Slashdot Mirror


MSNBC: Offices Remain Spam Free Zones

Makarand writes "Thanks to a good job done by the tech staff and filtering software, office workers in the US are not bothered by spam mail and the value of email communications has not eroded. A survey conducted by Pew Internet & American Life Project, whose findings are reported in this article by MSNBC.com, found that spam is certainly a problem for personal email accounts but not for company provided email accounts. This is contrary to the perception that American workers are wasting too much time battling spam." YMMV.

309 comments

  1. I Disagree. by Renraku · · Score: 3, Redundant

    I see the crap our managers have to filter out at work. Its not so much external spam as it is internal spam. Example, 10 people discussing what they'll have for lunch in 10 minutes, over 20 emails. CCed to everyone.

    --
    Job? I don't have time to get a job! Who will sit around and bitch about being broke and unemployed then?
    1. Re:I Disagree. by Anonymous Coward · · Score: 0

      They should be fired.

    2. Re:I Disagree. by BrookHarty · · Score: 2

      I just started to get spam on my work email after 4 years, The only external emails I signed up for are vendors and a couple mailing lists. I suspect "Netop" sold thier email list, that was the last newsletter I opted in. But how do you prove it?

      Too bad I cant use mailwasher on exchange.

    3. Re:I Disagree. by Jucius+Maximus · · Score: 5, Informative
      "The only external emails I signed up for are vendors and a couple mailing lists. I suspect "Netop" sold thier email list, that was the last newsletter I opted in. But how do you prove it?"

      Prove it using sneakemail. It's too late for you to do anything about netop now, but using sneakemail can save you a lot of aggravation since you set up an e-mail address PER mailing list. If you get spam at one of them, you know who sold your address.

      Also, don't use your real e-mail address for anything related to comdex!!!!! You will drown under the spam.

    4. Re:I Disagree. by AntiNorm · · Score: 5, Informative

      I suspect "Netop" sold thier email list, that was the last newsletter I opted in. But how do you prove it?

      Use the method I use: Get your own domain name -- they're cheap and worth it for the control you get -- and set the email so that mail sent to undefined addresses forwards to you. Use an external account to read this email, and do *not* give this address to *anybody*. Then, when you sign up for a list at a place like Netop, give them netop@yourdomain.com as your address. Then, any spam you get as a result of them selling your address will be addressed to netop@ your domain, which is quite easy to detect.

      This method has other advantages; it makes managing the email lists you are subscribed to easier, for instance. As far as places I have detected mining/address selling, Slashdot is mined quite often (as if it shouldn't be obvious). But the main advantages of this method are that it's easy to set up, requires no effort at all after you get it set up, and if an address at your domain starts getting spam, you can shut it down.

      --

      I pledge allegiance to the flag...
      of the Corporate States of America...
    5. Re:I Disagree. by Pfhreakaz0id · · Score: 2, Interesting

      the best reason to use Outlook/exchange is to send an email to vote where to go to lunch (and view the voting results).

    6. Re:I Disagree. by xanadu-xtroot.com · · Score: 3, Informative

      10 people discussing what they'll have for lunch in 10 minutes

      Wow. That got modded as funny. Funny, yea, I guess, but this happens almost everyday. Not just about lunch. Even true work stuff. What person needs permissions to what project, for instance. It has to go through a couple bosses (Office Space style...) in my company for me to be 'allowed' to re-permission a project (for good reason, sort of, but...), but all I need to know is 3 things:
      1) Who
      2) What project
      3) When
      That's it. But 10 or so people feel I need to see every damn mail talking about one tiny aspect of the companies day-to-day operations. Then there's all the "P.S." and "oh by the way" conversations in the mails. I've got to read every damn one incase there's a "something I was thinking about is..." applies to me or not...

      :-\

      --
      I'm not a prophet or a stone-age man,
      I'm just a mortal with potential of a super man.
    7. Re:I Disagree. by Lumpy · · Score: 2

      or the idiots that are in the IT department that instead of emailing a group of people that might need the information they do a company wide or region wide broadcast...

      If I could count the number of times I get a useless email from the northern-midwest office about some damned share on a server that causes every one of my users in my office to call me and ask if it affect them (it doesn't.. it doesnt affect anyone but a tiny handful of people...)

      the biggest abusers of the cc: or the broadcast groups are the IT people! too lazy to build their own maillists and they dont care if they cause 3 hours of work for every other IT person in the company nation wide.

      --
      Do not look at laser with remaining good eye.
    8. Re:I Disagree. by goon+america · · Score: 4, Informative
      This is like something I do with regular junk mail. Whenever I order or sign up for anything that involves snail mail, I always enter a different middle initial or a slightly different first name in the form. That way, I can track who sells my home address.

      As an added bonus, you get to receive 3-4 additional publisher's clearinghouse sweepstakes entries based on the different names.

    9. Re:I Disagree. by Anonymous Coward · · Score: 0

      WooHoo

      I do this, too. It is so much easier to add a new filter than to remember/figure out how to unsubscribe!

      G.

    10. Re:I Disagree. by gurubert · · Score: 1

      Use a USENET server for that.

      We discarded that famous all@company.com address in favor of several internal newsgroups for all the projects and working groups. People need to get used to the way newsgroups work, but they do.

      --
      "Is it friday yet?"
    11. Re:I Disagree. by Xenna · · Score: 2, Interesting

      Qmail has the handy feature that any user can define his own sub mail adresses.

      So, if my mail address would be xenna@xenna.com, I could give out the address xenna-netop@xenna.com which would land in my mailbox (unless filtered).

      So Qmail saves you from getting your own domain in order to accomplish this...

      Regards,
      Xenna

    12. Re:I Disagree. by Anonymous Coward · · Score: 0

      Dude, reverse spam is mailer abuse.
      Don't waste the resources of a list which you asked to join.

    13. Re:I Disagree. by Anonymous Coward · · Score: 0

      Or what about the people who decide to send a couple emails wit 6 MB of pictures to everyone in the company (about 500 people) and the people at other facilities that decide to do the same. It took some people an hour for an email to reach the outside world because of all the garbage going around.

    14. Re:I Disagree. by orest · · Score: 1

      I use and recommend Spamex (spamex.com). I tried Sneakemail and found the filtering options confusing and limited. Spamex's options are clear (provides whitelisting and blacklisting options) as well as automated expiry of disposable email addresses.

      Cheers,

      - O.

    15. Re:I Disagree. by mkldev · · Score: 1
      I accidentally did this once. That's when I found out that MacAddict sold my name (whether directly or indirectly) to Playboy. No joke. I think I still have the advert around here somewhere with the bogus street number.... The funny thing was, since the address was bogus, campus mail services tried to figure out how to deliver it and ended up delivering it to the mailbox in my department.

      The folks at MacAddict had better be damn glad I have a sense of humor.... I ended up using the playboy mailer to write down a list of IP numbers that I needed for later that afternoon. Best use I've gotten out of porn spam ever.

      --
      120 character sigs suck. Make it 250.
  2. I agree by Drakonian · · Score: 4, Insightful
    I don't have a problem with spam at work.

    I think that home users don't have the resources, know-how, or time to work out an effective anti-spam system.

    I can't even find a good IMAP spam filter!

    --
    Random is the New Order.
    1. Re:I agree by redshift-systems · · Score: 3, Informative

      The real problem with home users is that 0.04% of them (read morons) actually buy the stuff being solicited. Talk about a minority rule. The best anti-spam algorithm is thus: "Don't buy their shit".

    2. Re:I agree by Greedo · · Score: 5, Informative

      I can't even find a good IMAP spam filter!

      If you have access to the IMAP server, like I do, I recommend using Spamprobe. It's a Bayesian filter and, along with a few procmail filters to weed out Asian spam, my inbox remains pretty clean.

      Now, if someone would make a half-decent IMAP *client* ... :)

      --
      Tuus crepidae innexilis sunt.
    3. Re:I agree by houseofmore · · Score: 1

      Now, if someone would make a half-decent IMAP *client* ... :)

      It's called Pine! :P

    4. Re:I agree by llin · · Score: 1

      Try IMAPAssassin, a daemonized IMAP-client version of SpamAssassin. It does every except for the X tags in headers for non-filtered mail (mostly due to the way that the IMAP protocol works).

    5. Re:I agree by addaon · · Score: 2

      Mail.app works for me

      --

      --

      I've had this sig for three days.
    6. Re:I agree by grotgrot · · Score: 1
      I can't even find a good IMAP spam filter!

      I wrote and use IMAP Spam Begone which runs SpamAssassin against all the emails in your Inbox. It doesn't have to run on the same machine as your IMAP server.

      Roger

    7. Re:I agree by wik · · Score: 2

      >Now, if someone would make a half-decent IMAP *client* ... :)

      My "pride and joy" ezimail

      --
      / \
      \ / ASCII ribbon campaign for peace
      x
      / \
    8. Re:I agree by delcielo · · Score: 4, Informative

      Exactly.

      I am the reason people here at the office don't have to deal with spam, and I certainly DO spend quite a bit of time fighting it.

      On an average day, we accept about 15k e-mails and reject about 20k.

      It certainly isn't a matter of the spammers leaving the workplace alone.

      --
      Hot Damn! It's the Soggy Bottom Boys!
  3. YMMV ? by Space+cowboy · · Score: 3, Funny

    MM(F)V

    Simon.

    --
    Physicists get Hadrons!
    1. Re:YMMV ? by norweigiantroll · · Score: 5, Informative

      For those clueless like me, "Your Mileage May Vary"... Acronyms getting out of control...

    2. Re:YMMV ? by Anonymous Coward · · Score: 0

      you mean AGOOC?

    3. Re:YMMV ? by SILIZIUMM · · Score: 2
      For those clueless like me, "Your Mileage May Vary"... Acronyms getting out of control...

      Then, The Jargon Lexicon is for you !

    4. Re:YMMV ? by Metaldsa · · Score: 1

      thanks, luckily it was +3 so I could figure that out.

    5. Re:YMMV ? by Anonymous Coward · · Score: 1, Insightful

      He wasn't actually questioning the acronym, just that his mileage may vay. To which he replies: "My Mileage (Fucking) Varies!"

  4. big fish by altaic · · Score: 0

    "spam is certainly a problem for personal email accounts but not for company provided email accounts." That's because a single person won't sue a spammer. You piss off a company which has much more money than a little guy, though, and you're going to have trouble. Spammers are perhaps evil, but usually not stupid.

    1. Re:big fish by Anonymous Coward · · Score: 0

      That's interesting... do you think that spammer software has some sort of if address=*@[directory of business e-mail addresses] then remove?

    2. Re:big fish by Anonymous Coward · · Score: 5, Interesting

      Naaaa... you really think spammers are going to look through their thousands or millions of email addresses and remove the ones they think are for corporations? Not gonna happen.

      I get all of my spams on my corporate account. I've had it for 6 years, so there's been time for the spammers to find it. Not to mention the marketing folks sign me up for all sorts of trade shows and I get targeted spams.

      I've pointed our IT folks to SpamAssasin (which, coincidentally, was written by one of the former IT guys at my company!) but they won't use it as is because they're afraid there's a chance we could lose a single valid email. So I just run an individual version from DeerSoft in my Outlook client.

      Interestingly about 90% of my spams are to an email address which has never even been VALID for me at the company, but when we switched to Exchange they entered about 40 different email addresses for me consisting of all sorts of permutations of my name and initials and lots of THOSE get spam. I need to configure my spam blocker to block the one offending recipient... gotta remember next time I'm in the office.

    3. Re:big fish by hhknighter · · Score: 2, Informative

      Some companies do have amazing filters that will filter anything that is close to spam. But imagine this: a helpdesk/tech support email address. I work for a department like that and spam makes up 90% of my total email. Also, some countries might not have laws about spam and even scams!
      Though we might not care about what trouble other countries are in, but consider them as part of the commerce sector, and consider spam servers are mostly located in other countries.

    4. Re:big fish by Speedy8 · · Score: 2

      Most only spam ISP's and public email address providers (hotmail, etc). They filter by domain so everyone with their own domain and companies with their own domain have far fewer spams.

    5. Re:big fish by alex733 · · Score: 1

      We shouldn't really have laws against scams, cuz I think people must pay a price for their stupidity.

    6. Re:big fish by mkldev · · Score: 1
      Funny, I got a -lot- of spam -- hundreds of messages a week -- and I don't have a single ISP address in there anywhere (that I use). All are private domains except a couple of .edu accounts (that get virtually no spam).

      Then I installed TMDA. I don't get spam anymore. :-)

      --
      120 character sigs suck. Make it 250.
  5. Oh great by dagg · · Score: 5, Funny
    The spammers are going to treat this as a challenge. "What? My spam isn't getting to the MSNBC employees? I gotta do better!"

    --Signature Spam

    --
    Sex - Find It
    1. Re:Oh great by Anonymous Coward · · Score: 0
      "What? My spam isn't getting to the MSNBC employees? I gotta do better!"
      More spam to them means less spam to us. :-)
    2. Re:Oh great by Anonymous Coward · · Score: 0

      No no no, you don't need to worry, there's plenty of spam to go around. Enough for everybody.

    3. Re:Oh great by Anonymous Coward · · Score: 0

      You seem to be confused. The article isn't about spam at the MSNBC offices.

      It's about spam at offices in general, and the article happens to be written up at MSNBC.

      Ehum.

    4. Re:Oh great by Anonymous Coward · · Score: 0

      Hey, why don't you put your signature in the signature location, so I don't have to see it? Have some respect for your fellow slashdot users.

  6. Or just lack of exposure? by Otter · · Score: 4, Interesting
    Thanks to a good job done by the tech staff and filtering software...

    In part, certainly, but I wonder how much of the difference is due to the fact that spammers have a harder time getting work addresses. They're a lot less likely to be on public web pages, they're not used in chat rooms and they're much harder to generate by brute force.

    1. Re:Or just lack of exposure? by McDutchie · · Score: 4, Insightful
      [...] spammers have a harder time getting work addresses. They're a lot less likely to be on public web pages, they're not used in chat rooms and they're much harder to generate by brute force.
      Huh? Most company e-mail addresses I have seen are trivially guessable. They username is almost always some combination of first name or initial and last name, with or without dots thrown in for good measure. If the spammers have not figured that out yet, that just proves Rule #3, but then again, it's probably just a matter of time.
    2. Re:Or just lack of exposure? by hector13 · · Score: 2, Informative
      and they're much harder to generate by brute force

      I agree with everything else but this.
      Most companies I know of use a very simply firstname.lastname@company.com pattern for email addresses. Combine this with relatively easy to get listing of employees, and you have a spammers delight.

    3. Re:Or just lack of exposure? by BrookHarty · · Score: 2

      I think this is a GREAT IDEA.

      Lets all post work address books on the *.test newsgroups. Make sure you get those CEO's and VP's too, I bet some nice SPAM laws are passed. :)

      Too bad we cant bounce all those SPAM emails to the *.gov email addresses too.

    4. Re:Or just lack of exposure? by Ace905 · · Score: 4, Interesting

      I'm a bit of a self-proclaimed expert in this area ; my software company developed 'Spam Interceptor' and in the initial stages of development almost all of our time was spent doing research on how email addresses are collected. We looked at MonsterHut's collection practices (Having known the former CEO) and moved on from their.

      For the most part, I believe Business addresses are easier and more 'enticing' to collect. Every individual has different browsing habits, but for the most part - businesses in particular sectors tend to list themselves in very specific databases, are more likely to have the receptionist or researcher that signs up for mailing lists, and business domains are easier to identify. Some spiders look specifically for "INC." in the whois database - just as google does.

      With the companies I am personally involved with, we do not receive Nigerian Scam Emails until we are listed in a business directory - but how can you avoid the publicity business directories offer? It's not easy. Online businesses start receiving resumes around the same time. We received resumes before our home page was complete - people didn't even know what we did as a company, and that's the only way we knew they hadn't, "Been following the progress of our company for some time and [felt] very enthusiastic about working for us". I mean, these are just job-seekers with an automated resume distribution. Imagine if they made money simply by finding us.

      I don't want to get into too many details on business address collection techniques - let the spammers brainstorm them all over again. But I am certain the very fact that a business is a business - makes them more enticing to a wider range of higher-priced products and services. The collection of addresses, no matter the problems will be overcome, and in my experience have been overcome.

      --

      Ace
    5. Re:Or just lack of exposure? by Oliver+Defacszio · · Score: 1

      Now that would have been better. Every company I've ever worked for used Simpsons characters. It sucked being "squeaky_voiced_teen@everywhereiworked.com".

      --

      -
      Inventor of the term 'pardon my French'.
    6. Re:Or just lack of exposure? by Otter · · Score: 2, Interesting
      Huh? Most company e-mail addresses I have seen are trivially guessable. They username is almost always some combination of first name or initial and last name, with or without dots thrown in for good measure.

      Not being a spammer, my reasoning may be wildly off on this, but -- they're trivially guessable in the sense that given an employee name and an employer you can generate the likely email address. If you're a spammer, though, trying to generate a million addresses with a high likelihood of validity, it's a lot easier to iterate from a@aol.com to 9999999@aol.com than it is to permute lists of first names, last names and corporate domains. What's the probability that there's really a franklin.deveraux@tgifridays.com?

      That's my reasoning, anyhow...

    7. Re:Or just lack of exposure? by Anonymous Coward · · Score: 0

      Exactly. I was recently charged with finding an anti-spam solution for a ~70 person site. After trying a few products, I realized there were less than 10 accounts out of the 70 actually getting spam.

    8. Re:Or just lack of exposure? by Anonymous Coward · · Score: 0

      I'm a bit of a self-proclaimed expert in this area

      You also seem to have a nine inch cock in your rectum.

    9. Re:Or just lack of exposure? by Anonymous Coward · · Score: 0

      i don't get it

    10. Re:Or just lack of exposure? by axxackall · · Score: 2

      I have a similar idea: lets create as many free (Yahoo, Hotmail, Netscape.net) account as we can. And lets publish their addresses on forums, chat roms and other public places. In two weeks all of them will be full of spam. If we do it intensively - in 1 month Yahoo, Hotmail and Netscape.net will be overloaded and stop their work. Their sysadmins will have to do something better about filtering otherwise free email account business (is it a business anyway) will be gone.

      --

      Less is more !
    11. Re:Or just lack of exposure? by AugstWest · · Score: 5, Funny

      Yeah, the ultimate test of this was when I couldn't get Dellhost support to respond to some major problems we were having for about a week.

      Finally I just cc'ed mdell@dell.com, and had a phone call within the hour.

    12. Re:Or just lack of exposure? by gmack · · Score: 2

      won't work .. hotmail for instance just dumps new messages as soon as the box is full.

    13. Re:Or just lack of exposure? by Anonymous Coward · · Score: 0

      You need to bend over and lube up first.

    14. Re:Or just lack of exposure? by yokem_55 · · Score: 1

      Poor Frank.....

      --
      ...and IN SOVIET RUSSIA, beowulf clusters imagine 1, 2, 3 profit!!!! jokes made out of YOU!!!
    15. Re:Or just lack of exposure? by Bicoid · · Score: 1

      That might partially be the case. I have a few old hotmail, aol, etc email accounts that I use on newsgroups, net communities, etc. They get completely flooded by spam. On the other hand, my school email, which I don't give out or put online, is completely spam-free. Given, my school does use anti-spam filters, but according to the other email hosting services I use, so do they.

      Plus, email services like hotmail are a lot more lucrative to target. I mean...honestly, who is more likely to give traffic to "ALERT! FIND OUT IF DANGEROUS VIRUSES ARE ON YOUR COMPUTER!!!!1"...someone with the email "john.rodriguez@MIT.edu" or "texasmommy2847503@aol.com"

      You guessed it.

      --
      If not all sentients are human, couldn't it be possible that not all humans are sentient either?
    16. Re:Or just lack of exposure? by petecarlson · · Score: 0, Redundant

      we do not receive Nigerian Scam Emails until we are...

      You mean that's a scam?
      doh.

    17. Re:Or just lack of exposure? by poot_rootbeer · · Score: 2


      For spammers to guess at usernames within a company email system, they would first have to know the names of people who work at the company.

      That's too much work. If an email address can't be found using `grep '.+@.+\.[a-z]+'` then it's not worth looking for.

    18. Re:Or just lack of exposure? by mkldev · · Score: 1
      If you've ever run your own mail server and looked at the logs, you'll find that they, in fact, -do- try to guess usernames. You'd be amazed at how many people try to send email to steve@mklinux.org. There has never been such a user. They guess common names and try them. They don't try very many -- maybe a couple dozen bogus recipients for every known good one -- but they do deliberately guess email addresses, and if those addresses don't get rejected, they get added to a database and get spammed. Always pick a username that isn't trivially guessable. Never use just a first or last name. :-)

      --
      120 character sigs suck. Make it 250.
  7. Almost all office email... by Anonymous Coward · · Score: 0

    ... I receive is spam. However, gnus categorizes the email conveniently in two categories based on the "From" domain: company email and "other".

    I never even take a glance at the subject lines of "other" email.

    So no, spam is not a problem for me in the office.

  8. In KGB's Soviet Russia... by Anonymous Coward · · Score: 0

    ...free Spam is eagerly eaten by YOU! What a coun-try!

  9. Spam not a problem... by Toasty16 · · Score: 5, Funny

    ...because tech workers are embracing it! I mean, why fight spam when it offers to enlarge your penis by 237% in 48 hours? This is truly a golden age of technology! Hallelujah!

    1. Re:Spam not a problem... by Anonymous Coward · · Score: 0
      My God, if that isn't a problem I don't know what is. Supposing I'm an ordinary man whose penis weighs 1/2 pound while flaccid, after merely six days I would have a 19 POUND penis! Given another week, I would be bedridden by my colossal 727 POUND PENIS!!! Death would surely follow.


      But I wonder, where would all that mass come from? I can easily imagine that this HORRIBLE product could cause virtually all of Earth's resources to be concentrated very rapidly in the massive penises of several dead men!


      Why fight SPAM? My God man, the fate of our planet DEMANDS we do no less!

    2. Re:Spam not a problem... by Anonymous Coward · · Score: 0

      They always say add 3 inches. So by a little math, Dude! It sounds like you need to call.

      X + 3 = X * ( 1 + 2.37 )
      =>
      X = 1.26"

    3. Re:Spam not a problem... by Rie+Beam · · Score: 1

      ...because tech workers are embracing it! I mean, why fight spam when it offers to enlarge your penis by 237% in 48 hours? This is truly a golden age of technology! Hallelujah! What scares me is that since these emails are still going out, that means they are making business from it. Some people are actually stupid enough to believe the junk mail they get. Sad.

  10. Spamassassin at work? by jridley · · Score: 4, Interesting

    I wonder how much the lack of spam hitting business email accounts is because companies install spam filters? Our company throws all inbound email through spamassassin, and it works great.

  11. I know the reason... by Whatsthiswhatsthis · · Score: 3

    Maybe company employees are wary of entering their email addresses into such forms as, "Money waiting for you! Enter email address:" and, "Find out who has a crush on you! Enter email address:".

    Of course, we all know what this report means: spammers still have left some rocks unturned, and thus there is room to grow even if internet usage stagnates.

    Rejoice!

  12. We have no real problem either... by Magus311X · · Score: 4, Interesting

    Good filtering software, along with good filters, really makes the difference.

    At work I use a product which allows me to filter on multiple levels:

    1. Allow. If it's on the domain list, IP list, or if the message contains any of the keywords in the list, it's allowed through.

    2. IP blacklisting. IP address matches? Delete it.

    3. Domain name blacklisting. Domain name matches? Delete it.

    4. Content filtering. Meets any of the content filters? Quarantine it.

    5. Attachment blocking. .cmd? .bat? .vbs? The other 18 I specified? Matched something in the antivirus pattern file? Delete the attachment, regardless of the source.

    Virus infections in the past year? 0 workstations, 0 servers. Number of spams/day before companywide? Averaged about 800 for 25 users. Now? About 20 for 25 users.

    Cost of the product? $1500 for the server license for both products. I'm happy.

    -----

    1. Re:We have no real problem either... by Bob+The+Cowboy · · Score: 1

      Sounds like a rather expensive shell script to me....

    2. Re:We have no real problem either... by Jucius+Maximus · · Score: 5, Interesting
      "Virus infections in the past year? 0 workstations, 0 servers. Number of spams/day before companywide? Averaged about 800 for 25 users. Now? About 20 for 25 users."

      One more element that is necessary for big companies (not necessarily your 25 user network) is to block off hotmail, yahoo mail, etc. The company I used to work at had more than one thousand people on the corporate network and most of them weren't very smart about how to be safe when using computers. (And because of corporate policy we were forced to use Outlook + MSIE, which is not exactly safe either.)

      When your network gets sufficiently big, you WILL have lamers that will infect the whole place from infections they got through hotmail. It doesn't matter how good your filtering is in that case.

      When the corporate IT people finally closed off the popular webmail providers, we went from one unleashed virus every 2 weeks to one every 4 months.

    3. Re:We have no real problem either... by Kragg · · Score: 1

      Virus infections in the past year? 0 workstations, 0 servers. Number of spams/day before companywide? Averaged about 800 for 25 users. Now? About 20 for 25 users.

      Number of intentional work emails that I used to get? 20 a day. Number I get now? 3. I put this down to everyone else being bogged down by spam. Thank heavens for my ACME(r) MailTrampler(tm)!

      --
      If you can't see this, click here to enable sigs.
    4. Re:We have no real problem either... by Anonymous Coward · · Score: 0

      and that product would be ...... ?

    5. Re:We have no real problem either... by Magus311X · · Score: 3, Informative

      It's an NT shop (was when I got there). Right now we use Trend Micro's OfficeScan for the anti-virus, and their ScanMail (with the eManager module) for the mail filtering.

      The only reason we decided to purchase it is because doing something like this ourselves for Exchange was a royal pain in the arse to write. If we ran qmail or something, I'm sure I would've written a collection of scripts to do it.
      -----

    6. Re:We have no real problem either... by isorox · · Score: 2

      Doesnt much more then a few exim rules, but I dont know much about mail.

      Doesnt matter how many spams you get, what about the legitimate emails that you dont get? Whats the signal to noise ratio of deleted emails?

    7. Re:We have no real problem either... by Anonymous Coward · · Score: 0

      If you ran qmail, you'd use QMVC.

      http://www.fehcom.de/qmvc/qmvc.html

      I do, with Sophos AV, under linux. It rules. 50 users, couple hundred emails a day, average infected email rate is about 10%. Haven't been hit yet.

    8. Re:We have no real problem either... by brc007 · · Score: 0

      Ok so now we know how great your filtering software is. How about telling us what it is?

    9. Re:We have no real problem either... by Anonymous Coward · · Score: 0

      Infections they got through Hotmail/Yahoo? Viruses won't spread automatically through Hotmail/Yahoo since they're web based.

    10. Re:We have no real problem either... by ruvreve · · Score: 2

      This is what client-side anti-virus software is for. Mcafee among others can easily be setup to update DAT files at 4am and you have the server update at 3am. So as long as your users stay one day behind the newest virus release, you will have close to four zero's of infection. 0.000?%

    11. Re:We have no real problem either... by Phibian · · Score: 1

      It's unlikely that the number of spam being received actually dropped. You are still receiving the same volume of spam (and likely more based on trends), just not forwarding them on to your users (and ultimately still using bandwidth and resources in order to receive and remove junk).

      That said, $1500 bucks for such primitive filtering sounds a bit steep to me. It's been said that spam filtering is the next anti-virus industry and I'm starting to understand why...

      In general, content filtering is problematic because of false positives (which is unacceptable in a business context). So content filtering should be used very sparingly. Same with domain name / IP blacklisting.

      I personally like white-lists, however, they do have their downsides. One spammer trick being used a great deal nowadays is to spoof addresses so that they appear to be generated internally and thus getting around most filters. Also, as white-lists become more popular, spammers are going to look for ways to abuse these. I would think a white list based on keywords is just begging to be abused.

      Another thing spammers are starting to do is encrypt their messages, since many systems decrypt after the spam filter is run.

      This brings me to a big area that your expensive spam filter appears to lack (based on your description) - bogus header filtering and email address filtering. Since a significant portion of spam these days can be trapped by eliminating strange email addresses (eg 6 consonents in a row, telltale tracking numbers...) and checking that the headers are valid - I would think that this omission is very significant.

      Omissions and false positives aside, I would question why anyone would spend $1500 on spam filtering when there are pretty good (free) alternatives out there...

  13. Too bad for my users! by bwalling · · Score: 5, Interesting

    I don't do anything to filter out spam. There isn't much spam, though. The only people that actually get spam are those in the IT department who post to newsgroups. I am quite certain that newsgroups are the source of the spam that I get at work. It started within 48 hours of the first time I made the mistake and used my real email address. The problem is that Google archives all of the newsgroup postings, so my email address is forever sitting in an easily harvested place.

    1. Re:Too bad for my users! by Anonymous Coward · · Score: 1, Informative

      You can get them deleted from Google, just like you could with Dejanews. I don't know how, since I just 'X-No-Archive: yes' my posts, but there is a way.

      (I wonder how many individuals run scripts which permanently archive solely the posts that ask not to be.)

    2. Re:Too bad for my users! by Anonymous Coward · · Score: 2, Informative

      You can remove the posts from googles archives, I dont have the link handy but peak around google.com and you'll find it in "privacy & security" or something like that...

    3. Re:Too bad for my users! by Anonymous Coward · · Score: 0

      Quite correct.

      Sneakemail.com has helped me, though. :-)

    4. Re:Too bad for my users! by Anonymous Coward · · Score: 0

      since I just 'X-No-Archive: yes' my posts, but there is a way.

      Might be smarter to also add "X-Archive: expiry=0" to the header.

      At least one of the archivers of news honours that one, but not the "X-no-Archvie" header.

    5. Re:Too bad for my users! by ShaunC · · Score: 5, Informative

      The link to remove posts from Google's usenet archive is here. There are a couple of stipulations in order for automatic removal to be possible. One, the "From" address on the usenet post must point to the real, unmunged email address under your control. Two, you must register and confirm a groups.google utility account from that same address (you can do so at the above link). The parent's parent's poster should be able to meet both of these qualifications.

      If you find that you have a large number of posts that you need removed, I wrote a PHP script called NukePost which will remove huge batches from the Google archive at once. The script simulates a browser session and makes all the required, repetative form posts at Google's controller site for you. All you need are the Message-IDs of the offending posts. I may write a groups.google spider to retrieve those in the future.

      In situations where it's obvious that you made the post but you can't qualify for automatic removal, an email to groups-support {at} google should get you taken care of. You need to include a few things in your message, details are here.

      I've heard rumors that Google maintains a separate usenet archive for paying customers (i.e. governments, corporations) to browse, which does not honor the removal requests or the X-No-Archive header - though I have absolutely nothing to back that up with - so it's possible that nuking posts is a futile effort. It should keep the cheap spammers away, at least.

      Shaun
      PHPLabs Supersite

      --
      Thanks to the War on Drugs, it's easier to buy meth than it is to buy cold medicine!
    6. Re:Too bad for my users! by CaptainCap · · Score: 1

      You are still out of luck if someone included your
      address in the quoted text of their archived message.

  14. Yea, yea... by Anonymous Coward · · Score: 0

    I use Spam Assassin at home, with an additional few procmail entries. One in particular to catch anything in Asian character sets.

    At work, they've tried every "ready for exchange" solution there is. None compare to SA... and the biggest problem: They only work on English spam keywords. Everything from fucking "starhana" and Korea still gets through.

    1. Re:Yea, yea... by dylanm · · Score: 5, Informative

      SpamAssassin is ready for exchange.

      Deersoft.com

  15. Is it really the filters? by kzinti · · Score: 5, Insightful

    I get very little spam through my office e-mail. I don't know whether our admins use spam filters, but I have always attributed the low spam rate to the way I use the e-mail address. I use it mostly for internal e-mail, and I seldom give it to anybody outside the company. It doesn't show up in postings to Usenet (in a Reply-to field, for example), I don't use it to register at sites like nytimes.com, and I don't give it to people I don't know. That's not because I intentionally keep it a big secret, it's just a side effect of the way I work - I don't have much reason to give out my e-mail address. I believe that my lack of spam at the office can be credited to limited exposure.

    Contrariwise, I wouldn't be surprised if there are people who get tons of e-mail at the office.

    --Jim

    1. Re:Is it really the filters? by God!+Awful+2 · · Score: 1

      I used my work e-mail to sign up for various sites, post on mailing lists, etc, and I got *TONS* of spam (~100 messages/day). This, despite the fact that I worked for a large company that claimed to have spam filters in place (they didn't even block Nigerian scams for god's sake). One pleasant side effect of losing my job was that all the spam went away. Yay!

      -a

    2. Re:Is it really the filters? by gibbo2 · · Score: 2, Interesting

      I think you're right, because I also get very little spam through my work account (I could count the number of spam for this whole year on one hand). But its not because it gets filtered, we only recently implemented spam filtering on the mail server.

      Anyway, I was shocked when I found out how much spam my co-workers get... I guess they are a lot less careful where they make their address public. However, one time we were setting up new employee's machine and before he'd even enabled and checked his mail for the first time, he had several dozen spam emails in his account! And he didn't have an easy-to-guess name. I have no idea how they got that address...

    3. Re:Is it really the filters? by Ryan+Amos · · Score: 2

      Ditto here. I keep two e-mail accounts. One for stuff I think I'm gonna get spam off of (online shopping, subscriptions, whatever) and then another for personal e-mail. The personal e-mail account is only given out to friends and family. Though I've found Apple's spam filter in Mail to be very effective at blocking spam (and not blocking real mail) once it's trained. Finally, a spam filter that the spammers can't avoid (because it's a learning filter :)

    4. Re:Is it really the filters? by Corrado · · Score: 1

      The problem here is that if a co-worker gets a email virus, then your carefully protected email address can still get into the wrong hands. My guess is that's what happened to your new employee.

      I think filtering is necessary even if you *never* give out your address. :(

      --
      KangarooBox - We make IT simple!
    5. Re:Is it really the filters? by Anonymous Coward · · Score: 0

      yeah, you really need 2 accounts - a public one, which *will* get spammed, and a private one, which only accepts emails from people on a list (added to your filters).

  16. No problem at work for me. by DivideX0 · · Score: 2

    Although I have heard of other people having problems at work with spam, I've been lucky so far. All of our email addresses are easily guessable (prone to dictionary attack) along with alternate addresses being 6 character usernames (prone to brute force attack.

    Hotmail accounts on the other hand, my username is not easily guessable, but I received 47 spams and 1 legitmate message in the past 24 hours in my inbox while 9 spams were redirected to the junk mail folder along with 2 legitimate messages.

    I wonder if the filters that are used by corporate America could be used by Hotmail, actually I wonder why they are not.

    --
    My next Slashdot post will be ready soon, but subscribers can beat the rush and see it early!
    1. Re:No problem at work for me. by TheRealFixer · · Score: 3, Interesting

      Hotmail is notoriously bad about spam. Their filters are easily the worst, and the "Junk Mail" folder only seems to catch a small fraction of the incoming spam, while filing away a good portion of vaild incoming messages. They also seem to have no protection against email bombing. I had a lame spammer mail bomb me overnight with a few hundred duplicates advertising NEW LOW MORGTAGE RATES, and Hotmail kindly managed to place the messages in the Junk Mail folder... and then disabled my account for going over the mailbox limit. And this happened three seperate times, over the course of a couple weeks, once when I was on vacation, and I missed who knows how many valid emails when I returned.

      I ditched Hotmail shortly after that.

      I wonder if the filters that are used by corporate America could be used by Hotmail, actually I wonder why they are not.

      Because Microsoft caters to internet advertising companies. Internet Explorer alone can tell you that. I wouldn't be surprised if MS left Hotmail open to spam on purpose, while pocketing a few extra bucks from spam kings.

    2. Re:No problem at work for me. by Anonymous Coward · · Score: 0

      I just had a great idea! Block your legitimate e-mail! Then all your junk mail will end up in your inbox (like it always does) and Hotmail will be happy to dump all of your legit mail into your junk mail folder. I am a genious! Just make sure you check your new "inbox" often, otherwise your mail gets deleted after 14 days. Why didn't I think of this earlier? I'm off to change my settings!

      The really sad thing is this might actually work. I know I get more junk in my inbox than I do in my Junk Mail box. Wow. Good going Microsoft! The best mail filter in the world filters out the legit mail. ROTFLMAO.

    3. Re:No problem at work for me. by rainwalker · · Score: 2

      I would suspect this is because Hotmail is the devil. I've had my Hotmail account for years, and used it pretty much as a disposable account, and used my domain-based email address for everything else. I use Sneakemail to keep spam out of my domain email, and I had never recieved a single piece of spam at that address, EVER (4+ years). Then, one fateful day, I decided the best way to get some archived Hotmail messages to my domain email client was to forward them (don't ask why, I was tired), and forgot to use a Sneakemail address, and within 20 minutes I started getting spam at my domain email. Hotmail feels perfectly free to log and sell outgoing email addresses. Some good Evolution filters get rid of most of it, but I loathe Hotmail forever.

  17. Ok... by craenor · · Score: 5, Insightful

    Now let's see a study to show how much effort IT departments are putting in around the country (or world) to eliminate SPAM in the office place.

    I work for a major computer manufacturer (I'll give you a hint, we are again number one in personal PC sales), and I never see spam at work.

    But how much money does my company pay a year for me to not see spam?

    1. Re:Ok... by swv3752 · · Score: 3, Informative

      Very good point. Several of my associates at my local LUG are admins. They go through a lot of effort to filter spam. I'd say it is still taking up the same amount of bandwith, just the end user is not seeing it.

      --
      Just a Tuna in the Sea of Life
    2. Re:Ok... by MacAndrew · · Score: 2

      I'll give you a hint, we are again number one in personal PC sales

      Casio?

      How much does your company pay? Why didn't this survey ask? You could poll 99 office workers and one IT peon to produce the impression that only 1% of workers have any signicant problem with spam. :)

    3. Re:Ok... by craenor · · Score: 2

      Maybe I was too cryptic...I work for Dell. I never see Spam mail at work.

    4. Re:Ok... by MacAndrew · · Score: 2

      Maybe I was too cryptic, I knew what you meant. ;-)

      I keep thinking if I say certain ridiculous things, no one could possibly think I'm that stupid. However, given some people here, perhaps they could.

      Do ask the guardians of your gate to the internet whether they are filtering. Companies vary a lot on this.

  18. Spam proportional to public postings... by sterno · · Score: 2

    The amount of spam you receive is directly proportional to the frequency with which your e-mail address is publicly posted. Most offices don't publicly post the e-mail address of their employees, therefore, they don't get much spam. On the other hand, private individuals throw their e-mail address all over the place. Be it registering for some on-line service, or posting on a blog.

    --
    This sig has been temporarily disconnected or is no longer in service
    1. Re:Spam proportional to public postings... by TTMuskrat · · Score: 1

      Most people don't give out their work emails anywhere near as much as they give out their private ones. Most of this is due to the fact that your company can, and will, read your email.

      Of course, where I work, we didn't have a problem with email spam - we had Fax Spam. It was like our phones would play tag as the Fax Spammer computers would dial each of our numbers in turn.

      --
      Support bacteria! It's the only culture most people seem to get.
  19. Spam is still a problem at work... by Whatsthiswhatsthis · · Score: 5, Insightful

    just not for work email addresses. C'mon, who hasn't checked their private email account from work?

  20. Because of the domains. by Speedy8 · · Score: 2

    Most spammers go after domains that ISP's use. This way they get fewer pissed off people that have their own domains and no how to complain about the spam they get and won't buy anyhting anyways. Since most business email accounts are at the companies domain, they don't get as much spam. Plus people don't use there company email addresses ont he web as much.

  21. What a relief by Anonymous Coward · · Score: 0

    *phew* I cannot begin to tell you how much of a relief it is that corporate lusers don't feel that spam is much of a problem. I'm guessing they don't see the bandwidth utilization logs and the filter logs. I'm betting this is the same group of lusers who keep emailing me klez.h.

  22. At work, I get a different kind of SPAM by pheph · · Score: 5, Funny

    Its called 'being on a distribution list'. I get so much e-mail I don't care about, I had to create a rule so that any mail sent only to me is placed directly in my inbox, otherwise it gets moved to another directory...

    DILBERT:
    Panel 1:
    To: All Users
    From: Network Admin
    Please refrain from frivolous E-mail. It bogs down
    the network.

    Panel 2:
    To: Network Admin
    From: Dilbert
    cc: All Users
    I agree.

    Panel 3:
    Dilbert says, "Have you noticed there's too much
    communication in the world, Dogbert?"
    Dogbert says, "Yeah, every day at about this time."

    1. Re:At work, I get a different kind of SPAM by WolfWithoutAClause · · Score: 2
      This almost happened at the company I just left. Somebody sent an email warning of an urban legend. Half the company seemed to send an email (Cc'd to the rest of the company, natch) that said (or a near variety):

      "Please take me off your distribution list. Thanks!"

      (Rather a LOT of replies in fact....)

      Personally, I think that anyone dumb enough to reply to all the people on a distribution list of the people in a large corporation deserved to be taken off the list of the employees the hard way; and in fact our CEO decided to go for multiple rounds of redundancies.

      --

      -WolfWithoutAClause

      "Gravity is only a theory, not a fact!"
    2. Re:At work, I get a different kind of SPAM by zenyu · · Score: 2
      "Please take me off your distribution list. Thanks!" (Rather a LOT of replies in fact....)

      Recently someone sent an e-mail about some wine tasting to all 200,000 living alumni at the university I went to (or at least those that have an e-mail on file.) The barrage of "please take me off the list" and the "please don't e-mail everyone on the list to take you off the list" felt very much like a denial of service attack. I don't know who at the alumni office authorized the list in the first place, their phones were also too busy for me to get through...the mailing list lasted but a few hours after it was first used. They have a current e-mail address of mine solely for forwarding e-mail from other alumni that might want to contact me. I'm now very glad I haven't updated my physical address since I last moved...

  23. Our Company by duplicate-nickname · · Score: 1

    We finally put a spam filter in place last week (good timing, eh?).

    Just over 30% of our incoming email is currently being tagged as spam with well under 0.1% being false positives.

    One interesting thing I did find was that nearly 60% of the spam is directed towards only 10% of our users. These are probably the people who are using their work accounts for non-work related purposes.

    --

    ÕÕ

    1. Re:Our Company by commodoresloat · · Score: 2
      These are probably the people who are using their work accounts for non-work related purposes.

      Or, perhaps, their work-related purposes include having their email address posted publicly to a web page or newsgroup. Or perhaps their email addresses are just easier for the spambots to guess.

  24. that's funny. by fisher182 · · Score: 1

    i got a spam message the other night, and at the end was a paragraph saying that my email (work email) had been obtained off our company website for the purpose of the message (getting me to buy whatever it was). so i'm not sure how valid this whole thing is.

    1. Re:that's funny. by SEWilco · · Score: 1
      ... had been obtained off our company website for the purpose of the message

      Maybe your webmaster could add someplace in the company site something like the Spam-X script. It slowly feeds garbage addresses to a spambot. There are similar scripts. ...and there are relevant webrings, so spambots can wander among sites which might use such scripts.

  25. Work misuse? by MacAndrew · · Score: 2

    I'd cynically figure that employees hustle to delete or underreport spam that might show they're not using their machine solely for business, like they're supposed to most places. Then, of the charitable view, employees DO recognize they shouldn't be using the their work email for private pursuits and so don't share it. The average business doesn't need its employees roaming the internet, anyway, and there aren't many good reasons to be giving out your work email except to people who you do business with -- hopefully not spammers.

    At home, hey, we live closer to the edge. But I object to the stereotype of home users just not knowing how to deal with spam, like it's their fault. Perhasps they should be more careful, but nothing about being carelss makes one "deserve" spam (or fill in crime of your choice). It takes nontrivial sophistication to filter, and anyway stuff gets through. The filters are getting smarter, which is like building stronger locks to keep burglars out, rather than stopping the burglars from trying. Not that spam is anything but wonderful (someone here will say it is); how dare I imply it should be illegal. :)

    Besides, spam can only grow -- it's not going away on its own.

  26. i disagree by frenetic3 · · Score: 5, Funny

    well, the company i work at uses a small web hosting co for mail/www and i swear they sell my address... i almost shat in my seat when one of my [female] coworkers walked by and i was sifting through my mail by pressing the down arrow (50:1 spam ratio) and suddenly an ENORMOUS pair of breasts fills the preview pane of outlook. bit of an awkward silence after that. needless to say, i've been a bit more vigilant about spam filtering since then :)

    --
    "Where are we going, and why am I in this handbasket?"
    1. Re:i disagree by Anonymous Coward · · Score: 0

      That message started out good but then kind of petered out...it's called "artistic license", use it next time.

    2. Re:i disagree by Anonymous Coward · · Score: 0

      what? you like men?

    3. Re:i disagree by Idarubicin · · Score: 4, Funny

      I can't say it often enough. I love PINE. If I started get pornographic ASCII art, I'm pretty sure that most of my female coworkers would be amused, not offended.

      --
      ~Idarubicin
    4. Re:i disagree by bedessen · · Score: 2

      Seriously, you really should watch this short film. I'll leave it at that. Ignore the fact that it's titled "Farm Sluts"; or rather don't ignore it, watch it at home and not at work.

    5. Re:i disagree by SacredNaCl · · Score: 2

      Seriously, you really should watch this short film. [foxsearchlight.com] I'll leave it at that. Ignore the fact that it's titled "Farm Sluts"; or rather don't ignore it, watch it at home and not at work.

      That's a truly hilarious short film. (sigh)

      --
      Freedom is merely privilege extended unless enjoyed by one and all.
  27. My experience by minesweeper · · Score: 4, Interesting
    Well, when I had a corporate email account about a year ago, I don't recall ever receiving one piece of spam. Granted, maybe this was due to some good filtering at the server level, but I think it's more due to the fact that I never used that email address for business outside of the company. I never used it to buy anything online or sign up for any service, or published it on any website. Also, the address was firstname.lastname@[companyname].com. I'm sure that makes it considerably harder for a spammer just to cycle though alphanumeric string hoping to hit a real address.

    Similarly, I currently have an email account with my university, but I use it almost exclusively for academic-related communications, and I've not received one spam email at that address in over a year now. And, I doubt the university has invested much money in spam filters for student email accounts.

    1. Re:My experience by manual_overide · · Score: 1

      i wish my student email account was spam-free. I used to receive very little spam, until the university GAVE away it's email lists. Not sold. Gave. Apparently they were tired of credit card companies asking if so-and-so was a student, and having to say yes or no. (A lot of student groups do fundraising by getting people to fill out credit card apps) So they just gave out the email list and said "if they aren't on here, they aren't a student" These lists were then sold to lord knows how many spammers. Now, my account is full of spam. :(

      What really burns me is that the university didn't make any money in the deal because they gave away the lists. Not a cent. Not like it would have been better if they did, but at least it wouldn't seem so futile.

      --
      If bad puns were like deli meat, this would be the wurst
  28. What about work-originated SPAM? by ademko · · Score: 1

    This is all well and good for external spam, but what can be done for all the spam you get from within the organization? You know the Dilbert/Office Space-esque ones about birthdays, births, engagments, retirements, etc. And it only seems to get worse as the organization gets larger.

    1. Re:What about work-originated SPAM? by Anonymous Coward · · Score: 0

      Exactly. There's this manager on the business side of the house (I'm on the engineering side) whose email I automatically delete since it is always useless.

  29. ironic isn't it by Stanley+Feinbaum · · Score: 0, Troll

    I find it ironic that slashdot links to stories that are hosted on a company owned by microsoft.

    If find it odd that Slashdot posts several anti-MS stories every day and yet then proceeds to post a story linked to MSNBC... Who's side are we on here? Maybe if slashdot was truly anti-microsoft they would refrain from linking to their news network. Then again I see MS ads all over this site, so I guesse it's hard to avoid microsoft if you actually want to make money.

    --

    Stanley Feinbaum, professional journalist and master debater! God bless the USA!

    1. Re:ironic isn't it by Huogo · · Score: 1

      Who says that slashdot is anti ms? Slashdot is whatever the editors want in. Furethermore, I've seen msnbc publish some pro linux articles, they don't seem to have a ms bias.

    2. Re:ironic isn't it by cperciva · · Score: 2

      If find it odd that Slashdot posts several anti-MS stories every day and yet then proceeds to post a story linked to MSNBC... Who's side are we on here? Maybe if slashdot was truly anti-microsoft they would refrain from linking to their news network.

      Stanley Feinbaum, professional journalist. I have no tolerance for bad journalism!

      Isn't there a principle in good journalism which states that you should report a story without regard for your personal biasses?

      I won't try to claim that slashdot is good journalism, but it seems rather peculiar that someone who claims in his .sig to be a professional journalist is bashing slashdot for one of the few things that they do right.

    3. Re:ironic isn't it by Anonymous Coward · · Score: 0

      you need to look up the word irony.

      just because something is contrarian doesn't mean that it is IRONIC.

      now if slashdot's linking to stories that in the end destroyed the thing that it sought to champion...the spread of the OSS movement...now THAT would be ironic.

      go get your edumacation.

      then come back.

  30. ms? by Suppafly · · Score: 2

    Do you ever get the feeling that the news at msnbc is more for making microsoft look good and less for providing unbiased information to the public?

    1. Re:ms? by Anonymous Coward · · Score: 0

      Yes, yes, son, it's all a conspiracy -- even though even the staunchest of your zealoted breatheren have admitted that MSNBC is harder on Microsoft than most other "news" outlets.

    2. Re:ms? by Anonymous Coward · · Score: 0

      Not really. MSNBC is a pretty decent news source. I haven't really detected any pro-Microsoft bias. Microsoft probably figures that'd be too obvious and instead they allow others to act as their mouthpieces. Gartner Group and various other "research" firms have taken turns at this over the past few years. More recently it's been astroturfing of some kind or another. But Microsoft tries very hard not to be seen obviously tooting its own horn, probably figuring that if MSNBC is to make money it will need to be credible.

    3. Re:ms? by LeoHat · · Score: 1

      Gee, Do you think so?

      --
      The mistakes of a clever man are equal to the mistakes of a thousand fools.
  31. It's getting worse.... by NetJunkie · · Score: 2

    Last year I rarely got a spam complaint at the office. This year I get them all the time. It's not "innocent" spam either, now it's animated XXX GIF files. I'll be implementing an anti-spam system very soon.

  32. Don't worry. by EggplantMan · · Score: 5, Funny

    Any time saved in this fashion is wasted when everyone leaves their desk to tell you that you left your cover sheet off this week's TPS report.

    --

    ?-|||-----x<*))))><
    1. Re:Don't worry. by Anonymous Coward · · Score: 0

      lol... I love this: ?-|||-----x<*))))><

    2. Re:Don't worry. by mabhatter654 · · Score: 1

      1. Half of the users will "reply all" back that you are stupid for leaving it off just like here. 2. You will then reply and attach the entire corrected report to everyone. 3. Each of the people will respond again ("reply all") you have now generated 3-4 copies of the report in 20-50 email boxes plus another 100-200 witty retorts. Being as all this is replicated each time, it makes Slashdot look small!

  33. Could have fooled me by smartin · · Score: 2

    My company's spam filtering software seems to not be able to recognize the fact the email with the following words in the subject Enlarger You Penis are spam. It does seem to tag internal mass postings from the HR dept. as spam though.
    My home machine running spam assasin on the other hand never fails to recognize spam.

    --
    The difference between Canada and the USA is that in Canada healthcare is a right and gun ownership is a privilege.
    1. Re:Could have fooled me by Jucius+Maximus · · Score: 2
      "My company's spam filtering software seems to not be able to recognize the fact the email with the following words in the subject Enlarger You Penis are spam. It does seem to tag internal mass postings from the HR dept. as spam though."

      Damn, a 50% kill rate is not good enough to qualify your spam filtering as competent! Blame your IT people!

  34. Which offices are they analyzing? by Anonymous Coward · · Score: 0

    I see people in schools and school districts getting absolutely hammered with spam. The worst part is that a lot of these idiots actually respond to the spams to order stuff!

    The cycle works like this -

    1. Spammer scrapes addresses from district web site
    2. Spammer spews spam at them through usual vectors (open relays, open proxies, you name it)
    3. Idiot users say "hmm, that looks interesting" and respond with ordering details!
    4. Spammer says "hey, this works, let's keep at it"

    All they do is put an educational spin on whatever it is they're hawking and then they turn the spewers on full-blast. The ugly part is that it usually works - they never even stop to think that maybe they shouldn't buy from spammers.

    I know all about dnsbls for stopping spam. Realize that I'm not allowed to use any of them since other districts are run by absolute losers who can't configure a mail server properly to save their lives. They get listed as open proxies/relays/etc, and then they can't mail us. That's when the shit hits the fan and I get told to take down the lists.

  35. Get rid of spam free and easy : use POPFILE by timlewis_atlanta · · Score: 5, Informative

    Everyone needs to check out popfile.sourceforge.net. It's GPL, dead easy to set up and use, and quite frankly, it's brilliant. It uses naive Bayesian filtering, catches about 99% of my spam, and rarely if ever catches a non spam message by mistake. Spammers are going to HATE this tool. Try it. You won't be sorry.

    1. Re:Get rid of spam free and easy : use POPFILE by Anonymous Coward · · Score: 0

      Yeah, and why spam when you can post to /.

    2. Re:Get rid of spam free and easy : use POPFILE by WolfWithoutAClause · · Score: 3, Informative
      It's good, I've been running it for a month or so, it's currently running at more like 93-97% detection of spam.

      Also, I caught it marking two messages from my ISP as spam, but they were both advertisements; so I'm not concerned, in a sense it got it right.

      Incidentally, my ISP has spam filtering as well, since I've switched it on a few weeks ago, it has only caught 2 spam message out of several hundred that were caught by popfile(!)

      --

      -WolfWithoutAClause

      "Gravity is only a theory, not a fact!"
  36. Spam == theft of service by Anonymous Coward · · Score: 0

    What I mean by spam being theft of service is not the standard "they are stealing my bandwidth" complaint. Rather it is the much more insidious usage of electronic equipment for non-company, non-work related activities. That an email account can "magically" appear on a spammer's list is ridiculous. Obviously, it had to come from somewhere, and that "somewhere" is usually from mailing lists, newsgroups, or random surfing.

    How many people have the NY Times bookmarked in their browser? There's a potential email address leak. How about a Passport account? You're giving away the store, friends.

    But wide open email addresses are only the most visible symptom of the problem. The problem is that the computers at work are to be used for the company's work, and usage outside that scope is theft of company services. Sure, it's on par with stealing staplers and note pads, but it is stealing nonetheless.

    Perhaps if you feel that you are not being properly compensated for your time at work, you should take that up with your boss (or *shudder* team up with a union and demand better pay). The way to equalize your worker-company relationship is not to steal time from the company.

  37. In small companies a lot of people get spam. by Anonymous Coward · · Score: 0

    In my company before we instituted Spamd we would all get a lot of spam because of the generic contact aliases we have for jobs, information, and general bitching. A few still get through, but spammers are not stupid perhaps just a little unethical.

  38. Spam filters in offices by kombi · · Score: 1

    Well, I wonder where, who ever came up with that information got it from. Even with extensive use of the access.db and rbl feature in sendmail, spam is coming in everyday because new sender addresses are used everyday.

    There just is no way of filtering by subject or content without the risk of losing real mail. If there is something that does the trick, I'll be happy to know about it.

    Kombi

    1. Re:Spam filters in offices by Anonymous Coward · · Score: 0
      There just is no way of filtering by subject or content without the risk of losing real mail. If there is something that does the trick, I'll be happy to know about it.

      At the risk of being labelled a spammer, I'll mention my product, CanIt. False-positives are never a problem. Ever.

    2. Re:Spam filters in offices by Anonymous Coward · · Score: 0

      You always run the risk of filtering important emails...now way around it. What you need to do is find something that tags enough email while catching minimal good stuff.

      Since we use exchange 2000 (yes I know) we also use an antivirus product called Antigen by Sybari. Very, very good shit. They recently added a content filter feature to it. We had to tweak it a bit and take out a few words like "proof" for proof of concept but it catches about 50 percent of the spam sent to us. We get about 1-5 good emails a week filtered, which is worth it to us.

  39. The spammers really go after me. by Anonymous Coward · · Score: 1, Funny

    I have an @microsoft.com account and a fairly guessable username. I'm constantly getting "thanks for signing up for our mailing list..." messages. I think there is someone out there signing me up for loads of lists just to smite me.

    1. Re:The spammers really go after me. by Anonymous Coward · · Score: 0

      Why don't you show us your email address so we can see how "easy to guess" it is?

    2. Re:The spammers really go after me. by nelsonal · · Score: 2

      It's billg of course.

      --
      Degaussing scares the bad magnetism out of the monitor and fills it with good karma.
    3. Re:The spammers really go after me. by Anonymous Coward · · Score: 0

      Is that you Bill G.?

  40. i disagree. by giaguara · · Score: 1

    maybe in europe the situation is different?
    the offices _DO_ get spam.

    and personally, i get spam. both work related and private...
    thanx to mail.app at least i use enough filters; without those and before i got about 50 - 100 spams a day. so, enough filters. blocked domains (which include e.g. tripod.com and previously hotmail.com), blocked ips, messages containing certain words (sex and gambling terminology, last minute offers, all unrequested newsletters that cant be cancelled etc) - now maybe 1 - 2 spams reach the mailbox a day, not more.

    many people seem to be allowed to send spam from work. including all the demands to go and get a coffee in 5 minutes and all the "funny" jokes in the powerpoint presentations etc. some of thoe "funny" senders are blocked now, and even the .ppt are on the list of the files that go cancelled directly. =)

    mail.app seems to have resolved my spam problems. hooray...

  41. I don't know what's worse.... by black6host · · Score: 3, Insightful

    the spam I receive at work from outside the company or the emails from within. First, if it's spam I can usually tell from the subject line. Easy to delete. The emails from within require me to at least read it. And once people learned that they can use nice, pretty and extremely huge, clip art I've found that bringing up that important email to "everyone" is a real time waster.

    In addition, far too many people where I work will email a subject to death. Coupled with a large CC: to population along with the "reply to all button" some subjects just won't die the undignified death they deserve. And, you have to read every one because of the odd one that may contain useful information.

    I swear, what once took a 1 minute phone call to resolve now results in 20-30 emails back and forth. The only good thing I see is the CYA factor. I've saved my butt a couple of times being able to forward a message that I sent long ago, that apparently was never read. Why wasn't it read? Must have been deleted with along with the spam!

    Seriously though, I spend far too much time wading through needless email at work than I do spam.

    1. Re:I don't know what's worse.... by green1 · · Score: 1

      I work as a field technician for a relatively large telco (though I don't know if it's safe to admit that here...) I find the company does an excelent job of blocking spam in our work emailboxes, however there is a BIG problem with internal junk mail, the worst offenders being internal corporate "newsletters" and such. what makes it a REALLY big problem is the combination of 2 things:
      1) they like to make these newsletters "pretty" (HUGE HTML messages with lots of graphics just to tell you that the "real" newsletter is at link http://blah_blah_blah)
      2) I am forced to retreive these emails in outlook on a 9600 buad wireless CDPD connection on my truck's notebook.

      GRRRR I wish the people who created these things were forced to use the same type of net connection that those VIEWING them will be using!

  42. Home users simply don't care by stevejsmith · · Score: 2, Insightful

    This is sort of off-topic, but I'd like to suggest why it is that home users get more spam than corporate users: they don't care. I'm using Yahoo. I simply delete spam. It's not hard. It takes up about five seconds of my day. There is no chance of not receiving something due to filtering. In a corporate enviornment, however, it is different. They pay for the servers, they pay for the [small amount of] productivity lost. At home, nobody cares. Sure, if you were getting 20 spams a day you would care, but most of us are not receive that volume of spam.

    1. Re:Home users simply don't care by djmurdoch · · Score: 2

      I simply delete spam. It's not hard. It takes up about five seconds of my day. There is no chance of not receiving something due to filtering.

      There may be no chance of not receiving the good stuff, but once you start getting a substantial spam load, there'll be an appreciable chance that you'll accidentally delete something you want. If you're getting 50 spams a day, you get in the habit of hitting the DEL key really quickly -- and some of those things you delete wouldn't really be spam.

      There aren't any perfect filters, not even your own eyeballs.

    2. Re:Home users simply don't care by Anonymous Coward · · Score: 0

      One of my accounts is ten years old. I average 40-50 a day. I care very much, and my opinion is the situation is going to get musch worse. You may only be getting a few a day now, wait until your address has been sold a few times.

  43. how do they get hotmail addresses? by supernova87a · · Score: 2

    A related question to spam: How is it that after I create a hotmail account, within one day, I can be getting spam? Does hotmail sell lists? Or are there people and bots that just put together random strings of possible user names? Does hotmail try to filter these out?

    1. Re:how do they get hotmail addresses? by Jucius+Maximus · · Score: 3, Insightful
      "A related question to spam: How is it that after I create a hotmail account, within one day, I can be getting spam?

      Does hotmail sell lists?"

      I wouldn't put it past them.

      "Or are there people and bots that just put together random strings of possible user names?"

      For sure. There are enough usernames on hotmail to make it worthwhile.

      "Does hotmail try to filter these"

      Unlikely. This spam makes you more likely to either leave or pay for a bigger inbox so your messages are not auto-deleted to make room for more spam. Either way, MSFT makes money.

    2. Re:how do they get hotmail addresses? by Student_Tech · · Score: 3, Interesting

      I perfer yahoo's "This is spam" thing for reporting it is spam. Although in my hotmail I have filters for cathing the emails with addresses ending in .phd, .now, .you, and the ones like that. (Heck, I even added those to the filters to my primary yahoo account).
      I agree though, I get spam on the hotmail, although I have only given to a few friends(7) and never used it any where else, total email from friends is like 1 msg/month or less, because most send it to my yahoo account. Now yahoo, I have an account that I haven't really used that my friends now and it gets no spam messages.

      Course right now biggest problem with hotmail is that I can't use my unaltered last name with it, "Glasscock", tells me to use a different one or something... ("Glassc0ck" works but it bugs me that their filter on words won't let me use it unaltered. Anybody else with real names that hotmail doesn't like?)

    3. Re:how do they get hotmail addresses? by Anonymous Coward · · Score: 0

      Thats funny hotmail wont filter spam with stuff like that all over the place but it filters last names. Wonder if any Peter Nusses are having this problem.

    4. Re:how do they get hotmail addresses? by Anonymous Coward · · Score: 1, Funny

      I had one episode recently where an employees daughter had emails blocked becuause of a quote - and tagline by e e cummings.

    5. Re:how do they get hotmail addresses? by Anonymous Coward · · Score: 0
      Does hotmail sell lists?

      I've been running a Hotmail account for three months now that has an email name that's a long, uncommon word and also a misspelling (I'm going AC because it's my /. account name, too). I've never handed it out to anyone (used for MSN Messenger), and have only gotten ten emails on it - all from "messenger services" or whatever: ads for other exciting features.

      I used to have an account that lapsed that was used as my primary email drop and was a common word-name combination - lots of wading through crap on that one.

      My study of one says that they're not selling the name, but spammers know that (like AOL.com), the hotmail.com domain is like fish in a barrel; any name or word-name combination is probably taken and probably real.

  44. spamcop.net is pretty good by e40 · · Score: 5, Informative

    We use spamcop.net at work. It's gets 95% of the spam. The thing which made us move on it was female employees complaining of sexually explicit spam from porn sites--with an HTML enabled mail reader, sometimes the first thing they saw was some pornographic picture.

    Unless a company makes a best effort to protect people from exposure to offensive material (as defined by them, within reason), the company could be sued by the employee for creating a hostile workplace. While I haven't heard of cases of this yet, it's only a matter of time. (I hope I didn't give anyone any ideas here...)

    We've been experimenting with spamassassin, and it's roughly as good as spamcop (as to how much spam gets through to the end user), but it's free. Note: spamcop and spamassassin have to completely different approaches to determining what is spam.

    1. Re:spamcop.net is pretty good by Wouter+Van+Hemel · · Score: 2, Insightful
      The thing which made us move on it was female employees complaining of sexually explicit spam from porn sites [...]

