Re: [tor-relays] Jerk spammers on tor-relays

[Mirimir <mirimir@xxxxxxxxxx>]

On 09/21/2018 05:17 PM, Keifer Bly wrote:
>> In Thunderbird, one can create a filter on Inbox that selects messages
> by from address, forwards them somewhere, and then puts them wherever
> you like, or deletes them. So you configure a filter for each one, and
> forward messages to the appropriate abuse address.
> 
> Yes, Gmail allows to create filters to automatically forward emails from
> certain email addresses to other email addresses. But what would be an
> appropriate way to forward the spamming addresses to the Google and Yahoo
> abuse teams without reporting legitimate contacts using Gmail and Yahoo
> addresses?

You need a separate filter for each spam address. So one filter would
grab messages from "aayushinfo132@xxxxxxxxx" and forward them to Google
abuse. Another for "alisteraustin037@xxxxxxxxx" would do the same. But
ones for "brisasarai235@xxxxxxxxx" and "donaghy.kelly@xxxxxxxxx" would
go to Yahoo abuse. And so on. And whenever you got sex spam from a new
address, you create a filter for that. It can probably be at least
partially automated.

> I guess we could create a filter that if it has the word sex in
> it, then it will forward it to the Google or Yahoo account abuse team, but
> unfortunately, upon looking into it, neither google nor yahoo have email
> addreses to report spamming accounts to, only their forms at
> https://support.google.com/mail/contact/abuse?hl=en and
> https://io.help.yahoo.com/contact/index?y=PROD_MAIL_ML&token=w5FCchB1dWFBK0e02%252BwEytY5hQVPWez6jQXQpJKMKKRf3UfKsgwVjuIdkwxzjMBV%252Fs9wvFgBUOcj9Kvgqaaq8ToTSl%252F5NpfEjc5uXdSiOjUPoYfH611dctuQUsqgXsXNc75gmvOJSlLWPQ6YZTlgcdNL9DaBB%252FOU&locale=en_US&page=contactform&selectedChannel=email-icon&isVip=false
> ,

You might be able to dump your spam into an iMacros (or whatever)
browser script that completed those forms.

> Dang, if only yahoo and google had an email adress to forward sappming
> addresses to, then I suggested we could try create filters in our email
> accounts to forward the spam emails to. What else could we do?

Well, Google does -- registrar-abuse@xxxxxxxxxx -- but staff monitoring
it got tired of all my forwarded spam, and told me to use the form ;)
But that's too much work. Maybe I'll see if I can script it.

> On Fri, Sep 21, 2018 at 4:33 PM Mirimir <mirimir@xxxxxxxxxx> wrote:
> 
>> On 09/21/2018 02:42 PM, Keifer Bly wrote:
>>> I do agree. I had said before that this could possibly be an attempted
>>> attack on the network by trying to infect relay operators machines with
>>> spyware, etc.
>>>
>>>> Sure. For those, you just keep filing abuse reports. Just automate it,
>>> so every message triggers a report. If enough list members do that,
>>> there'll be lots of abuse reports.
>>>
>>> How would you suggest we do that? thank you.
>>
>> First you get all of the spam from addresses. I did that by exporting
>> from Thunderbird to text files, and then using grep to grab all of the
>> "From:" lines. Then I massaged the data in gnumeric, to pull unique
>> "foo@xxxxxxx". I have 43 so far, and 65% are Gmail.
>>
>> In Thunderbird, one can create a filter on Inbox that selects messages
>> by from address, forwards them somewhere, and then puts them wherever
>> you like, or deletes them. So you configure a filter for each one, and
>> forward messages to the appropriate abuse address.
>>
>>> On Fri, Sep 21, 2018 at 2:35 PM Mirimir <mirimir@xxxxxxxxxx> wrote:
>>>
>>>> On 09/21/2018 01:24 PM, Keifer Bly wrote:
>>>>>
>>>>> ➢ There are lots of technical folk on these tor lists.
>>>>> There ought to be at least a few who'd enjoy killing some spam servers.
>>>>>
>>>>> What exactly do you mean by “killing them”? If you are referring to
>>>> forcibly taking the servers offline, that would most likely be illegal.
>>>>
>>>> As Marv says, "I love hitmen. No matter what you do to them, you don't
>>>> feel bad." So I don't care so much about "illegal". Indeed, there is
>>>> effectively no law that protects us from jerks like this. Maybe they're
>>>> just sex spammers, but you gotta treat them like malicious attackers,
>>>> because they might be. That's especially so because they're targeting
>>>> Tor Project lists. So it comes down to the right of self-defense.
>>>>
>>>>> Not to mention an amount of the spamming addresses are using Gmail and
>>>> Yahoo mail accounts, and we can’t “kill” those sources.
>>>>
>>>> Sure. For those, you just keep filing abuse reports. Just automate it,
>>>> so every message triggers a report. If enough list members do that,
>>>> there'll be lots of abuse reports.
>>>>
>>>> <SNIP>
>>>> _______________________________________________
>>>> tor-relays mailing list
>>>> tor-relays@xxxxxxxxxxxxxxxxxxxx
>>>> https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays
>>>>
>>>
>>>
>>>
>>> _______________________________________________
>>> tor-relays mailing list
>>> tor-relays@xxxxxxxxxxxxxxxxxxxx
>>> https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays
>>>
>> _______________________________________________
>> tor-relays mailing list
>> tor-relays@xxxxxxxxxxxxxxxxxxxx
>> https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays
>>
> 
> 
> 
> _______________________________________________
> tor-relays mailing list
> tor-relays@xxxxxxxxxxxxxxxxxxxx
> https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays
> 
_______________________________________________
tor-relays mailing list
tor-relays@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays