• (comp.lang.c) More musings on the spam problem...

    From Kenny McCormack@21:1/5 to All on Sun Nov 19 11:23:15 2023
    XPost: comp.lang.c++

    The good news: The spam problem (both the so-called "Thai spam" and the "mushroom spam") is gone from clc and clc++, because Google has (for
    reasons of its own) banned both groups. What's funny about this is that normally people on these groups would be p*ssed off at Google for banning
    them, but in this instance, it is a happy coincidence that it stops the
    spam. So, we're good with it.

    The bad news is that it is still alive and well in many of the other
    groups. Right now, comp.editors is getting slammed - about 1 spam per
    minute, 24/7.

    So, the question becomes, is there any way we can get Google to ban all newsgroups, not just these 2?

    --
    The randomly chosen signature file that would have appeared here is more than 4 lines long. As such, it violates one or more Usenet RFCs. In order to remain in compliance with said RFCs, the actual sig can be found at the following URL:
    http://user.xmission.com/~gazelle/Sigs/FreeCollege

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Mike Terry@21:1/5 to Kenny McCormack on Sun Nov 19 17:18:23 2023
    XPost: comp.lang.c++

    On 19/11/2023 11:23, Kenny McCormack wrote:
    The good news: The spam problem (both the so-called "Thai spam" and the "mushroom spam") is gone from clc and clc++, because Google has (for
    reasons of its own) banned both groups. What's funny about this is that normally people on these groups would be p*ssed off at Google for banning them, but in this instance, it is a happy coincidence that it stops the
    spam. So, we're good with it.

    The bad news is that it is still alive and well in many of the other
    groups. Right now, comp.editors is getting slammed - about 1 spam per minute, 24/7.

    So, the question becomes, is there any way we can get Google to ban all newsgroups, not just these 2?


    I don't see disconnection from GG as a Good Thing in the long term. Many groups have the core of
    their followers using GG, and how many will be persuaded to migrate to Usenet? But the real problem
    as I see it is for long term survival groups need a stream of NEW users, and I'd guess close to 100%
    of those come via GG, and hopefully they're persuaded later by regulars of the advantages of Usenet.

    When I started using the internet my ISP provided the connection obviously, and a document
    explaining how to configure my computer to connect to their email and USENET servers. So email,
    Usenet, and WWW were the 3 motivations for "getting the internet", and newsgroups were the place you
    went for general discussion. Those days are long gone, and whilst my current ISP still has a Usenet
    service (subcontracted to Giganews) there's absolutely no mention of it in their advertising, legal
    contracts, etc. and you have to hunt hard, knowing what you're looking for, to find any help pages
    for it. So no new internet users are going to think "Right, now how do I get a Usenet client, and
    where's my Usenet server?!" If they eventually find Usenet it will likely be via GG.

    Disconnection from GG will cut off the supply of new users - a kind of "kiss of death" for the long
    term health of the group. Groups with an essentially static membership could obviously continue as
    they are for years, dieing slowly as their members age and finally depart the group. It's like
    these groups are slowly dieing anyway, so another nail in the coffin for long-term Usenet health is
    hardly a problem - they want the SPAM gone NOW...

    It would be better long term if Google could apply some better SPAM filtering technology, perhaps
    leveraging all their clever AI technology?, to block the spam entering the system in the first
    place. It's at the point of initial entry that SPAM can be handled with minimum hassle; once it's
    circulating around the system it's an order of magnitude more effort to deal with. [Yeah, I get that
    Usenet SPAM is not Google's priority!]


    Mike.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Chris M. Thomasson@21:1/5 to Mike Terry on Sun Nov 19 11:51:39 2023
    XPost: comp.lang.c++

    On 11/19/2023 9:18 AM, Mike Terry wrote:
    On 19/11/2023 11:23, Kenny McCormack wrote:
    The good news: The spam problem (both the so-called "Thai spam" and the
    "mushroom spam") is gone from clc and clc++, because Google has (for
    reasons of its own) banned both groups.  What's funny about this is that
    normally people on these groups would be p*ssed off at Google for banning
    them, but in this instance, it is a happy coincidence that it stops the
    spam.  So, we're good with it.

    The bad news is that it is still alive and well in many of the other
    groups.  Right now, comp.editors is getting slammed - about 1 spam per
    minute, 24/7.

    So, the question becomes, is there any way we can get Google to ban all
    newsgroups, not just these 2?


    I don't see disconnection from GG as a Good Thing in the long term.
    Many groups have the core of their followers using GG, and how many will
    be persuaded to migrate to Usenet?  But the real problem as I see it is
    for long term survival groups need a stream of NEW users, and I'd guess
    close to 100% of those come via GG, and hopefully they're persuaded
    later by regulars of the advantages of Usenet.

    When I started using the internet my ISP provided the connection
    obviously, and a document explaining how to configure my computer to
    connect to their email and USENET servers.  So email, Usenet, and WWW
    were the 3 motivations for "getting the internet", and newsgroups were
    the place you went for general discussion.  Those days are long gone,
    and whilst my current ISP still has a Usenet service (subcontracted to Giganews) there's absolutely no mention of it in their advertising,
    legal contracts, etc. and you have to hunt hard, knowing what you're
    looking for, to find any help pages for it.  So no new internet users
    are going to think "Right, now how do I get a Usenet client, and where's
    my Usenet server?!"  If they eventually find Usenet it will likely be
    via GG.

    Disconnection from GG will cut off the supply of new users - a kind of
    "kiss of death" for the long term health of the group.  Groups with an essentially static membership could obviously continue as they are for
    years, dieing slowly as their members age and finally depart the group.
    It's like these groups are slowly dieing anyway, so another nail in the coffin for long-term Usenet health is hardly a problem - they want the
    SPAM gone NOW...

    It would be better long term if Google could apply some better SPAM
    filtering technology, perhaps leveraging all their clever AI
    technology?, to block the spam entering the system in the first place.
    [...]

    I wonder if somebody writes this method A simply trumps method B. The AI
    says ahhh shit, trump, and blocks the message? lol.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Chris M. Thomasson@21:1/5 to Kenny McCormack on Sun Nov 19 12:25:11 2023
    XPost: comp.lang.c++

    On 11/19/2023 3:23 AM, Kenny McCormack wrote:
    The good news: The spam problem (both the so-called "Thai spam" and the "mushroom spam") is gone from clc and clc++, because Google has (for
    reasons of its own) banned both groups.

    Afaict, they made them read only. In the past, they actually tried to
    ban them wrt reads and writes. Damn it.



    What's funny about this is that
    normally people on these groups would be p*ssed off at Google for banning them, but in this instance, it is a happy coincidence that it stops the
    spam. So, we're good with it.

    The bad news is that it is still alive and well in many of the other
    groups. Right now, comp.editors is getting slammed - about 1 spam per minute, 24/7.

    So, the question becomes, is there any way we can get Google to ban all newsgroups, not just these 2?


    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From The Doctor@21:1/5 to invalid@invalid.net on Mon Nov 20 00:04:10 2023
    XPost: comp.lang.c++

    In article <uje5qp$qb8g$1@paganini.bofh.team>,
    Japanese Spammer Here <invalid@invalid.net> wrote:
    On 19/11/2023 11:23, Kenny McCormack wrote:
    So, the question becomes, is there any way we can get Google to ban all
    newsgroups, not just these 2?


    Yes just keep posting more spam using google Groups and they will ban as
    soon as they come to know of them. Now you can't buy your drugs anymore! >Shame on you.

    LOL!
    Still GG is banned on this node!
    --
    Member - Liberal International This is doctor@nk.ca Ici doctor@nk.ca
    Yahweh, King & country!Never Satan President Republic!Beware AntiChrist rising! Look at Psalms 14 and 53 on Atheism ; unsubscribe from Google Groups to be seen Merry Christmas 2023 and Happy New year 2024 Beware https://mindspring.com

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Japanese Spammer Here@21:1/5 to Kenny McCormack on Sun Nov 19 23:25:44 2023
    XPost: comp.lang.c++

    On 19/11/2023 11:23, Kenny McCormack wrote:
    So, the question becomes, is there any way we can get Google to ban all newsgroups, not just these 2?


    Yes just keep posting more spam using google Groups and they will ban as
    soon as they come to know of them. Now you can't buy your drugs anymore! Shame on you.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Kaz Kylheku@21:1/5 to David Brown on Mon Nov 20 07:56:31 2023
    XPost: comp.lang.c++

    On 2023-11-20, David Brown <david.brown@hesbynett.no> wrote:
    is not just a GG/Usenet matter. They need to make it more
    time-consuming to open a new google account, involve more user
    interaction,

    Just not so demanding of time and interaction that it becomes easier to
    set up Linux and run tin

    Just not that it's easier to install Linux and run tin.

    and put limits on the numbers of new accounts from the same
    IP within a short time-frame.

    "Same IP" only works against the pure amateurs who do not harness large
    numbers of different IP addresses by using botnets or their own IP
    blocks.

    Before we blame everything on Google, the first step is getting
    Microsoft to fix the problem that millions of Windows machines are under
    the surreptitious control of bad actors.

    --
    TXR Programming Language: http://nongnu.org/txr
    Cygnal: Cygwin Native Application Library: http://kylheku.com/cygnal
    Mastodon: @Kazinator@mstdn.ca
    NOTE: If you use Google Groups, I don't see you, unless you're whitelisted.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From David Brown@21:1/5 to Mike Terry on Mon Nov 20 08:42:59 2023
    XPost: comp.lang.c++

    On 19/11/2023 18:18, Mike Terry wrote:

    It would be better long term if Google could apply some better SPAM
    filtering technology, perhaps leveraging all their clever AI
    technology?, to block the spam entering the system in the first place.
    It's at the point of initial entry that SPAM can be handled with minimum hassle; once it's circulating around the system it's an order of
    magnitude more effort to deal with. [Yeah, I get that Usenet SPAM is not Google's priority!]


    I agree with you here. Although most of the regulars in these technical
    groups use proper Usenet clients, there are some who - for good or bad
    reasons - use GG. And it is undoubtedly the main source of new members
    for most groups.

    Really, it is absurd that Google are not fixing this issue, because it
    is not just a GG/Usenet matter. They need to make it more
    time-consuming to open a new google account, involve more user
    interaction, and put limits on the numbers of new accounts from the same
    IP within a short time-frame. It is far too easy to automate the
    creation of new gmail address accounts, and that is a big source of
    spam, malware and other problems for all of google. If they stop the
    bots getting the new accounts, then a simple decades-old Bayesian filter
    is enough to identify these spam posts and close the account.

    They could also easily have limits on Usenet postings from new accounts.
    No posts for the first 20 minutes, then max 3 posts in the first 24
    hours. Combine that with delays, limits and checks on new accounts, and
    the problem would be solved without bothering existing users.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From David Brown@21:1/5 to Kaz Kylheku on Mon Nov 20 13:33:37 2023
    XPost: comp.lang.c++

    On 20/11/2023 08:56, Kaz Kylheku wrote:
    On 2023-11-20, David Brown <david.brown@hesbynett.no> wrote:
    is not just a GG/Usenet matter. They need to make it more
    time-consuming to open a new google account, involve more user
    interaction,

    Just not so demanding of time and interaction that it becomes easier to
    set up Linux and run tin

    Just not that it's easier to install Linux and run tin.

    Why would anyone choose to run tin, unless they have been using it for
    the last three decades? There are many free Usenet clients available,
    for Windows and Linux (and I guess also for Macs). They are not
    particularly difficult to install or use, and no one needs to use an OS
    that they don't want to use.

