[tor-relays] Jerk spammers on tor-relays

[Keifer Bly]

> In Thunderbird, one can create a filter on Inbox that selects messages
by from address, forwards them somewhere, and then puts them wherever
you like, or deletes them. So you configure a filter for each one, and
forward messages to the appropriate abuse address.

Yes, Gmail allows to create filters to automatically forward emails from
certain email addresses to other email addresses. But what would be an
appropriate way to forward the spamming addresses to the Google and Yahoo
abuse teams without reporting legitimate contacts using Gmail and Yahoo
addresses? I guess we could create a filter that if it has the word sex in
it, then it will forward it to the Google or Yahoo account abuse team, but
unfortunately, upon looking into it, neither google nor yahoo have email
addreses to report spamming accounts to, only their forms at
https://support.google.com/mail/contact/abuse?hl=en and
https://io.help.yahoo.com/contact/index?y=PROD_MAIL_ML&token=w5FCchB1dWFBK0e02%252BwEytY5hQVPWez6jQXQpJKMKKRf3UfKsgwVjuIdkwxzjMBV%252Fs9wvFgBUOcj9Kvgqaaq8ToTSl%252F5NpfEjc5uXdSiOjUPoYfH611dctuQUsqgXsXNc75gmvOJSlLWPQ6YZTlgcdNL9DaBB%252FOU&locale=en_US&page=contactform&selectedChannel=email-icon&isVip=false
,

Dang, if only yahoo and google had an email adress to forward sappming
addresses to, then I suggested we could try create filters in our email
accounts to forward the spam emails to. What else could we do?

On Fri, Sep 21, 2018 at 4:33 PM Mirimir <mirimir at riseup.net> wrote:

> On 09/21/2018 02:42 PM, Keifer Bly wrote:
> > I do agree. I had said before that this could possibly be an attempted
> > attack on the network by trying to infect relay operators machines with
> > spyware, etc.
> >
> >> Sure. For those, you just keep filing abuse reports. Just automate it,
> > so every message triggers a report. If enough list members do that,
> > there'll be lots of abuse reports.
> >
> > How would you suggest we do that? thank you.
>
> First you get all of the spam from addresses. I did that by exporting
> from Thunderbird to text files, and then using grep to grab all of the
> "From:" lines. Then I massaged the data in gnumeric, to pull unique
> "foo at bar.baz". I have 43 so far, and 65% are Gmail.
>
> In Thunderbird, one can create a filter on Inbox that selects messages
> by from address, forwards them somewhere, and then puts them wherever
> you like, or deletes them. So you configure a filter for each one, and
> forward messages to the appropriate abuse address.
>
> > On Fri, Sep 21, 2018 at 2:35 PM Mirimir <mirimir at riseup.net> wrote:
> >
> >> On 09/21/2018 01:24 PM, Keifer Bly wrote:
> >>>
> >>> ➢ There are lots of technical folk on these tor lists.
> >>> There ought to be at least a few who'd enjoy killing some spam servers.
> >>>
> >>> What exactly do you mean by “killing them”? If you are referring to
> >> forcibly taking the servers offline, that would most likely be illegal.
> >>
> >> As Marv says, "I love hitmen. No matter what you do to them, you don't
> >> feel bad." So I don't care so much about "illegal". Indeed, there is
> >> effectively no law that protects us from jerks like this. Maybe they're
> >> just sex spammers, but you gotta treat them like malicious attackers,
> >> because they might be. That's especially so because they're targeting
> >> Tor Project lists. So it comes down to the right of self-defense.
> >>
> >>> Not to mention an amount of the spamming addresses are using Gmail and
> >> Yahoo mail accounts, and we can’t “kill” those sources.
> >>
> >> Sure. For those, you just keep filing abuse reports. Just automate it,
> >> so every message triggers a report. If enough list members do that,
> >> there'll be lots of abuse reports.
> >>
> >> <SNIP>
> >> _______________________________________________
> >> tor-relays mailing list
> >> tor-relays at lists.torproject.org
> >> https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays
> >>
> >
> >
> >
> > _______________________________________________
> > tor-relays mailing list
> > tor-relays at lists.torproject.org
> > https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays
> >
> _______________________________________________
> tor-relays mailing list
> tor-relays at lists.torproject.org
> https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.torproject.org/pipermail/tor-relays/attachments/20180921/373d6c99/attachment.html>