FTC Goes After Spammers

klaun writes: "Yahoo has an article about the FTC launching a crackdown on deceptive unsolicited email. Basically they are after scammers offering easy money quick, not the average 'get porn here' type of spam. There is more info at the in a press release at the FTC's website." TheGreatGraySkwid amplifies, saying that this story "tells of an FTC crackdown on Spammers, that had resulted in charges (settled) against 7 chain-letter ring spammers, and several pending cases. I know I could use some Spam relief..." The settlement, unfortunately, isn't exactly stern stuff: the seven spammers "agreed to refrain from participating in deceptive schemes in the future, or lying about the legality or potential earnings from any such schemes."

Comments

For the lazy

[NewbieSpaz]

FTC Launches 'Spam' E-Mail Crackdown
By Andy Sullivan

WASHINGTON (Reuters) - Federal regulators kicked off a crackdown on the junk e-mail known as ``spam'' on Tuesday with an announcement that they had settled charges against seven people accused of running an e-mail pyramid scheme.

The Federal Trade Commission said that the seven defendants had participated in a chain-letter scam that promised returns of up to $46,000 for a $5 payment. Such chain letters are illegal in the U.S.

The chain letter eventually drew in more than 2,000 participants from nearly 60 countries, the FTC said.

While the consumer-protection agency has targeted some 200 Internet-based scams over the past several years, it has not until now gone after spam.

FTC Chairman Timothy Muris said the agency now had e-mail scams in its sights.

``We're going after deceptive spam and the people who send it. We want it off the Net,'' Muris said at a press conference.

The agency plans to settle several more cases within six months, said Eileen Harrington, the FTC's assistant director of marketing practices.

Spam has long been a hot-button issue for Internet users, who often find their inboxes clogged with unsolicited offers for pornography, fake diplomas, and get-rich-quick schemes.

Internet users received an average of 571 pieces of unsolicited commercial e-mail in 2001, a number expected to rise to nearly 1,500 by 2006, according to Jupiter Media Metrix.

Nineteen states have passed anti-spam laws, but attempts to pass a national law have stumbled over opposition from direct marketers who say their activities would be unfairly limited.

FTC officials said they will go after spam using existing laws that prohibit false or deceptive trade practices.

In addition to chain letters, pyramid schemes and other scams, the agency will target spammers who use deceptive return addresses or do not respond to consumer requests to be taken off their contact lists, said Howard Beales, head of the FTC's Bureau of Consumer Protection.

Spammers are not likely to face jail time or large fines from FTC actions. In deceptive-trade cases, the agency can usually only force companies to give back profits and pursue ''structural'' remedies that modify future behavior.

The seven spammers, who had been sent letters of warning by the FTC in September 2000, agreed to refrain from participating in deceptive schemes in the future, or lying about the legality or potential earnings from any such schemes. In addition, the defendants must return any money they take in from the chain letter in the future, can not share their lists of recruits, and must submit to FTC oversight of their actions.

Some 2,000 other participants in the chain letter received a warning letter from the consumer-protection agency.

While the FTC is preparing a national ``do not call'' list for telemarketers, a ``do not spam'' list would probably not be effective, Harrington said.

Harrington said Web users should forward spam to the FTC for analysis, using the e-mail address uce+ftc.gov. The agency has amassed a database of 8.5 million spam messages, and takes in an additional 10,000 per day, she said.

We need technical measures, not laws, for spam

[geek00]

I think these senators don't comprehend the reality with spam; that is, 99% of it has false origin information and has an opt-out scheme that doesn't work or only results in more spam.

However, I don't believe in making laws against spam. They'll always be outdated and interfere with legimate uses of email, since it can be very hard to define exactly what is spam. (Someone taking my address from a newsgroup posting and trying to sell me printer toner is spamming, but how about an email from a company I bought something from a year ago?)

Adam Back has an interesting proposal called Hash Cash. The idea is that if you want to send me an email, you have to burn some CPU cycles to compute a partial hash collision. I choose how many bits are required. Friends and family can send me email for free. I'll charge a few bits for the store I shooped at last week, and even more for people I don't know. If you're in ORBS or MAPS, perhaps I'll charge even more.

Re:We need technical measures, not laws, for spam

[jeffy124]

personally, I differentiate between different types of spam. Email I get from places like ebay, amazon, etc I dont consider spam because I know they got my address directly from me, and I can opt-out and that they will honor the request. I consider spam to be email from people that harvest addresses from usenet and other websites, spoof email addresses, dont respond to opt-out requests, etc. If you follow my definitions, lawmakers might be able to catch on to what the problem of spam is.

(Note: I dont actually get email from ebay and amazon because I have unchecked those boxes when I registered myself. I just used them as examples of reputable companies)

Re:We need technical measures, not laws, for spam

[jgerman]

Interesting but completely impractical. With the wide variety of machines and architectures out there everyone would get a different "price". But still interesting.

Re:We need technical measures, not laws, for spam

[Snowfox]

I think these senators don't comprehend the reality with spam; that is, 99% of it has false origin information and has an opt-out scheme that doesn't work or only results in more spam.

What are you basing this 99% on?

Re:We need technical measures, not laws, for spam

[EisPick]

I think these senators don't comprehend the reality with spam

I think there's a glass houses problem here. Someone who makes no effort to understand how government works has no room to say others "don't comprehend the reality ...."
Neither senators nor new laws are mentioned in this article. This article is about the FTC -- an agency within the executive branch -- applying existing law to spammers.

The FTC is applying the same laws that prohibit mail fraud and phone fraud to email fraud. They're not prosecuting spammers, they're prosecuting people who engage in false or deceptive trade practices, regarless of the medium of communication they use.

Re:We need technical measures, not laws, for spam

[ichimunki]

I like the notion of a technical solution to the problem that doesn't rely on simply filtering falsified origins-- since that would eliminate a lot of virtually hosted domains. But another easily implemented technical idea would be to filter all mail based on three criteria: 1) belongs to an allowed list of from addresses (i.e. opt-in lists, friends, family, etc), 2) email contains a valid GnuPG/PGP signature from a key posted to one or more central keyservers, 3) email is encrypted using *my* public key.

Re:We need technical measures, not laws, for spam

[poot_rootbeer]

I don't think laws against spam will succeed in having a preventative effect on the behavior, but perhaps they could have a punitive effect. Most laws are already like this--just because the laws say that you're not supposed to kill people, drive over the speed limit, doesn't mean you won't be able to do those things. But if you do, and you get caught, you're going to have hell to pay.

Cypherspace.org seems to be /.ed so I can't read the Hash Cash proposal itself, so I'm going based on your summary of it.

The problems I see with such a system:
1. Requires two-way communication between sender and recipient to establish a one-directional message transfer. Potentially could waste more bandwidth than blindly sending out spam does today.
2. Requires end-users to set up "scorefiles" to dictate how much they trust every sender in the world. At best, provides users with no more functionality than existing score-based mail filters/readers.
3. Ties senders' ability to get their message out to the CPU power of their machine. Owners of dual-10GHz Pentathlon systems should not have a louder voice than the hobbyist running sendmail on an old 286.
4. Spammers HAVE CPU cycles to burn--like most of us, their machines rarely run anywhere near 100% load. They will learn to send out their garbage in a slow,steady stream rather than in huge batches so that their machines can handle it--simultaneously making bulk-mailing harder to identify.

Re:We need technical measures, not laws, for spam

[Snowfox]

I would base the 99% on the fact that of the 100 or so e-mails I get in a week (about 15-20 a day), only one or maybe two of them are valid e-mails I actually wanted.

You referred to the percentage which had deceptive opt-out schemes in your original post, not the percentage of your mail that was unsolicited. If the opt-out schemes were provably fraudulent, it would fuel more broad scale anti-spam legislation.

If you (or anyone else) has proof that a large percentage of messages have fraudulent opt-out mechanisms, please share it with slash as well as your state representative. I believe what you originally claimed to be largely true, but I suspect we both have nothing better than a hunch, and so shouldn't be stating it as fact if we want to be taken seriously.

Re:We need technical measures, not laws, for spam

[Geekboy(Wizard)]

But ebay and amazon AREN'T spam. Those are opt-in lists. They also honor opt-out lists. If ebay and amazon sold their contact list, ignoring any opt-out lists, THEN they are contributing to spam, if not nessacaraly sending it themselves. I have some bunk email addresses that I have for public use, and some specific email addresses for mailing lists, and 2 or 3 for private use. I can determine where the spam is comming from based on that, and assist the mailing lists with tracking down the culprit. OR I can just set up a new email address, and change my subscribe address. I have had 2 or more email address for quite a while, at least one for public (email lists, slashdot, contact for e-stores) and one private (personal friends, etc).

Re:We need technical measures, not laws, for spam

[geekoid]

I don't have time to look for the link, but california anti-spam law has a great definition of spam.

Re:We need technical measures, not laws, for spam

[SCHecklerX]

Did you read the article? The measures being taken are against:

1) pyramid schemes and such 2) (and this is the important one) forged headers.

This is a good thing. Yes, technical means *should* be taken against unsolicited mail. That other crap has absolutely no business coming to me, however, and in real life would be prosecuted.

Re:We need technical measures, not laws, for spam

[Dwonis]

All we need is for existing law to be applied (or maybe extended) to spammers. i.e. theft of services, fraud / false pretense, etc.

Re:We need technical measures, not laws, for spam

[walt-sjc]

People: Stoping spam by changing email standards WON'T WORK.

First, it will take YEARS to implement any new standard. If you don't believe me, look at IPv6!

Second, any scheme based on charging per email no matter WHAT the details of this scheme is NOT THE ANSWER. It totally hoses things like mailing lists, SMS, autoresponders, email based applications (send an email command, cause something to happen), kiosk email, etc., etc., etc.

Third, (stupid HashCash), how the hell do you hand out a business cards with your email on it and expect people to be able to communicate with you without jumping through hoops.

Bottom line is that SPAM is NOT a TECHNICAL PROBLEM. It's a SOCIAL PROBLEM, like murder, rape, theft, hate crimes, drugs, etc. The reason women don't get raped every time they walk out the door is because we have set moral and legal standards in our society. We need to set those same standards for spam.

No matter WHAT technical barriers you set up, you either make the system virtually unusable (whitelists, auto-responding password challenges,) impractical (hashcash, charging real money, etc.,) or impotent (spammers will find a way around filters...)

Just like we have laws against theft, rape, and murder, we need laws against spam. Sure, we still have some cases of rape, murder, and theft, but I would MUCH rather have a couple spams per year (that I may be able to recover $$$ damages on) than to have a police-state driven, hostile, and unusable email system. These "technological whiz-kid" solutions will screw us all rather than just screwing the spammers.

Think about it.

Names?

[L-Wave]

I think the names of spammers should be released to the public...or at least thier personal email addresses, this way we can retailiate =)

The FTC sucks at dealing with fax spam

[crumbz]

I had a fax spammer hit our Chicago office about a dozen times last fall. They were a discount travel brokerage out of Baltimore, MD. Despite repeated attempts to get them to stop, we had to resort to a cease and desist letter from our attorneys to stop them. Previous calls to them generated abusive language and hang-ups. Sent emails to the contacts at the FTC with no response. None.

Maybe they will actually fund and staff the elctronic incident center, but I doubt it. If they won't deal with spammers in the U.S. what is the chance that they will contact overseas abusers?

My two cents.

Re:The FTC sucks at dealing with fax spam

[mrroot]

At least with Fax spam you can find out who it is from easy enough by their phone #.

Re:The FTC sucks at dealing with fax spam

[mosch]

And how do you get that when CNID information is easily spoofable? Oh wait, you don't, unless you're the FBI or the phone company.

Re:The FTC sucks at dealing with fax spam

[Milalwi]

Fax Spam is illegal, I can't remember the law, but it is a crime(wire fraud perhaps?).

Indeed it is. The Telephone Consumer Protection Act of 1991 covers it. But my understanding is that the person sending the spam is not the liable party, the advertiser is. Thus the spammers can sell to folks who do not understand that they can be liable for $500-1500 per infraction. When they do realise, the spammers have moved on. Rinse and repeat. Sad.

Milalwi

Re:The FTC sucks at dealing with fax spam

[Tackhead]

> The FTC doesn't represent individual complainants in the way you would expect them to. There needs to be a FEDERAL case and as such this usually only happens with a substantial number of complaints across numerous states.

Then why not Alan Ralsky.

This pigfucker (my apologies for the insult to those of you who fuck pigs) has been going non-stop since 1997.

Typical modus operandi used to be dozens of dialups on sprint, uu.net, and dialinx (Genuity) in the Michigan area, and recent modus operandi has been to spam from dozens of dialups on att.net, uu.net, and Broadwing, in Dallas-Ft. Worth. (He may continue to reside in Michigan, dialing long-distance, or he may have moved to DFW. I dunno.)

But with a track record of spam several light years long, what appear to be prior convictions for bank fraud, involvement in (if not actual profit from) an operation to spam for beastiality pr0n, and continued spam for health products of questionable efficacy (e.g. his BerryTrim operation), what the fuck is the FTC waiting for?

More to the point, why the fuck is the FTC going after these two-bit chickenshit make-money-fast-fools, when they could be going after the big guns.

FTC: You reading this? You really wanna put a dent in spam? Take this bastard down. HARD.. NOW.

Let's get 'em all...

[ekrout]

Basically they are [going] after scammers offering easy money quick, not the average 'get porn here' type of spam.

I personally feel that the porm spam can be just as deceptive as the EZ $$$ NOW! scams.

I mean, let's be honest -- I'm sure we've all received dozens and dozens of emails saying that someone's site has a ton of free pics and videos of the hottest girls. But generally that's a blatant lie, and the lewd site is a reseller of explicit pornography. They simply tell a fib to get you to click on over to their site, which upon being rendered throws a half-dozen pop-up windows on the desktop.

Let's aim higher rather than just taking out the con artists alone.

Listen To My Latest Recording @ EricKrout.com

Re:Let's get 'em all...

[geekoid]

Just becaust the picture aren't what you expect, there still there.
Porn sites ads are almost alway technically true.
Free for three days is still free.
now what I want to see is the ability to turn off automatic pop-ups and redirects.

the problem with saying "Spammer must be stopped" is the fact that different typs of spammer may violate different law.
Get rich quick spammers are different then un wanted e-mail spam, which would be protected differently then religous or political emails.

Re:Let's get 'em all...

[DavidJA]

the problem with saying "Spammer must be stopped" is the fact that different typs of spammer may violate different law.

The easy way to stop them is create a non spam law, then they all break the same law.

Re:Let's get 'em all...

[jesser]

They simply tell a fib to get you to click on over to their site, which upon being rendered throws a half-dozen pop-up windows on the desktop. Let's aim higher rather than just taking out the con artists alone.

The FTC has gone after "trap" sites -- sites with extremely high numbers of pop-ups, or "hydra" ads. In that case, the domain names were misspellings of other popular domains, but I don't think it's a huge leap from misspelled domain names to misleading spam with forged headers.

I'd also like to see the FTC sue advertisers on both porn and non-porn sites that make their banner ads look like browser dialogs windows.

I'll believe it...

[Heem]

I'll believe it when my junk email is reduced by even 1% over the course of a month. Even without engaging in 'spam-risky' internet behaviour, ie - using real email address on newsgroups, web boards, signing up for free porn etc, I get a very large load of spam daily. One program that has been great is Mailwasher. This little utility allows you to bounce, blacklist and delete your spam before you download the actual message from your server. I then monthly take the blacklist it generates and add the email address or sometimes a whole domain to my email servers reject file... But still spammers get craftier and craftier. If only I could make a filter that would filter out anything like 12k3jhk213 and asdfl231.. hmm..

Re:I'll believe it...

[autocracy]

Then you won't get any e-mail from your non-geek friends who use AOL...

Re:I'll believe it...

[smnolde]

Don't forget spamassassin. I installed this yesterday and it has caught every bit of spam entering my mail server from all sorts of mailing lists.

Configuration is simple and straight forward and it integrates nicely with any email system. Personally I'm using exim to pipe all received email through spamc/spamd and then the mail is received by exim after the spam check. There is only one check for spam per email entering my system.

Spamassassin only flags the email as spam, but it's up to the MUA to actually delete it.

This is log output from exim+SA: 2002-02-12 17:21:35 From: Subject: *****SPAM***** save money for dank X-Spam-Status: Yes, hits=14.1 required=5.0 tests=NO_REAL_NAME, FROM_ENDS_IN_NUMS, INVALID_DATE_NO_TZ, REPLY_REMOVE_SUBJECT, EXCUSE_3,REMOVE_SUBJ, TO_BE_REMOVED_REPLY, SUPERLONG_LINE, FREQ_SPAM_PHRASE, FORGED_YAHOO_RCVD version=2.01 Sender: owner-freebsd-questions@freebsd.org

I'll soon move all my email users' to email filtered by spamassassin. This is just too damn simple.

Freedom!

[SirSlud]

> agreed to refrain from participating in deceptive schemes in the future, or lying about the legality or potential earnings from any such schemes

... in fact, they were encouraged to visit an FTC hyperlink where they could enter their email addresses opt-out of receiving any warnings or punishments in the future. ;)

Just got this spam today....

[tsmit]

Just got a spam message today that was in the format of a returned mail message. Even from Mail Delivery Subsystem. The attachment was an ad for pr0n.

I hate spam as much as the next guy, but, damnit, that's almost ingenious.

Re:Just got this spam today....

[AntiNorm]

Are you sure it wasn't a real bounce generated by someone sending out porn spam with your email address forged as the return address? I have unfortunately had that happen to me before.

Re:Just got this spam today....

[kindbud]

Yes, you can use the Microsoft.com mail servers for this purpose. In fact, you can use any Exchange server for this purpose. They all accept mail before determining whether it can be delivered, have no capability to block recipients, and generate a new messages for the bounce, with the original attached. Perfect for all your spamming needs:


mail from:<targets@address.com>
200 ok
rcpt to:<nosuchmailbox@microsoft.com>
200 ok
data
Subject: pr0n served fresh daily

.
250 ok

Re:Just got this spam today....

[EvilGwyn]

They all accept mail before determining whether it can be delivered

You forgot to add the "by default". It is possible to set up an exchange system so that it will not relay and will send a 550 back after looking at the RCPT TO: line.

Slap on the Wrist

[Renraku]

This is just a slap on the wrist for spammers. What they need to do is impose a per-email fine per recorded spam from a particular company, and if the violations keep stacking up, blacklist them from ISPs or start posting names/addresses of the spammers involved. All of those would be good. Ruin their reputation even more, take away most of their earnings, and make it damn hard for them to get decent internet access again. And if they do get internet access, it should be monitored for large amounts of outgoing mail. Maybe a per-day quota could be set up for the spammer.

Re:Slap on the Wrist

[Misch]

Actually, we do have something very similar (sans fines), it's called Spamhaus. It collects evidence of spamming by companies, finds those companies that own those netblocks, and lists the top spam-friendly hosts in the ISP business.

Sitting at the top of the list is media3, which hosts 5 known spammers has known about them for at least 2,163 operational days (operational days for all 5 spam sources), and acts covertly to support them. Their "score" is thus listed as 5*2163*4 = 42,720, nearly 8 times more than the closest spammers. If you want your spam to decrease significantly, you gotta take out those spammers at the top right at their source.

-Misch

Re:Slap on the Wrist

[kindbud]

Most of those operational days were accumulated while media3 was listed at Spamhaus. Fat lot of good the Spamhaus listing did. Are you trying to actually do something, or are you just keeping score?

Re:Slap on the Wrist

[Matt - Duke '05]

This is just a slap on the wrist for Napster/Morpheus/[Insert P2P program here] users. What they need to do is impose a per download fine per copyright infrigement from a particular P2P user, and if the violations keep stacking up, blacklist them from ISPs or start posting names/addresses of the downloaders involved. All of those would be good. Ruin their reputation even more, take away most of the music/pictures/movies that isn't theirs, and make it damn hard for them to get decent internet access again. And if they do get internet access, it should be monitored for large amounts of incoming and outgoing traffic on the ports used by P2P programs. Maybe a per-day quota could be set up for the file sharer.

You can't have your cake and eat it too. Either the Internet is regulated or it is not. You can't ask the FTC to penalize and enforce the law on spammers when in the next breathe, you ask the government NOT to penalize and enforce the law on intellectual property/copyright.

You feel this way because someone is breaking a law designed to protect you, so you feel violated. Now, the innocent little P2P users may not be hurting you, but they are certainly infringing on laws designed to protect someone else.

Your logic is a great example of the selfish me-me-me whining prevalent in a majority of slashdot posters. Pirated software, MP3s, movies, etc are good because they benefit me!! Don't enforce the laws against this!! Spam is bad because although someone else is getting a free-ride, I am not. Enforce the laws against this!!

Now, I'm not saying by any means that P2P users are evil or should be prosecuted. I just think that before people run around asking for any statutory regulation of the net, they need to think about the flipside of the situation as well. Do you want the net regulated or don't you? You can't have the both and allowing any sort of regulation and enforcement (i.e. spam) only leads the government to further believe that the net should be regulated and all laws fully enforced.

Just my two pennies...

Re:Slap on the Wrist

[Misch]

Ahh... well, I should probably add that Spamhaus also supplies the Spamhaus Block List"... very similar to the RBL (just not in legal troule, yet.) Not to mention their list of "kills.

Sometimes I wish I were "average"

[juggler314]

"Internet users received an average of 571 pieces of unsolicited commercial e-mail in 2001" so there are several hundred folks out there that get absolutely no spam at all to account for the 10,000 or so pieces I get a year...

Did someone in Congress finally get SPAM?

[eaddict]

I wonder which Congress person got burned on the pyrmaid thing THEN screamed it was SPAM.

Re:Did someone in Congress finally get SPAM?

[GreyPoopon]

I wonder which Congress person got burned on the pyrmaid thing THEN screamed it was SPAM.

When you find out, let me know. Make sure you get their e-mail address so I can forward all of my spam to them.

Re:Did someone in Congress finally get SPAM?

[kindbud]

Pyramid scheme? That would be the Enron mess.

Now it all falls into place!!

Re:Did someone in Congress finally get SPAM?

[MaxVlast]

Jesus! What ever happened to civics education in this country. The FTC (Federal Trade Commission) is an executive agency. Nothing to do with congress. Prosecutorial initiatives come from the executive branch (save some exceptions.) Go to a history or government class. They're more fun than you think.

court briefs

[Alien54]

rfn had it earlier this morning, but hey ....

I like the court briefs for the various spammers they have alreadfy acted against. And I also link them going after more than a thousand more. although it is more in the realm of real crime (chain letters, etc) vs just ordinary spam, what ever that is.

don't forget to forward your spam with full headers to uce@ftv.gov.

the only good spammer is a jailed spammer. although I would love a huge obscene fine to beat them with.

A lot of the spam originates in China, so...

[Ryu2]

The Chinese government just ordered all ISPs in China to start monitoring
email for subversive phrases and the like, so just reply to
Chinese spam with little replies of the form at the end of this spam.
Might be a useful tactic on companies who think that unsolicited
email is "just regular advertising".

Bill

"Jack(export manager)" wrote:
>
> Dear Sir
> How are you .
>
> We are a lighting factory in China ,It is glad
> to introduce ourselves to you:
>
> I am XUBIN (Jack) , XUBIN is my chinese name , you can just
> call me Jack !! , I am export manager of [deleted] ,
> China, our group have four factory
[snipped]
>
> Here is our company profile :
>

[Rest of sales talk snipped]

(And now, the reply)

Thank you for your coded order. The weapons and ammunition
will ship by way of the usual route in ten days, and you
already know our secret Swiss bank account number to
wire the payment to.

It is a pleasure doing business with you for so long,
and I hope your cause will prevail. I am new to this
particular computer, so I hope the encryption is
working and the monitoring authorities cannot read
what I am sending you.

Long live the Falun Gong! Free Tibet!

Best regards,
Your arms supplier

Re:A lot of the spam originates in China, so...

[MaxVlast]

Pure acrylic mink, eh? Pretty good.

What about those "we have lots of money, but need somewhere to put it. Send us your bank account number" ones? They're my favorite. I've had two people come and ask me if they're legitimate. Some things should be obviously crooked!

Re:A lot of the spam originates in China, so...

[Tackhead]

> Here's one we got from Korea:
>
> Attn: Mr.CEO, General Manager / To whom it may concern
>
> How are you doing Gentlepersons ?

...ALL YOUR SMTP SERVER ARE BELONG TO US!

Speak for yourself

[mrroot]

From the FTC press release:

Chances are you will receive little or no money back on your "investment." Despite the claims, a chain letter will never make you rich.
Speak for yourself. I made over $46,000 dollars in 90 days, and you can too! and it's totally legal. To learn how, just mail me $5.00.

Re:Crackdowns Unsuccessful

[Maditude]

Here's a decent article article about how, even when someone DOES successfully sue a spammer, trying to collect is pretty hopeless. (Not too surprising that spammers aren't exactly rolling in cash)...

my understanding from the FTC press release

[Twister002]

You can read it here.

My understanding is that they are going after the chain mail and pyramid schemes, not trying to shut down all the porn email (oooooh, hot girls waiting just for ME!!! WOW!!!) So it won't do anything about the deluge of unwanted email pouring into your inbox, just keep people that are dumb enough to answer the ads from hurting themselves. Like putting nerf corners on the world of email for them

I would rather see some kind of legislation that holds spammers accountable if their "remove' methods do not work. I think a "do not call" type of list would be better than nothing. Filters don't always work, no matter how well you configure them. Maybe a new version of the SMTP protocol that would require a secure connection or authentication by you to be able to send you an email

--insert comment to the effect of "what has slashdot come to posting this type of story
--insert comment to the effect of "if you weren't such a loser you wouldn't get spam"
--insert comment to the effect of "jane you ignorant slut that's not what it says at all"
--insert comment to the effect of "this is all the fault of M$ and their monopolistic practices"

Re:my understanding from the FTC press release

[fmaxwell]

The biggest problem with anything short of a widely-accepted international treaty is that a lot of spam gets bounced off of international relays.

The laws should hold responsible the people who send the spam. If Billy Bob causes 500,000 pieces of spam to be sent, then Billy Bob should go to jail. I don't care if he sent the spam himself through AOL or paid some company to send it through mail servers in China.

The important thing to remember about spam is that there is always a path to the spammer. He may have a P.O. box or a web site or a phone number in the spam, but there's always something that law enforcement could use to find his identity.

Here you go:

[mrroot]

Defendants in the FTC cases are: Paul K. Boivin, also known as Paul Bowen, Paul Boevien, Paul Bowvien, and Paul Brown; doing business as (DBA) Destiny 1999, Destiny 2000, and Destiny 2001. The defendant is based in Clearwater, Florida and the case was filed in the U.S. District Court for the Middle District of Florida, Tampa Division. Chad Estenson and Megan Estenson, DBA CMJ Enterprises and Rockin' E Marketing. The defendants are based in Warwick, North Dakota, and the case was filed in U.S. District Court for the District of North Dakota. Fernando Pacheco, also known as Frank Pacheco, DBA E-Solutions and E-Solutions 101. The defendant is based in North Providence, Rhode Island and the case was filed in U.S. District Court for the District of Rhode Island. Arnold W. Larsen, also known as Arnold Larson. The defendant is based in Sarasota, Florida, and the case was filed in U.S. District Court for the Middle District of Florida, Tampa Division. John Lutheran. The defendant is based in San Diego, California. The case was filed in U.S. District Court for the Southern District of California. Dario Va. The defendant is based in Weston, Florida. The case was filed in U.S. District Court for the Southern District of Florida.

amazing

[negativethirsty]

Ok follow along, I'll go slowing for the gov't FTC workers... FTC: "you spammes are thieves and liers! Quit pulling these scams." spammer: "You are right, we are liers." FTC: "So does this mean you'll stop?" spammer: "Sure"

Re:Normally, a cease agreement is sufficient

[mrroot]

I knew somebody could tie Microsoft into this somehow :)

Me too, but . . . Re:Just got this spam today....

[StefanJ]

I assumed that me email address had been used BY the spammer as a fake "From:" address.

That worried me more than actual spam. I'd hate to get falsely accused of sending out "HOT SCHOOLGIRL, GOAT, AND LHAPSO-APSO ACTION!" messages.

Deceptive Advertising...

[Chris Parrinello]

I think the FTC needs to crack down on these so called "Nude Teen Cheerleader" websites. If they're nude, how do you know they're really cheerleaders?

I am demanding that the FTC require (under penalty of large fines) that all nude teen cheerleaders be photographed with their high school ID showing their date of birth and their high school yearbook turned to the page where their cheerleading squad group picture is.

I think if the web site says "cheerleader" and then the model was actually in the pom-pom or flag squad, the fines should be TREBLE.

FTC Sends Out "Fake Spams"

[euphline]

Washington, DC-- In a move likely prompted by the SEC's recent creation of fake investment scam sites, the FTC began a campaign today to send out masses of electronic mail (known as "spam") to millions of unsuspecting internet users. Apparently, the messages, with subjects such as "Get Rich Quick", "Work From Home", and "Hi, Joe" have quickly filled user's mailboxes. When a user clicks on the link, they are taken to a web site that, upon further inspection, attempts to educate the user about the fake get rich schemes.

When a user clicks on the "unsubscribe" option, their email address is logged by the FTC. The FTC sends an autoreply indicating that using the "unsubscribe" option on spams is dangerous.

-jbn

Re:Crackdowns Unsuccessful

[gfxguy]

Crackdowns on spam have been largely unsuccessful, partly because they pit concerns about privacy against free-speech issues.

I agree with the counterargument that, while you have the right to free speech, you don't have the right to force people to listen. In this case, often enough, the spammers coerce through deception into reading their message. Of course, I personally delete anything from anybody I don't know, but even then there have been spoofs from within my company (email seemingly from someone from my company). That guy stole my time, and even the ones I don't read have stolen my time to delete and add them to filters. When we start to realize that time is more valuable then money, that's when these time theives will get the punishment they deserve.

Frankly, telemarketers and spammers should be considered time thieves. I guarentee you that one of these guys, given six months to live, would want to waste their time with spam.

In addition, although many states have adopted anti-spam measures, spammers have argued that there is usually no way for them to know an e-mail recipient lives in a certain state where some types of junk e-mail are illegal.

That's why it should be illegal everywhere.

indecision and inaction

[gioan]

Wonderful. People committing clear financial fraud have to "play nice in the future." Oh great. I feel so much better. It's clear that uce@ftc.gov has less productive output than /dev/null.

This isn't about free speech, or "corporate right to send me ads if I opt-in." Don't worry, those companies make sure they pay someone to remind your senators that their god-given-right to send you ads should be permitted. Too bad the rest of the spam won't really let you work part time from home making $10,000/month while watching a legal cable descrambler, happy with a clear credit record, a really large penis, limitless virility, instant weight loss on demand, and the occasional degree from a prestigious unaccredited school.

There are two reasons spam continues. Welcome to economics:

a) there's still no effective financial deterrent to sending spam, regardless of whether it's ambiguously relevant direct marketing, or utter fraud
b) there is some financial benefit for the senders, regardless of amount

There are plenty of other things you could debate...such as when did spam become accepted? Was it when you -- yes YOU! -- made the unconscious decision that "just deleting" the message is OK. You don't have the time to follow up on the headers. If you're in one of the states that actually ban it, you don't have the time to do something...hell it's not worth the effort. It's just an email, right?
Think of this in another way: If random people each stole one cent out of your bank account every month, would you consider it worthwhile to pursue them? Would you want your bank to develop filters to block all small transactions? Would you think such a loss is unacceptable?

Quite honestly, the actions of civil libertarians and "we'll fix this with technology" advocates has not helped. I filter, you filter, we all delete. Guess what, spammers will continue to find ways around filters, so long as conditions A & B hold true. And every online provider will continue to spend lots of money trying to stop this crap. And every user will continue to hit delete. And people will constantly change email addresses to avoid it, spam filters will continue to mislabel valid email as spam. Stop dealing with the symptoms, deal with the problem!

This isn't a technology issue. You will never get every mail server, client, system, whatever to comply to a block-spam standard. Just look at how long it's taken to get even the basic don't-relay habits in place. This isn't a "but what if I want Amazon to send me my favorite buy-me-now specials." This is an issue that someone in power doesn't give enough of a damn to do something effective to create a financial deterrent that makes it preferrable for these people to steal your money some other way. And yes, unfortunately, we're talking legislation, otherwise you will not send a clear message or provide an effective deterrent. Inconsistency on this means ineffective.

Wow, looking back I'm feeling sorry for the rant. It's simply that this kind of cluelessness annoys me. Time to go delete a couple more messages.

Why?

[Suppafly]

Nineteen states have passed anti-spam laws, but attempts to pass a national law have stumbled over opposition from direct marketers who say their activities would be unfairly limited.

Why do we listen to the complaints of these direct marketers.. No where in the constitution, do it say you have the right to annoy the piss out of random people and force solicitations down their throats. There is no such thing as good direct marketing. We need to end this bs and outlaw spam at the federal level.

I know on /. everytime something about spam comes up, people are quick to say that we shouldn't fight this with laws, we should fight it with technological means, but that obviously isn't working. I don't care how many people post procmail filters or whatever. Even if you filter it, your bandwidth is still wasted.

FTC and the DOJ

[PhotoGuy]

The settlement, unfortunately, isn't exactly stern stuff: the seven spammers "agreed to refrain from participating in deceptive schemes in the future, or lying about the legality or potential earnings from any such schemes."

Well, if a lame-ass non-punishment like that ("hey, you're guilty; just don't do that any more, okay?") is good enough for Microsoft, it's good enough for spammers, I guess.

Sigh.

-me

One more thing to do

[Dr.Dubious DDQ]

In many cases, the spam includes an URL where their Enlarge-Your-Penis-Breasts-And-Hairline scams are hosted, and generally it isn't hosted on the same ISP as the spam came from...

In these cases, I like to traceroute to the server hosting the URL and cc the ISP that the spammer is hosting their scam on. Most ISP's have clauses in their acceptable use policy forbidding ANY spamming, even from other ISP's.

The spammer may not care that his throwaway dial-up account gets canceled 5-times-per-week, but if their scam site goes down, there goes the whole purpose for sending the spam in the first place...

Increase Your Karma From Home!!!

[switcha]

Mod this post up and then add your name to the thread. Three more people will mod you up and then post so that three more people can mod them up. If you get in on the ground floor of this breakthrough opportunity, you can soon be basking in karma bliss and not ever have to work for mod points again! Don't be a karma whore! Get your points the easy way! Just listen to some of the...

Re:They're getting off too easy...

[Tackhead]

> If there was any justice in the world, they'd be getting ass-raped with splintered broomhandles for the next fifteen years.

They get an email address, which is in the From: header of a posting to USENET in alt.sex.aluminum.baseball.bat of the spammer receiving his daily punishment.

The warden mails each spammer daily. All the spammer has to do to stop the day's splintered-broomhandle-assraping is to reply to the message.

Hey, the spammer can "just hit delete" on all the spam, right? If the spammer misses the warden's email in the piles of spam, that's just too damn bad.

Re:How do we prevent it?

[mpe]

The only solution I can imagine is somehow preventing it at the receiving end, because of the number of mail servers (something like 5%, IIRC) that allow relaying. Till that becomes 0%, there won't be much relief there.

Actually it's considerably more. Since quite a bit of software requires a third party relay just about every ISP on the planet offers one by default. Including ISPs who offer "free trials" and no subscription based services.

Make it unprofitable..

[wowbagger]

Make it unprofitable. That is the only way to stop spamming.

There is no need for a law - ISPs simply need to add a $10000 per incident "clean up fee" to their contract.

Now, I've seen some folks here on /. say they work for ISPs that have done this, and that the spammers just refuse to pay. If the ISP charges the spammer's credit card, they dispute the charge and the credit card dings the ISP.

Here's a possible solution to this. Since the spammer signed the contract agreeing to pay, then refusing to pay, along with the prima facia evidence that the spammer was planning on spamming all along should equal fraud, a criminal charge, right? And since the amount is over $1000, it is FELONY fraud, right? So, if the spammer disputes the charge, file fraud charges against them. Get a lein on their house, and hit them in civil court as well.

Get one precident that a clean-up charge in the contract is permissible, and you can start costing those bastards.

And as for all the spammers in fum buk tu, China - block those netblocks at the routers.

This isn't about spam

[Reziac]

.. it's about enforcing existing laws against scams and con artists.

It is ALREADY illegal to send out chain letters, pyramid schemes (frex most MLM), and suchlike. The METHOD by which such scams are promoted doesn't matter -- whether I stop you on the street and whisper it into your ear, or spam your inbox (snailmail or email), it is still illegal.

The only difference here is that the FTC has finally noticed that spam is now the primary vehicle for promoting these scams, and has decided to pursue it.