Lycos, spammers trade blows over screen saver

IDG News Service - Lycos Europe NV is caught in a tit-for-tat struggle with spammers just days after releasing a free screen saver program that uses computer downtime to swamp Web sites associated with spam campaigns.
At least one Web site targeted by Lycos' "Make Love, Not Spam" program, www.moretgage.info, has changed its Web page, forwarding requests it receives to http://makelovenotspam.com, a Web domain that distributes the software, according to Helsinki-based F-Secure Corp. The escalating war with spammers comes amid mounting criticism of the screen saver from antispam experts and a crackdown by Internet service providers on the program.
Lycos launched the "Make Love, Not Spam" screen saver yesterday (see story), but it was circulating a beta version of the software before that. The screen saver promises to "spam the spammer" by sending a steady stream of requests to a list of Web sites that have been used in spam campaigns, slowing those sites. The list of sites to attack is downloaded by the screen saver from a control server operated by Lycos.
Charges quickly surfaced that Lycos was crossing the line by launching a distributed denial-of-service (DDOS) attack, which is illegal in the U.S. and most European countries. The antispam campaign also prompted quick retaliation from unknown parties, including a reported hack of the Makelovenotspam.com Web site.
Lycos denied that its Web site was hacked and stated that the program doesn't launch DDOS attacks, because the company is careful to avoid completely shutting down the sites it targets. Lycos didn't respond to requests for comment for this story.
The Moretgage.info Web page was changed to contain an HTML Meta Refresh tag that forwards all requests to view the page to www.makelovenotspam.com, effectively using the screen saver to launch attacks on Lycos' Web site, F-Secure said. Requests for Moretgage.info were still being forwarded to Makelovenotspam.com this morning.
More troubling for Lycos, some service providers are blocking traffic to the server that controls the screen saver, according to Johannes Ullrich, chief technology officer at the SANS Institute's Internet Storm Center.
Internet service providers are treating Lycos' network of machines running the "Make Love, Not Spam" screen saver in the same way they treat "botnets" of compromised systems that are controlled by malicious hackers or online criminal organizations and that are often used to distribute spam or launch DDOS attacks, he said.
"The [Make Love, Not Spam] application isn't really all that well thought out. In a way, it's doing a DDOS attack, and DDOS attacks are always a bad thing, because there are always innocent