Tagged.com Will Spam Your Friends And Family
Tagged.com has been around for a few years now, but it's spread across the Internet with a vengeance in the last few weeks. The service promotes itself by getting inside the address book or e-mail contacts of people who sign up and e-mailing everyone they know. It's disingenuous, since the e-mail looks like an invitation from your friend or family member...but they didn't initiate it at all.
Let this serve as a warning: don't sign up with tagged.com, and warn anyone in your life who you think may be susceptible to this kind of scam.
The text of the message looks like this:
[Name redacted] has added you as a friend
Is [Name] your friend?Click Yes if [Name] is your friend, otherwise click No.
But you have to click!Please respond or [Name] may think you said no :(
Guilt-tripping me with a frowny face? That's low. Now, the e-mail claims that either your friend wants to share pictures with you or has added you as a friend, but neither is true. The site has simply harvested your entire address book.
This behavior is item F under their Terms of Service:
E) Notice Regarding Commercial EmailMEMBERS CONSENT TO RECEIVE COMMERCIAL E-MAIL MESSAGES FROM TAGGED, AND ACKNOWLEDGE AND AGREE THAT THEIR EMAIL ADDRESSES AND OTHER PERSONAL INFORMATION MAY BE USED BY TAGGED FOR THE PURPOSE OF INITIATING COMMERCIAL E-MAIL MESSAGES.
It's the only item in all caps, so you know it's important. Caps lock: cruise control for importance.
The e-mails asking you to sign up for Tagged include a URL to block all future e-mails from the service. That address is http://www.tagged.com/no_more_conf.html?blckd=youremail@here.net.
Tagged.com [McAfee Site Advisor] (The company considers the site "safe," but look at the user complaints)
Tagged [Snopes.com]
Post a comment
Comments:
@lasbrisas: Because it doesn't infiltrate your computer, as far as I can tell. It only accesses web-based mail, so there's nothing for security software to detect. It doesn't place spyware or other malware on your computer.
Funny apparently my mom sent this email last night. I was all like... my mom doesn't have tagged. She doesn't do those social networking things.
Aside from the fact that I hate them and think that there are WAY too many people know WAY TOO much about their lives... social networking sites are slow.
We don't do those.
I received the almost identical email from a (not very technical) friend. Only this one was for MyLife.com. Researching this site showed that MyLife was originally called reunion.com and had developed a very poor reputation for getting a hold of members' address books and spamming the members' associates.
My mom was 1 second away from giving Tagged her Yahoo e-mail address when I stopped her. She received a message, supposedly from an old college friend, and thought she had to provide her e-mail address *and* password to see the pictures this friend had posted.
The bigger lesson here is that less tech-savvy people don't always understand the difference between giving someone (or some web site) their e-mail *address* (which can be bad enough) and giving their e-mail *PASSWORD*. So many services now "offer" (gee, thanks!) to scan your address list to see who else among your contacts uses their service. I wonder how many people realize that they're giving full access to their e-mail account by doing this.
We make people pass a written and driving test to get a license to drive a car. I really believe we should make people take similar tests to get a license to drive the Internet. It would make it a little bit safer for all of us...
I really believe we should make people take similar tests to get a license to drive the Internet.
LOL, what?! Yay, let's police EVERYONE and EVERYTHING they do! Totally makes sense!
There's a HUGE difference between "policing" things (i.e. making sure people follow the rules) and making sure people have adequate knowledge before doing something potentially dangerous.
My half-joking idea of an "internet driver's license" is akin to a regular driver's license: you have to prove a certain level of proficiency before you're allowed to cause a 5,000 pound hunk of metal to go down the street at 50 MPH. Of course, once you get that license, you're expected to follow the rules but no one is watching you 100% of the time.
Seriously, though, I think we (the "internet community") would have a much smaller spam / virus / spyware problem if the less tech-savvy among us had some educational process before going online.
More like an internet license would make the internet safer for idiots.
The rest of us just ignore all this shite.
You want to talk to me? RFC (2)821, baby! Live? Sorry, there's no RFC for "talk", but hey, that shouldn't stop you!
You want to talk to me AND friends at the SAME TIME? RFC (3)977! Real time, even? RFC 1459/2812.
You just want to look at purty pictures of family? RFC 959, 1945, or 2616 will do.
Of course, with most people being unable to properly use their computers and ISPs blocking ports and not giving out static IPs, this all becomes quite difficult. Seems everyone wants to use HTTP or bust nowadays. It always comes down to the lowest common denominator, doesn't it? *sigh*
Now get off my lawn!
How can the TOS apply in this situation when the email password is given at a point in time where you have not read the TOS? Seems like they ask for your email password to "to scan your address list to see who else among your contacts uses their service" - and then they proceed to do more than that.
Just to clarify - I have not gone through the process so I'm not clear when the TOS are presented.
And by the way - I read somewhere that if you actually click NO in the email, you're taking to the same place as if you had clicked YES. Best advice - just delete it and don't click anything.
@SoFlaSnowMan: I got the same one from MyLife. I thought it was suspicious, since the "friend" who "sent" it to me can barely keep up her Facebook page, so I thought it odd that she would add another site to the mix. Rather than click 'yes' or 'no', I went to the MyLife site, where you can search members' names. As I suspected, her name isn't even listed. Delete.
hi5 is very similar and spammy... that could be it...
I accidentally spammed all my friends and family one day when I (stupidly) signed up for hi5....
Watch out for that one too...
@Scott Brenner: The difference is that's is much easier to kill someone with a car than with an email account.
@SoFlaSnowMan: That sorry ass website will create profiles of you for every social networking profile you create. Im in a battle with MyLife to delete my profiles that they made of me. Its so annoying.
@Tamar Weinberg: I don't think you got them from Tagged. Once you are in the opt-out, Tagged shouldn't be sending you e-mail unless we have a bug.
My thinking is that you accidentally tripped into one of the registration-based ad units that have cleverly disguised themselves to look like the Tagged website. You're in someone else's e-mail database, not ours.
FYI, I work at Tagged as the engineering architect. I'm not customer support and I don't work on the viral pipeline (where these complains are coming from).
Since when can you give permission to a company to send marketing emails to someone on your address book? "Oh, it's not spamming, because technically it's coming from Jimmy, who thought you might be interested (though he doesn't realize he agreed to this...). And since you know Jimmy, it's not spam."
Die in a fire spammers.
















So that's what that is... one of my old college friends has been sending me weird emails like that. Not tagged.com but something similar.