I was eager to get into the book Inside the Spam Cartel, written by "SpammerX". My eagerness persisted only into the second chapter—the self-professed spammer is coy in his presentation of examples, leaves out more information than he gives, and (by far the worst sin) seems unable to mate subject and verb number, use apostrophes or adverbs rationally, or spot abject incoherence in his own writing.
Aside from that, the book is intriguing in a creepy way.
The topic is one every Internet user will find interesting, and SpammerX delivers a lot of detail about the process, purpose and payback of spamming. He has been somewhat careful about removing actual IP and eMail addresses and user names, although this, like all his proof-reading, is not thorough. He includes a number of examples of using HTML tags to encode spam messages that will slide through spam filters, while telling us his philosophy of spam. This philosophy boils down to: "I can do it, and you can't stop me, so it's all right. Besides, I get paid to do it."
Even so, SpammerX is aware how his activities are viewed by others. Some chapters seem to be an effort to excuse his actions, others are almost apologetic. He will carefully spell out how to "hijack" a Web page for spamming purposes, as if to provide useful information for the IT crew of that site. Then he will add in one of his Notes from the Underground, "I think I will keep this bit secret in case I want to use it again...".
The book's theme wavers back and forth between these two extremes, as if the author doesn't really want to give up his behavior (as long as he's getting away with it), but does want to be respected as an expert who offers help. He extends that help to would-be spammers and those who oppose their efforts with equal detail.
I found most interesting the chapter detailing phishing and eMail scams, including the "419 scam". You probably have encountered the 419 scam as the Nigerian Finance Minister scheme: an eMail promises you part of a multi-million-dollar sum for your assistance in setting up a bank account to move the funds into from overseas. The scam gets its name, according to SpammerX, from the code 419 for Fraud in Nigeria, the source of more than half of all such scams.
Article comments
1 - DrPat
I don't know why Abbey's book shows up in the Amazon tag as being authored by Douglas Brinkly. You can even read the true author's name from the cover image!
2 - Aaman
Thanks for the review - entertaining - worth reading only for the typos.
The scam gets its name, according to SpammerX, from the code 419 for Fraud in Nigeria, the source of more than half of all such scams - interesting point - the section in the Indian criminal code for fraud/cheating is 420. Close.
Incidentally, we are upgrading bank systems - click on this link to verify your information
3 - DrPat
I found the book difficult to read, not because of the poor proof-reading and grammar-checking (although that contributed), so much as from the profoundly mixed messages about spamming.
As I said, the author was very coy about sharing 100% of his real examples. It was almost a teasing: "See, I figured this out, and you dummies can't, even if I give you a BIG hint."
4 - DrPat
Incidentally, we are upgrading bank systems - click on this link to verify your information
One of the "how-to" tips that was included was a warning that clicking on a "click here" link simply proves to the entity at the other end that there is a person (or at least one finger) available at your end to click on a link.
So in the context of this review, thanks, Aaman, but no thanks. [grin]
5 - Tim Hall
Aardvark nebulosity manglewurzel aspidistra gerund namibia antidisestablishmentarianism....
Since most spam seems to be written by semi-literates, it's hardly surprising that the book is much the same.
Nuke Florida now!
6 - DrPat
Eerie evocation of a spam eMail random-word opener, there, Tim! But to truely duck under the spam filter, you'd have to spell "Namibia" (which is, after all, in Africa) "Na_mi_bea".
Don't want to trigger any "419-scam" filters, now, do we?
7 - Tim Hall
Clearly I'll never make a successful spammer :)
8 - DrPat
I learned from the contact at Syngress that the intended audience for this book seems to have been would-be spammers, despite the "socially redeeming" press release statements claiming otherwise. That's why I was so disappointed with it, I read the PR stuff before I decided to review it.
But if you really want to be a spammer, this book will probably give you a good first approximation...
9 - The Oracle
How much would you love to know the real identity of this SpammerX?
10 - gonzo marx
Oracle sez..
*How much would you love to know the real identity of this SpammerX?*
not half as much as i would like for him to get a scathing triple dose of facial herpes
but i'm silly like that...
Excelsior!
11 - DrPat
Oracle, if you know who SpammerX is, you ought to let the FBI know. Or maybe just tell Dave Nalle...
[grin]