Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

We allow users to sign up for a free trial for our product, you have to put in your name & email address. After the trial expires, we send an email that says "Hey So-and-so, your trial ran out, click here to give us money, etc." Some enterprising spammers filled in the name field with spam URLs and the email field with victims' email addresses, in order to spam them. So the victim would get "Hey hxxp://buyfreerolex.com/, your trial ran out..." spam emails, from our email server. Obviously we've fixed it since, but it's absolutely wild the length spammers will go to.


Perhaps a bug in some spamming script, mistaken your sign-up form for a blog comment form?


Ha, thank you! That explains it... I've had several signups via Tor to my service, none of them confirmed, every few days... I guess they were checking if they can somehow abuse the mails.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: