Message Board

Installing Honey Pots

Older Posts ]   [ Newer Posts ]
 Why is footer not "encoded"
Author: C.Tweedie   (1 Feb 05 8:18pm)
First off guys, great project. The steps you have gone to track these harvesters is amazing. The time to get some of our own back is now.

Im just a bit cautious as to the effectiveness of the current php (not sure on others) honeypot source. You have made great efforts to "encode" keywords on the site however you left the footer untouched?

td valign="top" align="left" style="padding:3px 0 0 4px;"><a href="http://www.projecthoneypot.org/" class="lipaspi">MEMBER OF PROJECT HONEY POT</a><br><a href="http://www.unspam.com"class="lipaspi">Spam Harvester Protection Network<br>provided by Unspam</a></td></tr></table>

What is stopping these harvesters at just searching the source for the particular footer and bypassing the embedded email? It just seems a bit pointless in only encoding half the document and not going the own way. Of course i could just remove this header, but id like to leave it there.

Perhaps an addition for v2?
 
 Re: Why is footer not "encoded"
Author: M.Prince   (1 Feb 05 9:58pm)
There is method to our madness. In a strange way, the absolute best way to defeat harvesters would be for them to all start ignoring pages that contain a certain simple token. For example, how great would it be if you could put some unique word somewhere on your page and whenever a harvester encountered that word it would say, "Wow! This could be a trap, better not gather any addresses here."

So that's what we're trying to do. We leave a few breadcrumbs on the pages that are easy to identify but also easy for other sites to include.

But here's the kicker. We can pass an instruction from our servers to any honey pot to turn off (or replace) the grey box at the bottom of the page, or just about any other element. Already we've begun randomly turning off the grey box for certain visitors to see if it makes a difference in terms of the harvesting stats. As soon as we notice something happening where harvesters are beginning to adapt we'll mix it up more widely and let sites know what works at scaring the harvesters away.

This, like many things in the anti-spam fight, is an arms race. The nice thing about this arms race, however, is that unlike with filters, the good guys here are playing offense and the spammers are forced to play defense.

That's at least our rationale. We may be crazy, but that's what we're thinking. Let us know if you have any comments or other thoughts.
 
 Re: Why is footer not "encoded"
Author: C.Tweedie   (1 Feb 05 10:07pm)
Thats an excellent perspective. You really are going down the right path :)
 
 Re: Why is footer not "encoded"
Author: K.Bailey   (8 Jun 05 3:31am)
you gang are crazy like a fox, with minds like a bag of spiders. BTW, that is a compliment. Drive the buggers mad with paranoia, would ya please? Can I watch? Sell popcorn?

BTW, the honeypot is now working on my site. Hope we help sue a spammer into bankrupsy.

-kirk



do not follow this link

Privacy Policy | Terms of Use | About Project Honey Pot | FAQ | Cloudflare Site Protection | Contact Us

Copyright © 2004–17, Unspam Technologies, Inc. All rights reserved.

contact | wiki | email