Ads by TechWords
Subscribe to our e-mail newsletters
For more info on a specific newsletter, click the title. Details will be displayed in a new window.
Computerworld Daily News (First Look and Wrap-Up)
Computerworld Blogs Newsletter
The Weekly Top 10
More E-Mail Newsletters 
Mark Hall's picture
Mark Hall

On the Mark

Fink on spammers to get better results

  As we know all-to-well, mail filtering alone has not licked the spam problem. Hardly. That inescapable fact pushed Garth Bruen to create Knujon LLC in Wilmington, Vt. Knujon (pronounced "new john") is a spam fighting service that, he says, "attacks the transaction" by forcing ISPs and domain registrars to shut down spam sites that are conducting illegal activities. Since 2005 Knujon has shut down more than 50,000 Web sites on behalf of its customers. Knujon users download a plug-in for their Thunderbird mail clients-or you can write Knujon scripts for Outlook and Apple Mail clients-and automatically send the service your spam. Knujon software examines each message and gives it a score. A bad score and the service starts proceedings against the spammer. Bruen says it takes about six months to get results. But the service continuously updates users about where Knujon is in the spammer-shutdown process. He says feedback is crucial, noting that citizen complaints to government agencies, such as the Federal Communications Commission, are often unresponsive with consumers. Most interesting, Bruen claims his analysis leads him to conclude that the virtually all of the world's spam comes from about 50 sources. While he's not so optimistic that spammers will ever be ultimately defeated, he does think services like Knujon can make it harder for them to make a living. You can subscribe to Knujon for $27 per year.

What People Are Saying

Rate this
Rated -20
152 Votes

Follow Up Time: 90% of Illicit Sites Clustered at 20 registrars

Consider the Spam Balloon. Knowing that a minority of companies control most of the sites advertised in spam helps put the junk email problem into better perspective. To illustrate this consider a typical spam campaign. The emails are generated by tens of thousands of malware compromised machines and networks on the Internet. They send millions of spam messages to millions of victims. Sounds like a big problem, right? Not exactly. Because the number of actual websites advertised in those millions of messages is rather small in comparison the derivative of a spam campaign is seriously reduced. Reducing the true size even further is the fact that these real websites are held by one or maybe two registrar companies per campaign. Imagine that a spam campaign is a balloon. A balloon is actually made of a very small amount of real material, it only appears bigger because it's full of hot air. The huge volume of sent spam messages is the hot air that pushes the boundaries the Internet's resources, making the problem look bigger than it is. However, the air only stays in the balloon because it is knotted at the bottom. The registrars are this knot.

Rate this
Rated +1
359 Votes

Force? How?

How does he "force" ISPs to shut down sites? One means is through blocking lists -- Spamhaus SBL, or more notoriously the old SPEWS list.

Other than that, how different is this from Spamcop, which has also been around quite a while?

Rate this
Rated +29
355 Votes

valid question

it's a valid question...i dont see why it's rated -2....but anyways.

It doesnt necessary "force" ISPs, hosts, or registrars to remove access to these sites, but one would think, after receiving multiple requests for removal with an abundance of evidence, the host(s)/ISP(s)/registtrar(s) would get tired of hearing the complaints, and close down the domain name.

KnujOn works as a tiered effort though, it's not just about shutting down domains, but creating evidence which could possibly be used in court as well I'm sure, down the road if need be.

Let it be known, there are other services around the net that work similar, but knujon seems quite successful thus far.

As the commenter above me mentioned, SpamCop is great for blocking the spam, but as the article states, filtering has not worked thus far, so it's time for something new. Laws are too hard to police over the Internet, so why not go after the ISPs, hosts, and registrars who allow these scam/fraud domains access to the Internet? So that's where KnujOn's attack is at, going after the registrar for the most part.

The European SpamWiki (spamtrackers.eu) has an abundance of articles on the subject too, but the "in thing" is now using botnets, often running as "fast flux" or roundrobin for load-balancing. Behind a single domain name, there could be 100+ individual COMPUTERS.

Someone could seriously write a book on spam fighting/spammer take-downs, etc...

For other research, check out castlecops.com/sirt - the castlecops brance for spam takedowns, they also work with law enforcement to take down the criminals.

spamtrackers.eu has a wealth of information too.

Rate this
Rated -2
304 Votes

SpamCop

Though SpamCop does provide an aggressive filter, the main thing I have used it for is to generate reports to spam generating and hosting site administrators. It was this that I was referring to when I mentioned SpamCop in my earlier comment. It does require the user to check and submit the spam reports that are generated from the spam (allowing the user to detect and eliminate false positives, e.g. from user forwarding mail servers); is that lack of automation the main difference?

Rate this
Rated +14
308 Votes

I am not convinced of the

I am not convinced of the effectiveness of Knujon. I have been a paid member for over a year and have been bombarded by spam from the same spammers. Knujon does not appear all that effective in shutting down the most pervasive and ruthless spammers. How do I know, it was the same spammers?? By using complainterator and spamcop, I was able to determine that the spam was coming from the same network of spammers, and the same identical content in the repeated spam also gave it away(gambling site spam, penis enlargement spam, and replica watch spam). I know I won't be renewing my membership. I didn't pay Knujon only to get the same spam over and over while Knujon sat there doing nothing.