Current time: 04-23-2014, 09:20 AM Hello There, Guest! (LoginRegister)

when released, will catchall's work?
09-13-2004, 09:23 PM
Post: #21
when released, will catchall's work?
It seems like a smart spammer would know to strip the +extensions in order to cover their tracks. (similar to how they currently remove decorations like "nospam")

One sneaky use of catchalls I've been playing with is encoding a datestamp and IP in an email address on my web site, to see where the spammers are coming from. Smile I might also use it to expire addresses after a month. (That's on a throwaway subdomain, though.)
Visit this user's website Find all posts by this user
09-13-2004, 10:13 PM
Post: #22
when released, will catchall's work?
Quote:It seems like a smart spammer
See Rule #3...
http://bruce.pennypacker.org/spamrules.html (spammers are stupid).

Strictly speaking, that's not /always/ true... but I think it's fair to say that most spammers are not the sharpest crayon in the box. In most case, spammers don't bother to try to clean up harvested addresses at all. That would involve work. Plus, the type of people who are tech savvy enough to use plus style addressing are probably not most spammers' target audience anyway. I have seen some funny results from attempts to remove "nospam" type munging.

Actually, one of the widely posted addresses I get the least spam to has &- as its LHS (left hand side - part before the "@").
Visit this user's website Find all posts by this user
09-13-2004, 10:57 PM
Post: #23
when released, will catchall's work?
now I'm confused. Why is it that if I use foo+user@example.com, the email goes to the inbox of user?

to the "what if spammers are smart question" - that's the beauty of mine. If they are smart and search for "spam" or "nospam," then my address of cnn.com+spam@example.com would be invalid :o)
Find all posts by this user
09-13-2004, 11:05 PM
Post: #24
when released, will catchall's work?
foo+user will not go to the inbox of user on most systems I'm aware of.

user+foo will on certain systems if that functionality is enabled.

If you're showing this behavior on our system, most likely you have a catchall setup which goes to "user", so it's just working because there's a catchall.
Visit this user's website Find all posts by this user
09-13-2004, 11:58 PM
Post: #25
when released, will catchall's work?
NOOOOO!!! Looks like you're right. I thought I was migrating away from catchalls. *sigh*

So what's a good way to create "disposable" email addresses? Looks like the suggestion of using a subdomain with a catchall might be the best... hmmmm.
Find all posts by this user
09-14-2004, 08:11 AM
Post: #26
when released, will catchall's work?
The best way to make disposable addresses is to use a third-party service such as spamgourmet and keep spammers as far away from your "real" domains as possible. Smile
Visit this user's website Find all posts by this user
09-14-2004, 12:28 PM
Post: #27
when released, will catchall's work?
gmail.

Wink

Want an invite code?

Given how well spamassassin is working, honestly I feel like you guys are trying hard to find a solution for a problem that doesn't exist.
Visit this user's website Find all posts by this user
09-14-2004, 01:26 PM
Post: #28
when released, will catchall's work?
How can gmail do it? Don't I need a different account for each address?

As far as spamassassin, it's pretty much been said that it will never work with anyone who uses catchalls. I've been trying to get away from them, but I still have to support them.
Find all posts by this user
09-14-2004, 03:38 PM
Post: #29
when released, will catchall's work?
You know I've actually stopped using throwaway email addresses. Not only was my catchall receiving a lot of spam, but I had never even deleted an address that started getting spam.

I use SpamProbe (a statistical filter), not SpamAssasin, and my filter is way, way better than SA, but still, I think SA would do a good enough job if I had to use it. If you are smart and really hate spam, the right statistical filter is literally like magic.

I know throwaways help track anybody who might be selling your address and whatnot, but honestly, I don't care. I'm too busy working on this crap.

nate.
Visit this user's website Find all posts by this user
09-14-2004, 03:53 PM
Post: #30
when released, will catchall's work?
There's a monetary advantage for me in knowing who sold my address. When I catch a company violating the WA spam law, they are liable for $500 per message.

It adds up.
Find all posts by this user


Forum Jump: