Joseph Miller wrote:
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
On Thursday 16 December 2004 11:47 am, exon wrote:
Ian wrote:
On 14 Dec 2004 at 13:43, Adam Tuliper wrote:
<snip>
Personally, I like stringing them on and giving them false information
and wasting their time. Its fun, I recommend all of you try it : )
You make have stumbled across a solution
here ;)
Why not code an automated system that fills
in their bogus log in screens with false
information?
There are only a limited number of banking
web sites around so a template could be
created for each.
If enough people join in these phishers
would get swamped with information and
wouldn't know the good from the bad.
Thoughts ?
This is known to be effective against spammers which use href-links in
email to verify 'live' email-addresses. It's usually highly effective if
you find something that looks like
www.some-site.com/remove_me.asp?m=email@somewhere.org
I used to get around 400 spam emails a day, so I wrote a quick script to
connect to a couple of these urls a couple of million times with
auto-generated email-addresses. Sometime during the second night of
running I kept getting connection refused and spam dropped down to
around 40 / day.
>
> Exon,
> Would you happen to have that script available? If many people had
> access to this script it could possibly cause DDoS and severely limit
> spammers. I would, of course, not necessarily recommend this
> particular action because of the legal implications, so I must say,
> "We could use this as a possible threat to illegal spammers".
> Thanks for the info.
>
> - -Joseph
>
Also have a look at http://freshmeat.net/projects/formflood/
About:
Web Form Flooder is a Java console utility that will analyze a Web page,
complete any forms present on the page with reasonable data, and submit
the data. The utility will also crawl links within the site in order to
identify and flood additional forms that may be present.
Regards,
Rogan
--
Rogan Dawes
*ALL* messages to discard@dawes.za.net will be dropped, and added
to my blacklist. Please respond to "lists AT dawes DOT za DOT net"
