BlueSecurity Database Compromised?

[giza]

Seen on Slashdot:

http://it.slashdot.org/article.pl?sid=06/05/02/1326228

If you have their BlueFrog plugin installed in FireFox, you should read that link very carefully.

Personally, I figured it was only a matter of time until something like this happened. What Blue Security was doing, quite frankly, was a "vigilante" approach to fighting spam. To simplify it, their software would do DDoS attacks against spammers by flooding them with complaints. Both the ethicality and legality of this are questionable at best.

Sooner or later some spammer would get really pissed off, and that appears to have happened. Spammers are evil, and they tend to direct that evil at those who piss them off the most. (SpamHaus, SpamCop, etc.)

Comments

[taral.livejournal.com]

I foresaw this ages ago. The bluesecurity database is just a list of hashes. The same process that they use to "clean" lists can be used to extract only listed people from your list -- and then attack them. *shrug*

[duncandahusky.livejournal.com]

(Yeah, nothing like posting a follow-up to old posts that really only the poster will read)

I'd be surprised if you hadn't already seen this, but it would appear that the culprit for the DDOS on Livejournal and SixApart the other day was, yep, BlueSecurity.