News for hackers. Stuff that matters.
Re:Fake_contacts: Android app to create fake phone contacts,... by shervinafshar on Saturday February 27, 2021 @01:39PM (#26287004)
Not an expert on guerilla cyber-warfare, but isn't it the whole point of this sort of poisoning? If enough people do this the cost of those bouncing emails would become prohibitive. That's my speculation. Would be great to know more from someone who knows the domain better.
Re:Fake_contacts: Android app to create fake phone contacts,... by geoduck14 on Saturday February 27, 2021 @06:26PM (#26289117)
Oh! I know! I work for a large company. At one point, we sent so much junk mail, we were the Post Office's #1 customer (in the US). We have started to send junk emails, too.

There is a Swedish company (non profit? Activist group? IDK) called SpamHause. They partner with ISPs to help block spam. Their process is something along the lines of:

1) Inject fake email addresses into lists of email addresses that are bought/sold WITHOUT user consent

2) Wait until someone UNAUTHORIZED emails them spam

3) Tell the ISPs (and anyone else who will listen) to STOP processing emails from the companies that sent them spam.

4) The ISPs block the companies because SpamHause is reputable and REALLY good at finding spam, also the ISPs save money by "not having to process the spam

We accidentally got a hold of a bad batch of email addresses several years ago and we spent MONTHS trying to fishout and overhaul our email authorization process. It cost us $10s of millions.

Also, WHY were we sending that spam?!?

Re:Fake_contacts: Android app to create fake phone contacts,... by remram on Saturday February 27, 2021 @02:03PM (#26287207)
Even if you make your contact list 99% bounces and 1% real (and every user of the app does the same), I don't see how this becomes a problem for the app's operator. Remove a contact after 1-2 bounces and you're golden.
Re:Fake_contacts: Android app to create fake phone contacts,... by shervinafshar on Saturday February 27, 2021 @02:19PM (#26287354)
Fair. Still golden if this needs to be done for all contacts of all users?
Re:Fake_contacts: Android app to create fake phone contacts,... by remram on Saturday February 27, 2021 @05:51PM (#26288911)
If they bounce they are extremely fast to cull.
Re:Fake_contacts: Android app to create fake phone contacts,... by michaelcampbell on Saturday February 27, 2021 @06:37PM (#26289189)
Who bounces any more?
Re:Fake_contacts: Android app to create fake phone contacts,... by U8dcN7vx on Saturday February 27, 2021 @07:02PM (#26289348)
Everyone except nutters. Google bounces. Microsoft too. I don't know of any provider that doesn't. Surely someone somewhere does not bounce but they are in the minority.
Re:Fake_contacts: Android app to create fake phone contacts,... by jmatthews on Saturday February 27, 2021 @01:49PM (#26287078)
You don't bounce emails you prebounce them and clean up your list. This is part of any sensible data engineers process.
Re:Fake_contacts: Android app to create fake phone contacts,... by jmatthews on Saturday February 27, 2021 @02:00PM (#26287185)
More helpfully, salting their db with real emails but fake contact info requires a more durable hygiene process and often isn't worth the effort for data driven shops.

You serve a variety of email domains that validate as deliverable, then you accept emails and report the sender, which hurts their deliverability.

Re:Fake_contacts: Android app to create fake phone contacts,... by TedDoesntTalk on Saturday February 27, 2021 @02:05PM (#26287218)
what is prebounce?
Re:Fake_contacts: Android app to create fake phone contacts,... by shervinafshar on Saturday February 27, 2021 @02:32PM (#26287463)
My guess was they are referring to one of these services that check the validity of any email address. A false signal from one of these services prevented me from signing up for some random website with a .name domain the other day.
Re:Fake_contacts: Android app to create fake phone contacts,... by tyingq on Saturday February 27, 2021 @06:41PM (#26289217)
Email them from a throwaway domain and ip, toss out hard bounces from the list, so you don't poison your SMTP reputation?
Re:Fake_contacts: Android app to create fake phone contacts,... by dogman144 on Saturday February 27, 2021 @02:10PM (#26287269)
Pretty nifty side point:

> If enough people do this the cost of those bouncing emails would become prohibitive.

This idea got a ton of attention in early days tech that led to what's known as proof of work: see bitcoin. The primitives of btc show up in a lot of interesting areas.