Re: [tor-relays] Jerk spammers on tor-relays

[Mirimir <mirimir@xxxxxxxxxx>]

On 09/21/2018 02:42 PM, Keifer Bly wrote:
> I do agree. I had said before that this could possibly be an attempted
> attack on the network by trying to infect relay operators machines with
> spyware, etc.
> 
>> Sure. For those, you just keep filing abuse reports. Just automate it,
> so every message triggers a report. If enough list members do that,
> there'll be lots of abuse reports.
> 
> How would you suggest we do that? thank you.

First you get all of the spam from addresses. I did that by exporting
from Thunderbird to text files, and then using grep to grab all of the
"From:" lines. Then I massaged the data in gnumeric, to pull unique
"foo@xxxxxxx". I have 43 so far, and 65% are Gmail.

In Thunderbird, one can create a filter on Inbox that selects messages
by from address, forwards them somewhere, and then puts them wherever
you like, or deletes them. So you configure a filter for each one, and
forward messages to the appropriate abuse address.

> On Fri, Sep 21, 2018 at 2:35 PM Mirimir <mirimir@xxxxxxxxxx> wrote:
> 
>> On 09/21/2018 01:24 PM, Keifer Bly wrote:
>>>
>>> ➢ There are lots of technical folk on these tor lists.
>>> There ought to be at least a few who'd enjoy killing some spam servers.
>>>
>>> What exactly do you mean by “killing them”? If you are referring to
>> forcibly taking the servers offline, that would most likely be illegal.
>>
>> As Marv says, "I love hitmen. No matter what you do to them, you don't
>> feel bad." So I don't care so much about "illegal". Indeed, there is
>> effectively no law that protects us from jerks like this. Maybe they're
>> just sex spammers, but you gotta treat them like malicious attackers,
>> because they might be. That's especially so because they're targeting
>> Tor Project lists. So it comes down to the right of self-defense.
>>
>>> Not to mention an amount of the spamming addresses are using Gmail and
>> Yahoo mail accounts, and we can’t “kill” those sources.
>>
>> Sure. For those, you just keep filing abuse reports. Just automate it,
>> so every message triggers a report. If enough list members do that,
>> there'll be lots of abuse reports.
>>
>> <SNIP>
>> _______________________________________________
>> tor-relays mailing list
>> tor-relays@xxxxxxxxxxxxxxxxxxxx
>> https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays
>>
> 
> 
> 
> _______________________________________________
> tor-relays mailing list
> tor-relays@xxxxxxxxxxxxxxxxxxxx
> https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays
> 
_______________________________________________
tor-relays mailing list
tor-relays@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays