Spammers pay virtually nothing to send out an e-mail. Spammers can send out millions of e-mails in a single day, so sending out e-mails that don’t actually make it to any recipient doesn’t bother them much. Hence the popularity of the dictionary attack. Spammers simply pick a domain, say Mac.com, and send out e-mails that look like this:
- Abe@mac.com
- Abby@mac.com
- Al@mac.com
- Alan@mac.com
- Albert@mac.com
- Andrew@mac.com
- Andy@mac.com
- Ann@mac.com
- Anna@mac.com
So the problem, as anyone can see from this list, is that if you have a common ISP, and if you combine that with a common name, you’re going to get hit hard with dictionary attacks. There’s hope, though. Avoiding dictionary attacks is simple, if not foolproof, by following these guidelines:
- Make sure your e-mail name is not a recognizable word. For instance, instead of Bob@mac.com or Wells@mac.com, try BobWells@Mac.com, or, better yet, make up a word, such as BobsTheBest@mac.com.
- Stay away from words that aren’t in the dictionary but are well-known such as Gandalf or DrSpock.
- Stay away from words that are in the dictionary. Period.
- Don’t use random letters like akslf@mac.com. This looks like a spammer’s address and may cause your e-mail to be passed over and deleted by your recipient’s spam filters.
- Don’t think a middle initial will help. BobG@mac.com can be caught by spammers. In recent years, spammers have been cycling through first names and middle initials looking for e-mail addresses.
The basic idea is to choose a name that would be hard to guess, the same way you’d choose a password that is difficult to figure out. For even more protection, put a number or two in there: BobWells2@mac.com.