Via Email Battles: First ‘warspamming’ case reaches court.

Basically the guy (allegedly) drove around LA with a laptop looking for insecure wireless networks, then connected to them and sent spam using people’s home accounts.

The term comes from wardriving — driving around looking for unsecured networks — and warchalking — marking walls or sidewalks to indicate the presence, type and speed of the networks found. Early wardrivers discovered that Pringles cans make good amplifiers.

Further etymology: according to the Jargon File, war-driving is a play on war dialer. War dialers were programs that would call up a series of phone numbers looking for modems, faxes, or other phone-based systems it might be able to crack into. And that term started out as wargames dialer, a reference to the film War Games. (Whew!)

It turns out that warspamming is older than I thought: the term was coined two years ago, though this is the first case to go to trial. The defendant is being tried under CAN-SPAM, which went into effect this past January.

An interesting statement from the article:

If Tombros is convicted or pleads guilty then warspamming — also known as drive-by spamming — will move from being just a theoretical possibility to a genuine threat.

What, so in the two years since someone came up with the idea, no one has ever seen it done? And we have to wait for a conviction to determine whether it’s happened now? We don’t need to wait for a trial to know that spammers — an annoyingly resourceful lot — are using thousands of virus- and spyware-infested home computers as zombies. Warspamming doesn’t even require programming skills (or ties to virus writers — although I understand access to already-compromised networks has become a brisk business on the black market.) Surely someone has logs to show that it’s been done.

Update October 4: The defendant was convicted. Apparently, this is the first conviction obtained under CAN-SPAM. (via The War on Spam)

Not five minutes ago I received my first 419 scam in a language other than English.

What’s strange is that even though it uses normal case and I can’t read more than a few words of French, it’s still obvious what it is. It has the same general structure with the opening, the “Excuse me for contacting you even though you don’t know me” line (I think), talks about a sub-Saharan African nation (Côte d’Ivoire), and of course, “($8,500,000) Huit Millions Cinq Cent Mille Dollars Américains.”

Via The War on Spam and The Spam Weblog:

Hackers hijack federal computers. Apparently the DOJ discovered, during their crackdown on cybercrime, that hundreds of Department of Defense and Senate computers had been turned into zombies.

Nice.

Can we really be sure they were only used to send spam? After all, zombies are generally the result of viruses, worms or trojans that install backdoors, so that the attacker can run anything on the system. Setting up a distributed and disguised spam-sending network just happens to be the most profitable application right now, but you can bet there are a lot of people out there who would love to take over — or just look through — US military computers.

I don’t know about you, but I find this really disturbing.

“Would you like to play a game?”

Some people think it’s a great idea to block spam by having their email system automatically reply to any unfamiliar address, forcing the sender to jump through hoops that spammers presumably won’t bother with.

About half an hour ago, the IEEE Communications Society sent out a call for papers on its mailing list.

So far I have gotten three challenge-response requests, two out-of-office notices, and a response to one of the CRs.

I expect to see more when I get back from lunch.

Update 2:30pm: Four more challenges, another vacation autoreply, and four more responses. No sign yet of any discussion, complaints, or even (as I half-expected) a rash of misdirected “unsubscribe me” messages.

I just got an email that starts out, “We are the leading manufacturer and exporter in China.”

OK, good for you, but what does this have to do with my personal website in California?

It all just adds to the noise…