RE: Blue Security Debacle?

[Alex Eckelberry <AlexE () sunbelt-software com>]

I contacted them and they swore the spammers were using standard
commercial email lists, not actual names of BlueSecurity subscribers. 

But now the site is down as an apparent victim of DoS.

And it might very well be true that the spammers got the email addresses
of the BlueFrog users... After all, the users contact the spammers to
get off the databases....

Alex


-----Original Message-----
From: funsec-bounces () linuxbox org [mailto:funsec-bounces () linuxbox org]
On Behalf Of Fergie
Sent: Tuesday, May 02, 2006 6:43 PM
To: funsec () linuxbox org
Subject: [funsec] Blue Security Debacle?


Okay -- I've been waiting to say anything about this here, due to
conflicting reports on what the hell is actually going on, but here is
an article on Wired news thsi afternoon which brings it into the
limelighht.

Still sounds like a lot of supposition and guessing to me. Anyone know
anything more concrete?


[snip]

An unusual spam war has erupted on the net, pitting an apparently irate
spammer against an Israeli antispam firm that claims it's making junk
e-mailers think twice about bugging its customers.

Blue Security's controversial method uses reverse spam, if you will,
returning massive quantities of opt-out messages to companies it
identifies as spammers.

Apparently the companies on the receiving end don't like it one bit.

In an escalation of hostilities this week, Blue Security customers began
receiving thousands of messages demanding that members either drop the
company's service or continue to receive an avalanche of unwanted
e-mails. In addition, U.S. internet users were unable to access Blue
Security's website Tuesday. The company said it is still investigating
the cause, which may have been a distributed denial of service attack.

[snip]

More: http://www.wired.com/news/technology/internet/0,70798-0.html

- ferg


--
"Fergie", a.k.a. Paul Ferguson
 Engineering Architecture for the Internet
 fergdawg () netzero net or fergdawg () sbcglobal net
 ferg's tech blog: http://fergdawg.blogspot.com/


_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.

_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.