This security expert is banishing spammers to a hilarious 'password purgatory'

Whether it’s John Wick or The Depend of Monte Cristo, we all enjoy a very good revenge story. Appropriate now, my existing favored is a wholesome nerdy tale advised by Troy Hunt.

You probable already know Hunt as the power at the rear of Have I Been Pwned, an priceless stability source for us normies on the online. The web-site tells you if your electronic mail address or telephone amount has been uncovered in data breaches, and if you’re so inclined, lets you sign-up for notifications should really your details turn into exposed afterwards on.

But he also documents his different side projects. His most current: Dishing a very little return ache to spammers for thieving time from him. The punishment involves sending them to what he phone calls “password purgatory.”

Using a concoction that blends Microsoft Ability Automate and CloudFlare instruments, Hunt lures spammers into pondering they’ve identified an quick mark. All they have to do is go to a easy registration type on his web-site, produce a username and password, and then revenue off the sweet, quick website back links. Except…he’s just toying with them.

Troy Hunt / troyhunt.com

The target? To see how lengthy individuals who take the bait endure the increasingly hilarious password prerequisites. He’s also becoming sort ample to share the benefits with the relaxation of us for our amusement. I like to consider of these as a software engineer’s variation of all those glitter bomb films on YouTube—the kinds wherever porch pirates are subjected to a shocking, surprising explosion of glitter after thieving the deal.

It is gratifying. And entertaining.

You can look at out the complete particulars of how Hunt spun together this beautifully evil kind of purgatory in his blog post—which incorporates a hyperlink to a Github repository with all the code he utilized. If you are so inclined, you much too can place spammers by way of the ringer.