A LJ Mystery

[jamesq]

So some of you have noticed that utilogo has been friending people of late. It's a bit of a mystery because their friends list contains (as of this posting) 209 people (for perspective, I have about 70). Of those, 23 are on my friends list and another 13 are people I know of, but haven't friended (sometimes these are fellow SCAdians I just don't know that well, others are just familiar LJ handles that I've seen here and there, but don't know the people behind them).

The weird thing is who was friended and who was not. It's like someone took a random sampling of my f-list and added them willy-nilly. Some of the people have no obvious connection to others except through me. For example, there's a bunch of SCAdians on the list but _grog_ is on the list too. She doesn't have anything to do with the SCA, so it's not obviously looking for SCAdians.

There's enough people I know on the list that, if it's a real person, I'd be shocked if I hadn't at least met the person casually.

But then there's all those names I don't know. The vast majority of the people friended are completely unknown to me.

This leads to a couple of possibilities:

1) It's a real person, with completely normal motives who's just shy about letting people know who they are.

2) It's a real person who is using a semi-anonymous account to keep track of some sub-set of their friends list. In this case it's likely that the person in question has another LJ account that their more active with.

3) It's some form of malware. Either a currently inactive spammer, or some kind of data-miner. In either case I'd expect the account to erupt some way in the future.

Complicating matters is the fact that it's been a month since the account was activated and they've posted (friends only) at least 20 times. I'd suspect a spambot to have recruited a lot more people and to not have bothered making posts. snooness: I notice you've friended them back - any hints?

utilogo has not friended me, so I find it more of an intellectual exercise then a concern.

The whole issue does suggest a few things:

1) You could target spam on LJ using interests. A reasonable data miner could come up with email addresses for people with shared interests. Send a Viagra ad to everyone who lists "SCA" and "sex" as an interest with the subject line "Show your lady that your sword stands ready" might pique more interest then "C4EAP V1AGRA N0W".

(aside: I got a cam whore ad the other day that I didn't immediately delete. It used my proper first name in the subject line which suggests that the bot in question figured out what my first name was. This is much better then the ones that use my LJ/hotmail handle. Nobody I know would actually call me "quixote317" in that context)

2) You might be able to programatically figure out who utilogo was by scanning the friends lists of everyone on their friends list to find the smallest set of handles that includes everyone on the list. The common denominator of those friends lists would be the person you're after. This method could work for any cyranoid account (where the user's intent is to look at their current LJ friends list anonymously). Ideally the app would simply return a list of LJ handles in answer to the question "Who's friends list is most similar to user X?", which is a more precise statement of the problem.

Comments

[thekillerb69.livejournal.com]

You're missing another possibility. LJ has become a sentient being unto itself and this user is the personification.

But really I think it's a new type of spam bot.

[hislittlekitty.livejournal.com]

My guess is that its a spam bot. There are quite a few popping up* recently. I'm not where they start from picking people, but after a while of badly written fic-type posts, they post a 'survey' about working from home that links you off to another page.

*because I can't remember how to make a link- http://baxil.livejournal.com/260272.html

[oblivions.livejournal.com]

LJ seems to be aware of the activities of what they call Russian spam bots.

http://www.livejournal.com/abuse/bots.bml

I reported it, and I'll leave it at that. If it vanishes in a month or so then question answered.

[canadianknight.livejournal.com]

Hmmm... didn't take a month. The account has already been suspended.

Looks like it WAS a 'bot.

[snooness2]

I figured it was a fiction writing page for someone I knew... actually I still have my suspicions that it was - but hey if it's been suspended and it was a spam bot I'm not too worried at this point.