SpamdSpammer - Guys, it seems that we are doing the a very similar project

0 views
Skip to first unread message

Vish

unread,
Aug 16, 2006, 2:51:11 PM8/16/06
to okopipi-discuss
Hi,

I have just found this project, while updating info about us in
wikipedia.

We are doing something very similar; we build software that constantly
downloads stuff from spammer's websites trying to make it harder for
them to maintain websites.

we are a small group of friends that have started to do a project a
couple of days after bluesecurity has closed. I am wondering if there
is a way we can join forces...

we are now in the first beta stage (we have sent it to some other
friends to check how it works).

You are all welcome to take a look at http://www.spamdspammer.com/

Please let us know what you think and how we can join forces...


the idea behind our protection from attacks by spammers is based on the
following
1. The client will be placed on many different download sites (like
download.com, tucows,...)
2. The client comes with a metadata file (signed with a private key)
3. In the metadata file lists many different free sites that can
provide
a. Version updates
b. List of sites to attack
c. New metadata file

Everything is signed, so we believe it to be safe, and since we can use
as many "free host" to hold the metadata/list of sites to attack we
believe the system is very well protected


cheers,
Vish

Vish

unread,
Aug 16, 2006, 2:47:45 PM8/16/06
to okopipi-discuss
Hi,

I have just found this project, while updating info about us in
wikipedia.

We are doing something very similar; we build software that constantly
downloads stuff from spammer's websites trying to make it harder for
them to maintain websites.

we are a small group of friends that have started to do a project a
couple of days after bluesecurity has closed. I am wondering if there
is a way we can join forces...

we are now in the first beta stage (we have sent it to some other
friends to check how it works).

You are all welcome to take a look at http://www.spamdspammer.com/

Please let us know what you think and how we can join forces...

p.s.

Journeyman

unread,
Aug 16, 2006, 8:30:11 PM8/16/06
to okopipi-discuss
Your project is illegal, it is a DoS attack, you aim at taking down the
website or atleast use up their resources. Our project is not trying
to cause any damage (Lack of service can be a side effect), we are
exercising our right to complain. They ignore every other methode of
complaining so we are going right to the source. In short we won't be
"joining forces", you are more than welcome to join our efforts and
help out, however Okopipi will not be apart of anything that is
illegal. Thank you for your intrest in our project.

Mosinu

unread,
Aug 17, 2006, 12:06:03 AM8/17/06
to okopipi-discuss
I have to agree with Journeyman here, you openly advertising that you
are attacking sites. This is asking to get the men in suits kicking in
your doors at 3AM. Best of luck to your project, I would suggest you
look at speaking with a lawyer before your project goes much further
for your own safety.

whizzy whig

unread,
Aug 17, 2006, 8:00:23 AM8/17/06
to okopipi-discuss

Mosinu wrote

>
>I have to agree with Journeyman here, you openly advertising that you
>are attacking sites.

I also agree. However....


>This is asking to get the men in suits kicking in
>your doors at 3AM.

The authorities are very well aware of the many and continuous attempts
at fraud, deception, solicitations to purchase pedophilic material,
illegal drugs and a hundred and one other illegal things that try to
gain entry to my inbox every day and so far they have done nothing
about
it. I suspect that that if they were to take me, or anyone, to task
over a few complaint emails, even if they were designed as a deliberate
ddos attack it would make the 6 o'clock news on the same day and they
would have a very difficult task when it comes to picking an unbiased
jury. So on balance I think you are being unnecessarily alarmist.


> Best of luck to your project,

Better still Vish, come and join us and remove the unnecessary
conflicts. It is the spammer whose time we want to waste not the local
police.

Vish

unread,
Aug 17, 2006, 3:57:28 PM8/17/06
to okopipi-discuss
Thanks for the reply,

Maybe I should explain it a little better
We are not planning on doing DDos attacks.
We download bandwidth, but we set limits on the amount users can
download from a website.
The target is to make it harder to own a spammer website. While making
sure we don't kill the data center, hosting companies, or even shared
servers.

It is a little more similar to what Lycos did with their "make love not
spam"

We currently also have a lawyer checking for us the legal status of
such "attacks"
To the best of our current understanding, and the legal advice we have
received so far, this could be considered legal, we are still waiting
on some addition research

Our software will have many different attacks, we also intend to add
"BluesSecurity" like attack, our software client already support an
auto-update system, allowing us to extend it and add different
plug-ins...