    Pretty much any human who wants to use GG to access Usenet will already
    have a google account - extra hurdles on making new google accounts
    won't affect them. For the tiny proportion that need to make a new
    account, it should not be an issue if they have an extra step or two of captchas, SMS codes, or whatever.


    and put limits on the numbers of new accounts from the same
    IP within a short time-frame.

    "Same IP" only works against the pure amateurs who do not harness large numbers of different IP addresses by using botnets or their own IP
    blocks.


    The spammers are amateurs. Any professional spammer group would know
    perfectly well that flooding technical Usenet groups with Thai casino
    adverts is useless.

    Before we blame everything on Google, the first step is getting
    Microsoft to fix the problem that millions of Windows machines are under
    the surreptitious control of bad actors.


    I don't blame /everything/ on Google - but this one is most certainly
    their fault.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Mike Terry@21:1/5 to David Brown on Mon Nov 20 18:06:06 2023
    XPost: comp.lang.c++

    On 20/11/2023 12:33, David Brown wrote:
    On 20/11/2023 08:56, Kaz Kylheku wrote:
    On 2023-11-20, David Brown <david.brown@hesbynett.no> wrote:
    is not just a GG/Usenet matter.  They need to make it more
    time-consuming to open a new google account, involve more user
    interaction,

    Just not so demanding of time and interaction that it becomes easier to
    set up Linux and run tin

    Just not that it's easier to install Linux and run tin.

    Why would anyone choose to run tin, unless they have been using it for the last three decades?
    There are many free Usenet clients available, for Windows and Linux (and I guess also for Macs).
    They are not particularly difficult to install or use, and no one needs to use an OS that they don't
    want to use.

    Pretty much any human who wants to use GG to access Usenet will already have a google account -
    extra hurdles on making new google accounts won't affect them.  For the tiny proportion that need to
    make a new account, it should not be an issue if they have an extra step or two of captchas, SMS
    codes, or whatever.


    and put limits on the numbers of new accounts from the same
    IP within a short time-frame.

    "Same IP" only works against the pure amateurs who do not harness large
    numbers of different IP addresses by using botnets or their own IP
    blocks.


    The spammers are amateurs.  Any professional spammer group would know perfectly well that flooding
    technical Usenet groups with Thai casino adverts is useless.

    So what do you believe is "the point" of all the current spam?

    That's a serious question - if you believe it is hoping that someone reads a particular spam post
    and sees some online betting web site link and thinks "aha, I was just thinking about doing some
    online gambling, and as luck has it I've just come across a link. I might as well use that one!"
    then indeed the spammers would be worse than amateurs - they'd be idiots, and nobody would pay them
    for that! :)

    So I'll suggest another reason: the intent of the spam is to pervert the Google search weighting
    algorithms in an attempt to move particular sites up the rankings, aiming at an ideal outcome of
    appearing on the first page of a search. Individuals have been claiming to be able to do this for
    almost as long as search engines like Google have become financially important to buisnesses, and it
    seems 100% plausible to me that it can be done - of course you would need to have a good
    understanding of how Google rankings work [which I don't!], but then you exploit that knowledge to
    "trick" Google into thinking particular sites are more popular than they really are. Probably it
    would involve injecting document for Google to scan (Usenet articles?) containing lots of mentions
    of the keywords of interest in association with links of interest. It wouldn't be particularly
    relevant what human readers made of those documents.

    So an indicator of this going on might be articles consisting primarily of long lists of links to
    promoted websites. Like you say, who is going to actually read and absorb such a "silly" list of
    links? Perhaps Google ranking algorithms? (I don't know, but that's all I can think of - anyhow,
    such lists of links is exactly what 99% of the spam consists of...)

    Seems we're on the same page regarding Google needing to fix their account creation process so it is
    more expensive in human manpower. While there is no cost using some automated process, banning
    users for spamming achieves very little. I can see that Google fixing this isn't going to be
    instant, but there's also the route of simply identifying spam on prima facae grounds and blocking
    it at entry. Google don't seem to like that approach for some reason. Perhaps they see it as just
    escalating the spam war requiring constant investment to keep up with spammers, and Google want a
    zero on-going effort (on their part) solution.


    Regards,
    Mike.




    Before we blame everything on Google, the first step is getting
    Microsoft to fix the problem that millions of Windows machines are under
    the surreptitious control of bad actors.


    I don't blame /everything/ on Google - but this one is most certainly their fault.


    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From David Brown@21:1/5 to Mike Terry on Mon Nov 20 21:01:06 2023
    XPost: comp.lang.c++

    On 20/11/2023 19:06, Mike Terry wrote:
    On 20/11/2023 12:33, David Brown wrote:
    On 20/11/2023 08:56, Kaz Kylheku wrote:
    On 2023-11-20, David Brown <david.brown@hesbynett.no> wrote:
    is not just a GG/Usenet matter.  They need to make it more
    time-consuming to open a new google account, involve more user
    interaction,

    Just not so demanding of time and interaction that it becomes easier to
    set up Linux and run tin

    Just not that it's easier to install Linux and run tin.

    Why would anyone choose to run tin, unless they have been using it for
    the last three decades? There are many free Usenet clients available,
    for Windows and Linux (and I guess also for Macs). They are not
    particularly difficult to install or use, and no one needs to use an
    OS that they don't want to use.

    Pretty much any human who wants to use GG to access Usenet will
    already have a google account - extra hurdles on making new google
    accounts won't affect them.  For the tiny proportion that need to make
    a new account, it should not be an issue if they have an extra step or
    two of captchas, SMS codes, or whatever.


    and put limits on the numbers of new accounts from the same
    IP within a short time-frame.

    "Same IP" only works against the pure amateurs who do not harness large
    numbers of different IP addresses by using botnets or their own IP
    blocks.


    The spammers are amateurs.  Any professional spammer group would know
    perfectly well that flooding technical Usenet groups with Thai casino
    adverts is useless.

    So what do you believe is "the point" of all the current spam?

    I really don't know.


    That's a serious question - if you believe it is hoping that someone
    reads a particular spam post and sees some online betting web site link
    and thinks "aha, I was just thinking about doing some online gambling,
    and as luck has it I've just come across a link.  I might as well use
    that one!" then indeed the spammers would be worse than amateurs -
    they'd be idiots, and nobody would pay them for that! :)

    So I'll suggest another reason:  the intent of the spam is to pervert
    the Google search weighting algorithms in an attempt to move particular
    sites up the rankings, aiming at an ideal outcome of appearing on the
    first page of a search.

    That would have made sense with the page ranking algorithms from the
    early days of search engines, but not now - mass spamming of links and
    adverts does not boost your ratings on google. But you could be on to something here - perhaps the spammers don't understand the page ranking
    systems and /think/ that it will boost them, or perhaps it still works
    on some less sophisticated search engines (there are many used around
    the world - google is not dominant everywhere).

      Individuals have been claiming to be able to do
    this for almost as long as search engines like Google have become
    financially important to buisnesses, and it seems 100% plausible to me
    that it can be done

    Nah - there is no need to be able to provide any results in order to
    /claim/ you can boost rankings. The ones that actually work are simply
    buying sponsored phrases at google, and charging people more than google charges them.

    - of course you would need to have a good
    understanding of how Google rankings work [which I don't!], but then you exploit that knowledge to "trick" Google into thinking particular sites
    are more popular than they really are.  Probably it would involve
    injecting document for Google to scan (Usenet articles?) containing lots
    of mentions of the keywords of interest in association with links of interest.  It wouldn't be particularly relevant what human readers made
    of those documents.

    So an indicator of this going on might be articles consisting primarily
    of long lists of links to promoted websites.  Like you say, who is going
    to actually read and absorb such a "silly" list of links?  Perhaps
    Google ranking algorithms?  (I don't know, but that's all I can think of
    - anyhow, such lists of links is exactly what 99% of the spam consists
    of...)


