XMPP Service Operators - 2019-11-08

spam from jabber jabservice@jabbim.com jabservise@xmpp.jp quickcoin@linuxlovers.at quick_coin@exploit.im quick_coin19@jabber.sk Prof: https://telegra.ph/Flud-servis-04-10

jabbim admins won't delete spammer accounts.

Ge0rG, This is likely to be sufficient equipment to include jabbim .com in the ban list

404.city: step 2: escalate to ISP

-ETIME

Alright, yax.im is going down for a short maintenance. BRB

404.city: the blacklist Readme gives a nice overview of the overall workflow of this group.

The worst thing is that blocking such servers causes negative feedback from users. At the same time, these same servers sell contact databases to spammers. When adding a contact from a similar server, a person automatically enters the spam mailing list. Then people wonder how spammers know their XMPP ID.

Do you have proof that those servers collect addresses and are not just abused from spammers for their dirty work?

Actually I only get spam to not existing jids. I don't know why, but I still report them as they might also have real users from other servers in their list.

404.city [10:52]: > At the same time, these same servers sell contact databases to spammers. This is a very strong accusation. I hope you have proof of that.

Ge0rG, Spammers wrote to me. They offered money to protect a spam account. They also offered money for the XMPP IDs contact database. They also offered spam protection. They said that they would not send spam to 404.city and from 404.city in exchange for protecting the spammer's account. I declined the offer of spammers, but some servers may be bribed by spammers.

404.city: that's very interesting indeed. It puts a response I've received recently into a new light. Do you know of servers that accepted the deal?

Ge0rG, >This is a very strong accusation. I hope you have proof of that. I have no evidence of this, but if the server protects spammers, the spammer probably bribed the owner of the server.

Also what's the value in your user database if they promise not to spam you?

Sell it to other spammers who will spam you :P

:D

>Also what's the value in your user database if they promise not to spam you? In the router, the contacts of other servers. They buy contacts of interlocutors. This explains why XMPP IDs that are not publicly placed get into the spam database.

Wat

And you buy into this?

>Sell it to other spammers who will spam you :P Spammers conflict with each other spamers. There is information that they order flood attacks against competing spammers.

> ‎pep.‎: And you buy into this? I refused to sell the any database to these spammers.

k

("Buy into" here was meant as "believe", not literally buying)

I will explain the structure of the work of spammers.

The spammers are located in Russia. This makes it impossible for them to be arrested by European intelligence services.

I think the intelligence services already have enough information about them.

What if we write a bot that registers random account names at different IBR servers and tracks incoming spam.

'honeybot'

Holger: awesome name

Holger: do it!

The distribution of spam is not the same among accounts

Even on the same server

> 'honeybot' 🥰

> I think the intelligence services already have enough information about them. Since when is SPAM a matter for "intelligence agencies" pffft ?

Licaon_Kter: they infiltrate the spammers to obtain lists of jabber users, to be used as input for the enemy of the state blacklists

Ge0rG: cool story bro

jonas’: how many outgoing c2s connections can aioxmpp handle?

Ge0rG, it depends

there is no technical limit

the only limit will be your resources

jonas’: how hard would it be to hack something together that does IBR on a list of servers and stays logged in with a non-negative presence?

Ge0rG: that sounds like what a spammer would love, bypass captcha too? :))

Licaon_Kter: you'd be surprised how many servers offer IBR with no captcha

Ge0rG: user friendly for clients that can't, eg. CS

There also used to be a promo video of a spam software showing off their parallel-connection tool

Licaon_Kter: IBR captchas have been circumvented in the past

I guess

Licaon_Kter: https://www.youtube.com/watch?v=XCFmfpmz7yc

Ge0rG, not that hard

Saw that Ge0rG before, between those summerian, cuieniforms, letters, there's IBR and captcha?

They never came to me to offer spam protection money. :(

I’m a bit short on that lately.

Protection money ? :p

Money at all. :p

>‎Link Mauve‎: They never came to me to offer spam protection money. :( I think this money will not be enough for a good lawyer ;)

Damn.

My get rich quick plan is foiled!