Vish

unread,
Aug 17, 2006, 4:11:47 PM8/17/06
to okopipi-discuss
whizzy whig,

What you wrote is basically what our lawyers said. That they doubt a
spammer would sue us or go to the FBI :)

As we wrote we do want to make sure that no bystanders get hurt and
this is why we have volunteers checking emails reported as spam and
this is why we put a limit on the potential overall bandwidth.

>>Better still Vish, come and join us and remove the unnecessary
>>conflicts.

That was exactly my reason for contacting this group the minute we
learnt about you; It would be great if we could find a way for joining
forces

>> It is the spammer whose time we want to waste not the local
>>police.

Well, I am not a big fan of the police, but you are right, I do believe
we only want to make a hassle for the spammers. But if we do make the
6-oclock news we hope it would add a couple of people to the cause.

Thanks

Vish

whizzy whig

unread,
Aug 17, 2006, 8:26:18 PM8/17/06
to okopipi-discuss
Vish wrote:

> What you wrote is basically what our lawyers said. That they doubt a
> spammer would sue us or go to the FBI :)

If it is of any interest to your lawyers it would appear that similar
opinions are shared by the rest of the world and personally I feel it
is something of a shame that it won't happen.

> It would be great if we could find a way for joining
> forces

I am a user and as such have little to do with the project at it's
current stage of development, except to add weight to the numbers and
offer ill informed opinion.

Take a full part in the relevant discussions, offer what you know
freely, be prepared for criticism and do bear in mind that those who
manage the project are there partly on the basis of a well expressed
paranoia gene.

.

Journeyman

unread,
Aug 17, 2006, 9:13:38 PM8/17/06
to okopipi-discuss
>> We are not planning on doing DDos attacks
That is exactly what you are doing though, it doesnt matter if you
limit it or not

Sure the spammers may not sue you, but the companies that are hosting
their websites may, or the ISP that the server's hosting the websites
may. The fact is what you are doing is illegal in most countries and
you are putting your users in risk. I am not saying I don't agree with
what you are doing personally, hell I would like to see people hack
their sites and such, but we can't just do stuff like that without
lowering ourselves to their level.

Mosinu

unread,
Aug 18, 2006, 1:59:40 AM8/18/06
to okopipi-discuss
No, the spammer might not go after you directly. However do remember
that you are consuming bandwidth from ISP's that maybe an innocent
bystander. You also may find spammers hosting at real hosting sites
(Maxum for instance) who in fact will go after you very quickly if they
perceive you to be attempting to DoS/DDoS them. The fact that your
actually term your method as an attack is enough to draw the attention
of the feds and different states have different laws, as do other
countries...which could affect you. This could put you into a very
sticky situation, as well as your users.

You claim to be "hackers" on your website, then you should know one of
the worst things you can do is advertise anything that will get the
feds snooping around you. They don't play around and politics can also
play a role in how much they want keep investigate you and your
operation. It is a dangerous game to play.

As I said before, best of luck to you guys. But for my part, that is a
dance I prefer to avoid.

j0k3r

unread,
Sep 11, 2006, 12:49:46 PM9/11/06
to okopipi-discuss
AVG antivirus thinks that your "setup program" is a worm
(Win32/Parite). Therefore? Which is the truth?

Janeway

unread,
Sep 12, 2006, 11:49:19 AM9/12/06
to okopipi-discuss

j0k3r wrote:
> AVG antivirus thinks that your "setup program" is a worm
> (Win32/Parite). Therefore? Which is the truth?


So does Kaspersky.

Janeway

unread,
Sep 12, 2006, 11:49:32 AM9/12/06
to okopipi-discuss

j0k3r wrote:
> AVG antivirus thinks that your "setup program" is a worm
> (Win32/Parite). Therefore? Which is the truth?

Kaspersky does also.

j0k3r

unread,
Sep 12, 2006, 6:40:01 PM9/12/06
to okopipi-discuss
A false positive could happen... but now we have two anti-virus
programs that think the same thing... I dunno what all you ppl wanna
do, but i'll stay millions of miles away from this pestilence-website.

j0k3r

unread,
Sep 13, 2006, 8:33:58 AM9/13/06
to okopipi-discuss
Update: they have changed the "installation" file. Now seems to be a
normal installer. Even more mysterious...

j0k3r

unread,
Sep 15, 2006, 6:42:36 AM9/15/06
to okopipi-discuss
Wow! The installer is signed by "Old Hackers Brigade". Even better! :-P
I don't think i will install this program... :-/

Reply all
Reply to author
Forward
0 new messages