    I don't think that would actually work at all, but I can't be sure (I am
    not privy to the details of google's algorithms). And certainly if the spammers believe this would work (whether or not it /actually/ works),
    it would be a rational reason for targetting Usenet groups. However, I
    am still inclined to suspect that this is all either a mistake, an unintentional side-effect (with Usenet posts instead of email posts), or
    a spamming subcontracter scamming a spamming customer.

    Seems we're on the same page regarding Google needing to fix their
    account creation process so it is more expensive in human manpower.
    While there is no cost using some automated process, banning users for spamming achieves very little.  I can see that Google fixing this isn't going to be instant, but there's also the route of simply identifying
    spam on prima facae grounds and blocking it at entry.  Google don't seem
    to like that approach for some reason.  Perhaps they see it as just escalating the spam war requiring constant investment to keep up with spammers, and Google want a zero on-going effort (on their part) solution.


    Maybe google gets advertising revenue from the websites, and so doesn't
    mind the spam?

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From James Kuyper@21:1/5 to David Brown on Mon Nov 20 20:03:49 2023
    On 11/20/23 07:33, David Brown wrote:
    ...
    The spammers are amateurs. Any professional spammer group would know perfectly well that flooding technical Usenet groups with Thai casino
    adverts is useless.

    I did a search across all groups for the "Subject:" header from the most
    recent Thai spam still surviving on comp.lang.c. The only other places
    that message was posted to were comp.lang.fortran and comp.cad.cadence.

    I could understand a poorly targeted campaign accidentally hitting an inappropriate target. However, it appears that they are deliberately
    targeting a small number of newsgroups that are all irrelevant to the
    nominal subject of their messages. I don't know what they're trying to
    achieve, but I suspect that advertising a Thai gambling website is
    merely a tool, not the actual objective. Depending upon what their
    actual objective is, this might actually be a smart strategy.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Lynn McGuire@21:1/5 to Kenny McCormack on Tue Nov 21 14:42:44 2023
    XPost: comp.lang.c++

    On 11/19/2023 5:23 AM, Kenny McCormack wrote:
    The good news: The spam problem (both the so-called "Thai spam" and the "mushroom spam") is gone from clc and clc++, because Google has (for
    reasons of its own) banned both groups. What's funny about this is that normally people on these groups would be p*ssed off at Google for banning them, but in this instance, it is a happy coincidence that it stops the
    spam. So, we're good with it.

    The bad news is that it is still alive and well in many of the other
    groups. Right now, comp.editors is getting slammed - about 1 spam per minute, 24/7.

    So, the question becomes, is there any way we can get Google to ban all newsgroups, not just these 2?

    Ray Banana (E-S admin) blocked a back door that somebody had installed
    this morning that GG spam was coming through. He may have gotten the
    rest of it. The spammers will be looking for more back doors though.

    Lynn

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From DFS@21:1/5 to Kenny McCormack on Fri Dec 15 09:38:58 2023
    On 11/19/2023 6:23 AM, Kenny McCormack wrote:
    The good news: The spam problem (both the so-called "Thai spam" and the "mushroom spam") is gone from clc and clc++, because Google has (for
    reasons of its own) banned both groups. What's funny about this is that normally people on these groups would be p*ssed off at Google for banning them, but in this instance, it is a happy coincidence that it stops the
    spam. So, we're good with it.

    The bad news is that it is still alive and well in many of the other
    groups. Right now, comp.editors is getting slammed - about 1 spam per minute, 24/7.

    So, the question becomes, is there any way we can get Google to ban all newsgroups, not just these 2?


    "Effective Feb 15 2024, Google Groups will no longer support new Usenet content. Posting and subscribing will be disallowed, and new content
    from Usenet peers will not appear. Viewing and searching of historical
    data will still be supported as it is done today."

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)