So I do still keep tabs on SpamMailBag.com from time to time... A while ago I had submitted it to the DShield mailing list and someone had asked about email addresses appearing as user@domain.com... Unfortunately most harvesters are going to be advanced enough to catch any sort of obfuscation that I put into place... however I have modified the script that handles the email so that it will now display user [at] domain.com... this should provide some minimal protection in case anyones real address shows up there.
Peace,
HT
So I'm really pumped about this. Between the two domains (CDO and SpamMailBag (I didn't even look at PythonGod or SecurityNe.ws)) we've broken 10,000 unique visits.
ComputerDefense.org - Sept '06 - 9433 Unique Visits
SpamMailBag.com - Sept '06 - 5850 Unique Visits
I never expected the page to have this many readers.... so now my goal is to double this for the end of the year... 
Peace,
HT
So I've decided to add some GoogleGroups related to CDO and SpamMailBag... I'm not sure they'll get used but now at least they exist if anyone is interested in them.
The CDO Group can be used for anything.... Feel free to sign up.. if it gets some members I may actually do something with it.
The SpamMailBag.com group is primarily to target mail harvesters and see what happens....
Feel free to check them out and join them.
Peace,
HT
Those of you that have been following SpamMailBag.com will have noticed the large number of rather disturbing emails that have been coming in. They are all addressed to the same address and I'm not overly sure if somebody is using this address out there to add it to lists, or if the spambots have just stumbled across it.
As I said, a number of these emails are rather disturbing, due to their nature I am tempted to remove them... that would however, defeat the purpose of the site. I am, however, storing duplicates of these emails. Should any authorities be interested in the mail headers, feel free to contact me at ht [at] computerdefense.org.
Peace,
HT
I find it rather interesting that even though I said no newsletters when subscribing to ZDNet.com with the spammailbag.com address I still managed to get newsletters from them... Newsletters with such horrid HTML that they actually fubar'd the site to the point where I had to remove one of them... The other I have left and after following the unsubscribe link it now says I'm actually not getting newsletters... I'm curious to see what will show up in my mailbox tomorrow. I've submitted this story to digg -- http://digg.com/security/SpamMailBag_com. Feel free to jump over there and bump up the level on it. I want to see how many people are harvesting addresses from digg. I'm also looking for other places to sign up / place addresses so if you have any ideas... please let me know.
Peace,
HT
So, I decided to get it up tonight. SpamMailBag.com is up and running. I'm going to sign up a few addresses (unless I go pass out) so we'll see what happens with it. I had to muck up the blog page a bit in order to get it to print what I wanted printed... but it's working so that's all that matters. I've setup some cron jobs... hopefully they're working, if not I'll manually run the email fetch and set it up to be automatic in the near future.
Anyways... Feel free to check it out.... SpamMailBag.com.
Peace,
HT
I'd like to introduce my latest project... SpamMailBag.com. Here's the plan:
Using domain/task specific email addresses, I will be signing up for various services, websites and posting on various forums. I'm also hoping to pull some favours and have some fellow bloggers do blog specific ones.... For example I will be setting up computerdefense.org@spammailbag.com. I would give other examples but that would negate the effort. All emails will automatically be posted to SpamMailBag.com.
What is the goal? Well, for me it's simply a social project. I'm curious to see which services and websites requiring sign-ups sell your information and who they sell it to. I'm curious to see which blogs are harvested and which aren't, I'm curious to see which forums are harvested. I may even ask users to create contacts for certain addresses in outlook and outlook express or maybe gmail or hotmail to see if those addresses end up elsewhere.
For me, it will be a fun project... Maybe I'll even email The Colbert Report, or take out custom ads in the paper to see if anyone harvests from TV and Newspaper/Magazine ads.
Additionally, as the addresses become more popular, I may end up with a bit of a honeypot for new email malware... Maybe I'll catalogue phishing attempts or scams... and maybe I'll see viagra advertisements so often that I'll end up buying some...
It my flop... but it may work out really well and if it does I may be calling in favours as far as hosting goes, I'm not sure just how much I'll be able to effectively handle.
Those of you eager to check it out... I've yet to deploy the site... it currently points to a VERY old domain that until recently was hosted elsewhere... I'm hoping to have the SpamMailBag.com blog up before I go to bed and if not, then in the very near future.
Peace,
HT