Anti-spam firm Blue Security is to scrap its spam-fighting effort after deciding its escalating conflict with a renegade spammer was placing the internet as a whole in jeopardy.
Blue Security established a 'Do Not Intrude Registry' (akin to the Do Not Call Registry for telemarketing) with around 450,000 members. Participants downloaded a small tool, called Blue Frog, which systematically floods the websites of spammers with opt-out messages. Depending on your point of view, this initiative can either be viewed as community action or vigilantism.
Read full story: The Register
Related topics: Registry Services, Security, Spam
To post comments, please login or create an account.
DNS SecuritySponsored byAfilias | |
Top-Level DomainsSponsored byMinds + Machines | |
MobileSponsored bydotMobi | |
IPv6Sponsored byNominum | |
SecuritySponsored byVerisign | |
DNSSponsored byNeustar UltraDNS |
Many of the facts of this story are distorted when presented by the folks at Blue Security(RIP). To start at the end, it appears they were shutdown by their funding partners. Within 12 hours of the announcement they were scrubbed from two key partner sites.
To start at the beginning, we know that when they came to the Internet community asking what we all thought of their idea, we labeled it vigilantism and advised them against it. They continued upon their course regardless and the end result is no surprise.
The rejection of their method included the Anti Spam Research
Group "ASRG" and many other organizations and prominent leaders
of spam mitigation.
What actually took place during this DDOS is documented here:
http://www.renesys.com/blog/2006/05/the_bluesecurity_fiasco_dont_m.shtml#more
The rest of the story about grandios attacks that they would bear responsibility for are just plan hogwash. The facts that were reported back to many of us were quotes of ICQ conversations and claims of bribery at Tier1 ISP's. As part of the operator community, I can say that we remain skeptical of many of their claims, if not all.
The company mentioned here (or its associate or affiliate or whatever) seems to have been involved in a large email campaign last week promoting "Anti DDOS measures". If they did it, it was spam; if it was done to them, it was a continuation of malice.
Bottomline though is that many sites were down, and there seems to be some coincidental (or not) timings.
Ram, what happened there is called a "joe job", or an impersonation spam, a method that some folks use to "take revenge" on someone and cause them many problems. The speculation is that Blue Security or Skybox did not send that email.