Clever spam almost got me
-
[img]http://schend.net/images/wtf/clever_spam.png[/img]
That Report Spam link? Goes to the spammer's website, where I'm sure they have a nice little identifier to say "hey look, a rube!"
Fortunately, I caught myself in time and hit the actual report spam link.
-
NEVER click on anything in these mails. Any response is an indication the email is active, which puts your address into the "good emails" list, leading to more emails.
-
That Report Spam link? Goes to the spammer's website
That is a real good way of getting clicks in spam mails, well done scumbags!
-
Haha! That's evil!
Off topic: anyone else has issues with the DC editor and the Android keyboard?
-
NEVER click on anything in these mails.
if you load images by default in your client (as you can see in blakey's screenshot, he does not and is safe), simply viewing it like this was confirmation anyway. clicking is not necessary.
-
Off topic: anyone else has issues with the DC editor and the Android keyboard?
Yeah. It's shit. Cumbersome and buggy as fuck.
-
I think I’ve already seen a “Mark as spam” link in a spam message. With an added text : “Clicking this link will have more effect than using the Mark As Spam button of your mail client -- It will ensure you won’t get other undesired mails” (paraphrasing).
TRWTF is that it’s 2014 and we still have no real solution against spam. We only have broken solutions that don’t work, like SPF.
-
TRWTF is that it’s 2014 and we still have no real solution against spam.
Or just keep two emails - one for registrations on various websites which for some reason require your email, and the other for actual conversations. I guess you could also set up a whitelist which forwards you emails from webpages you actually care about, but I rarely get that.
-
What bothers me is that @blakeyrat cared enough to actually open the message. Are you interested in fashion?
-
Or just keep two emails - one for registrations on various websites which for some reason require your email,
I use mailinator.com for such sites :)
-
I use mailinator.com for such sites
It's cool, though sometimes you might need to hold on to some of those emails for more than a few hours. Still, I haven't heard of it before, I might give it a try.
-
It's cool, though sometimes you might need to hold on to some of those emails for more than a few hours.
You can forward it from mailinator to your real email.
-
I absolutely NEVER got spam emails until a few years ago when there was some huge breach at a company I've never heard of and never done business with. Turned out my bank sold my email to someone else who sold my email to someone else who sold my email to the company that got breached.
I only get about 5 spam emails a day and they're really freaking obvious, so it's still pretty manageable. It's all Canadian Viagra and supposed Facebook messages from my girlfriend named Adriana who misses me (I don't have a girlfriend or a Facebook account).
-
Is she like Amy?
-
I absolutely NEVER got spam emails until a few years ago when there was some huge breach at a company I've never heard of and never done business with. Turned out my bank sold my email to someone else who sold my email to someone else who sold my email to the company that got breached.
Apparently our company domain gets about 40-50k spam mails per hour, according to the recent stats from our network admin. And some of it still slips through - and what's even more fun, it's always addressed to
all-employees@company.com
...I get a lot of spam on both of my scratch accounts. About 600-700 on Gmail from the last 30 days...
-
Fortunately, I caught myself in time and hit the actual report spam link.
Seen a few malicious spammers use the unsubscribe link to try to infect your computer as well. I use an isolated one-time created VM instance about once a month to go on an unsubscribe spree on what I think are the legitimate ones - saved my computer at least once that way.
-
if you load images by default in your client (as you can see in blakey's screenshot, he does not and is safe), simply viewing it like this was confirmation anyway. clicking is not necessary.
But google caches the images, don't they? I can't remember how aggressive they are about that, though, or if they wait until you open and request to see the images.
-
But google caches the images, don't they? I can't remember how aggressive they are about that, though, or if they wait until you open and request to see the images.
I don't know either. It's possible google already confirmed his email for him in that case.
-
About 600-700 on Gmail from the last 30 days
That's impressive, unless you are whoring that address out--I only get about 1-2 a day on my gmail.
-
That's impressive, unless you are whoring that address out-
That's kinda exactly what I do. It's the "for registrations on various websites" one.
-
That's kinda exactly what I do. It's the "for registrations on various websites" one.
Interesting. I use my primary address for that, but I also use the +suffix trick, and I only give register to things that seem legit enough to not sell my address.
-
I am, sadly, TRWTF on this score - I spaffed my actual email address on Github.
-
Here's how one guy handled a text spam on his phone.
(Too big of an image to post here, but it's quick reading.)
-
it's always addressed to all-employees@company.com
You mean there are still companies out there that don't have whitelists for who can send to those lists?
-
You mean there are still companies out there that don't have whitelists for who can send to those lists?
Fuck if I know. I should try for another Bedlam someday - especially since we seem to be running a fairly antiquated Exchange server...
-
Just want to say that I fucking love it. Keeping it for next time, awesome.
-
-
I use my primary address for that, but I also use the +suffix trick
I do that too, but it doesn't work. I only get spam¹ at the primary address. Unfortunately, the real address is out there in places like whois.
¹Real spam, as opposed to "I signed up, but I don't really want all this mail, and I haven't gotten around to unsubscribing," which is most of the junk mail I get.
-
Unfortunately, the real address is out there in places like whois.
that's what "Ooops, I accidentally spelled it wrong in the contact information" is for.
-
that's what "Ooops, I accidentally spelled it wrong in the contact information" is for.
It doesn't matter all that much. Anything@my.domain winds up in my inbox, anyway (unless it happens to be one of the tiny handful of other valid addresses). The +suffix is mostly so that I can tell if some B*****n is selling my address, so I can take my business elsewhere. And making my inbox not a catch-all would break other things, like my daughter sending mail to some-silly-name@my.domain.
-
-
And making my inbox not a catch-all would break other things, like my daughter sending mail to some-silly-name@my.domain.
Yeah, that's a problem. When I had a domain, I just didn't read the catchall address' inbox.
-
Fuck if I know. I should try for another Bedlam someday - especially since we seem to be running a fairly antiquated Exchange server...
A few of those got going on our email system at a >100k employee company I used to work at. Just being an end-user watching the flood of remove-me-toos was kinda hilarious. God only knows what hell the Exchange admins went through trying to get that under control.