On Mon, May 19, 2008 at 10:46:23PM +0200, mouss wrote: >> >>> and the slowdown thing is based on the theory that spammers have >>> better things to do than wait. now that we know more about botnets, >>> this theory doesn't stand. >>> >>> how long would it take to write an asynchronous smtp client? >>> >> >> You think spammers aren't already using them? too late I'm afraid; I know >> that one of the major ratwares is already written using libevent: >> http://www.monkey.org/~provos/libevent/ . And I'm sure there are more. >> > > wasn't aware of that. do you know if this is already used on a "large" > botnet?
I tend to overestimate spammers intelligence usually, but I'm surprised that someone wouldn't assume this has always been true? It's not exactly rocket science to write a polling SMTP client to answer a few responses. We all know they want to send as much as possible, without bogging down the users machine with hundreds of suspicious processes.