Posted on 17:04 Hrs,December 25th, 2007 by Steph

Recently I have experienced an increase in spam messages from the Yahoo network, and prior to this I received spam over ICQ in the form of authentication requests. This sort of spam is worse than any unsolicited junk mail that I’ve received, in my opinion, because it’s delivered directly to my desktop in real time.

Up to this point I have been using the Trillian instant messenger. It’s a great piece of software and I’ve enjoyed its interface and options above the other instant messengers.

The one thing that it’s lacked, though, is spam blocking. So what have I done to stop spam from Yahoo and other chat networks? I’ve switched to Pidgin.

Pidgin is a somewhat unwieldy program, and to be perfectly honest it feels unfinished according to Windows standards. It’s also unnecessarily complicated to install skins and the default interface is a very plain theme that looks like something from the 80’s that’s trying to appear futuristic. Yeah, it’s about as bad as it sounds. These bumps are not surprising considering that it’s originally a Linux program that has been ported to Windows.

Once you get over the adoption bumps though, you may find that it’s quite a nice program. It connects to the same chat networks that Trillian supports and then some, and there is also no Pro version. This means that you don’t ever have to pay to use plugins. Trillian, of course, only supports plugins if you buy the Pro version.

…and it’s the plugins where the magic really happens.

You want to stop Yahoo spam? Or the junk messages that you get from the other networks? No problem, just install Pidgin and then get the Bot Sentry plugin.

The Bot Sentry anti-spam plugin knows when you have received a message from someone who is not on your contact list, and it stops it from ever pestering you. It also sends a message back to the (potential) spammer and challenges them to enter a specific word or phrase. It’s just like posting on a forum: If you can’t pass the captcha then you can’t post. Well, if they can’t pass the test within 10 minutes then they can’t send you their message.

Better yet is the fact that you can customize the question and the answer that it requires. Currently mine is set to require potential spam bots to spell out the number 8, but it can be as simple or as detailed as you want.

It’s so simple that it’s brilliant.

The good news? It actually works. I tested it on a fellow that I know by removing him from my contact list, and I had no idea that he had sent me a message until he passed the test. When he did, the Bot Sentry anti-spam plugin actually sent his original message to me while notifying him that it was doing so. Thus you get to see their original message, and they don’t have to retype it…. and I only knew that all of this happened because he pasted the bot’s response to me.

I don’t know if it will block ICQ authentication spam, but it definitely blocks the other junk. For now I’m enjoying my return to a peaceful spam free IM.

Technorati Tags: , , , , , , , ,

Posted in Tech | Read More »

Comments

Hippie on 17 May, 2008 at 12:33 pm #

Thank you very much for this, just what i was looking for!

Chris


Steph on 17 May, 2008 at 5:49 pm #

Sure, glad to know that my post has helped someone ward off the spam.

I should add a note that MSN has been exploited lately. You may receive “switch board” errors from the MSN network because Bot Sentry attempted to send a challenge to a nonexistent user.

I don’t know how it’s done, but it appears that someone has discovered a way to trick the MSN servers into sending messages from user names that do not exist.

Hopefully they’ll get that fixed and the “switch board” errors will eventually go away.


D Tran on 14 August, 2008 at 8:38 pm #

It’s done by disconnecting a fraction of a second after sending the message. then the switchboard thinks there’s no such user. right now this bug is making the plugin unusable. let inform us if you know of any other solution.


Stephen Meyer on 15 August, 2008 at 11:45 am #

One option would be to add the option to automatically ignore messages with that error in it.

The result is that the message is silently dumped and the user never knows that it happened.

EDIT: I just read the bug thread on SourceForge about this problem. Apparently the Pidgin API does not (at all) make it easy for them to do something as seemingly easy as ignore the message.

It would be perfect if they could figure out a way to wait a couple of seconds before sending the challenge message.

For now, the only way to prevent this behavior is to open Pidgin, go to Tools then Privacy, select MSN and choose the option “Only allow the users on my buddy list”.


anonymous on 25 August, 2008 at 8:43 pm #

There is a similar plugin for Trillian. I knew about the Trillian one, but am using Pidgin now and wasn’t aware that there was something similar for Pidgin.

http://www.ceruleanstudios.com/downloads/detail.php?item=322


Steph on 26 August, 2008 at 9:58 am #

I vaguely recall this plugin, but it’s been a long time since I’ve tried it.

If someone has the Pro version of Trillian then that plugin definitely seems worth trying.

Thanks for posting the link.


Post a Comment
Name:
Email:
Website:
Comments: