return," said Graham Cluley, senior technology
consultant at anti-virus firm Sophos.
"Having this screensaver in a large company could slow down your
internet connection," he said. "And what is to stop a mistake
happening and the wrong number going on the list?"
Mr Cluley urged users not to respond to anything in spam messages
Visit my website:
http://www.mzuschlag.com
Mike-UK - 03 Dec 2004 00:26 GMT
> Now this is a creative approach to spam management from Lycos! It is
> illegal but I can't help enjoying this one from the BBC:
[quoted text clipped - 7 lines]
> spam websites with data to try to increase the cost of running such
> sites.
SNIP
> Some sites are being knocked out by the anti-spam campaign
> Two of the sites being bombarded by data have been completely knocked
[quoted text clipped - 6 lines]
> such attacks thousands of computers bombard sites with data in an
> attempt to overwhelm them.
Any half decent server would have either an automatic
traffic monitor/manger process to ensure overload did not
occur, or at least a pre-set maximum number of connections
it would accept at any given time from either specific
identified IP addresses, or groups of addresses etc.
The real legal problem is if the spammers, who are still
operating simply because the law allows them to use other
people's/company's internet connections for their own (well
documented as unwanted and uninvited) business purposes,
claim successfully that this screensaver has affected their
capacity to do the business that they do and seek damages.
I wouldn't like to have to defend Lycos in this scenario.
Mind you, Lycos IS connected to the Carnegie-Mellon
operation, so maybe they'll get away with it. :\
Should be an interesting one to watch though as there are
many precidents being challenged and/or established here.
The last concern I'd have is that Lycos do not seem to be
making much of a point of mentioning that all this
screensaver action is sending multiple confirmations of an
active IP/Email address that will doubtless be used at a
later date by the spammers, and I'd have to check that this
screensaver was not in fact covert spyware either if I had
an interest in it. (I NEVER liked Lycos's TOS!)
Worth a thought? 80

Signature
---------------------------
Another squeaking wheel @
http://www.mikeswebsite.pwp.blueyonder.co.uk/
http://www.deja-moo.co.uk/~mikesweb/