      Yeah, if anything makes you move, it's got to be a group of angry, prude feminists who've come to hang the evil sysadmin for letting the degrading stuff pass the network and in their mailbox... blaming you personally as if you wrote the emails, made the porn, and generally have a pact with the devil. That's the stuff nightmares are made off...

      Some people don't seem to get the randomness of spam, they think that somebody is sending it to them personally, set out to offend them - and only them; they never seem to understand that it's their stupid chainmails, greeting cards and forums that get them into the mess anyway.

      Funny enough, it's usually the people who send the most chainmails or gossip, have the least relevant emails with unnecessary cc's, or fill up the mailqueue with bigass attachments, that complain most about spam.

      That's when you know it's time to add 'cute kittens' to your spam filter.

  45. I wish by Anonymous Coward · · Score: 0
    At my previous place of employment, I got on some scummy company's mailing list. I think it was a company called "Get2Chip". They probably got my address from the exhibitor list from DAC (Design Automation Conference). No matter how many times I went to their "unsubscribe" site, or screamed at them (in replies) to stop sending me their shit, I kept getting it. Once I even got a response from a human who said that I would be removed from their list, but I kept getting spam.

    Fucking scum.

    If you're in the electronic design industry, don't do any business with this fucks.

    1. Re:I wish by Anonymous Coward · · Score: 0

      At my previous place of employment, I got on some scummy company's mailing list. I think it was a company called "Microsoft". They probably got my address from the exhibitor list from SD02 (Software Development). No matter how many times I went to their "unsubscribe" site, or screamed at them (in replies) to stop sending me their shit, I kept getting it. Once I even got a response from a human who said that I would be removed from their list, but I kept getting spam.

      Fucking scum.

      If you're in the computer software industry, don't do any business with these fucks.

  46. Blowing the curve again! by wowbagger · · Score: 2

    Over the course of this weekend, my personal email account has received 7 spams.

    Over the course of this weekend, my work email will have received over 50.

    A quick googling shows my personal email address showing up twice as often as my work address.

    Why, then, do I get so much less spam at home than work? Because the ISP I use is very aggressive about filtering spam, while the IT department at work is deeply fearful that "We might accidently filter a million dollar order" (yah, like anybody ordering a million bucks of stuff will do it SOLELY through email).

    True, the above is nothing but a datum, not refutation, but still, the idea that "work gets less spam than home" is not ALWAYS true.

    1. Re:Blowing the curve again! by psyclo · · Score: 1

      I also get much more SPAM at the office than at home. My ISP uses McAfee to filter SPAM, and I only get a handful in my inbox. At work they use a very strange *manual* process to filter the email. Yes, people sitting at computers visually scanning all quarantined email. They delete, and its gone forever, false positive or not. I get P0rn, enlargement ads, everything you could imagine. Over half of my work email is SPAM, not just external email, but total. Out of 54 incoming messages, 29 of them were SPAM, and 25 of those were so blatant that any SPAM filter should have caught them.

      We need something better, but it would cost jobs.

      --
      =======================
      Psyclo, the dark night.
      Mike, the computer geek.
  47. I disagree, also by Eggplant62 · · Score: 2

    From the look of it, if you're a company paying a geek or herd of geeks to write filters for your mail or have purchased some sort of filtering software solution to screen out the spam, you're still wasting money on filtering spam! Office productivity might be up but the company is still having to spend $xxxx.xx on a filtering solution, which I'd bet doesn't offset the increased productivity.

    Also, don't forget the cost, albeit small, associated with missed mail that was flagged as a false postive.

  48. IN SOVIET RUSSIA.... by ZaphodCrowley · · Score: 0, Redundant

    Spam wastes time on you!

    Sorry, there hadn't been one yet on this thread, it just didn't feel right :)

  49. All @ company by intermodal · · Score: 2

    I work for a major games developer, and the only spam I get at work is the spam that goes to the entire company, as somehow a spammer managed to find out our all@company address.

    --
    In SOVIET RUSSIA... erm...NSA AMERICA, the Internet logs onto YOU!
    1. Re:All @ company by otis+wildflower · · Score: 1
      here's how to fix this:
      • only allow trusted hosts or smtp-auth'd clients to use group addresses
      • enable smtp auth over ssl


      Postfix makes this quite doable..
    2. Re:All @ company by wdb · · Score: 1

      In virtually every MUA I've ever seen it is trivial to limit the addresses that can send to group lists. F'rexample there are only two addresses in my company that can send to all@. If spammers can hit your all@ address, someone needs to whap your mail admin with a clue.

      -wdb

  50. There's still a cost by howlinmonkey · · Score: 4, Insightful

    Just because end users don't see the spam doesn't mean there isn't a cost. How much time is spent creating software to combat spam? How many hours do admins spend dealing with spam before it even reaches users? How much time do users have to spend circumventing anti-spam filters to send/receive legitimate email?

    These are just a few of the obvious costs related to keeping spam out of user mailboxes. It would probably boggle the mind to know the actual cost of keeping spam out of Suzy or Sammy Secretary's mailbox.

    1. Re:There's still a cost by herbierobinson · · Score: 2

      One of my consulting clients spent $750,000 dealing with SPAM this year (for around 1000 employees). And they don't know how many sales they lost because the spam filter tossed legit e-mails.

      It costs me about an hour day for my own business (that's around $25,000 in consulting fees).

      Spamming really is theft!

      --
      An engineer who ran for Congress. http://herbrobinson.us
  51. I had to deal with this at my last job... by otis+wildflower · · Score: 1

    .. The big problem when configuring spamfilters for work is dealing with incompetent MTAs belonging to critical partners (investors, VCs, clients). It's sad but unsurprising that many companies have open or broken SMTP servers which allow either out-and-out relaying or external relay by domain (external uses permitted domain in forged 'mail from:' header).

    So, what happens next is you either (if you care) develop whitelists or (if you're BOFH) you give execs the choice between spamfiltering and no spamfiltering. When the users complain about no spamfiltering, fwd them on to the execs.

    Life is so much easier when you don't care anymore...

  52. Can't get too much spam if nobody can USE it.. by EvilStein · · Score: 2

    At a previous employer, we had no WWW access, so there was no way to enter our address (from work) into any forms. We sure as hell weren't putting our addresses onto any websites, posting to USENET, sending chain letters to friends. It was used for business and business alone. Personal emails? I SSH'd to my mail server.

    Personal emails at work were *STRONGLY* discouraged, and it was made clear that the company would read our emails if they ever felt like it.

    I never used my work email address for anything. I'd say that 90% of the email I *did* get was company related stuff anyway, which went right into the trash can.

    1. Re:Can't get too much spam if nobody can USE it.. by PhreakOfTime · · Score: 1

      Personal emails at work were *STRONGLY* discouraged, and it was made clear that the company would read our emails if they ever felt like it

      Gee, I wonder why its a previous employer? Was your boss's fav book Mein Kampf?

    2. Re:Can't get too much spam if nobody can USE it.. by EvilStein · · Score: 2

      Worse.

      The previous employer has a stock symbol of AWE - take a look. ;)

    3. Re:Can't get too much spam if nobody can USE it.. by PhreakOfTime · · Score: 1

      I think weve all had morons like that for a boss. A place dcwi.com I worked wouldnt even let me listen to music at a .5 volume setting in the back tech room, but the boss's daughter could listen to her radio in the front reception desk of the store. Not too much of a suprise, since the place had an open SMTP mail relay for quite awhile. So now, Im his competition and his DNS servers are blocking my domain. Im sure his customers would be thrilled about such self-serving censorship, which works out as a good sales point for me ;)

  53. $1500? by EvilStein · · Score: 2

    Just out of curiousity, what package cost $1500 and does all of that?

    I'm wondering because that's all stuff that I'm doing currently, but it cost me $0 - all free software, obviously.

  54. That has nothing to do with mail filtering by Lobsang · · Score: 2

    SPAM does not distinguish between personal and corporate email accounts. What happens here is that most people use the corporate accounts strictly for business related matters and corporate mail, while their personal emails are used for everything else (where the exposure to harvesters is most likely to happen).

    I have lots of friends who post messages on the Usenet using their corporate email accounts. Guess the result? Lots and lots of SPAM.

  55. uh... by Anonymous Coward · · Score: 0

    bullshit

  56. Non-productive time by failedlogic · · Score: 1

    Why should anyone have to deal with any SPAM? We've all collectively wasted a lot of time on filtering it - wether at home or at work. Although, we can't prevent viruses and system intrusions, we should at least more easily be able to control SPAM.

    What happened to the legislation in some states to punish spammers? Why are some providers doing little to stop this problem? At issue in my mind, is not the fact that sys admins have done a great job filtering SPAM (which is a positive), it's the fact that everyone has to put up with it and simply bouncing it does nothing to diminish the quantity.

  57. YHGTBK! by Arandir · · Score: 2

    You have got to be kidding! I get about twenty times the spam at work as I do at home. At home I just get one or two a week sent to webmaster, offering colocation, traffic enhancement, and other minor crap. But I work I get hardcore porn ads, Mrs. Mojimbo from Nigera, term life insurance, penile enlargements (add 4 inches!), diets (remove 4 inches!), and some stupid time traveller trying to get back home.

    It's all my work's fault, of course. They inadvertently left an open relay in place long enough for us to get blacklisted by the good guys and primelisted by all the bad guys. It's fixed now, but damn! I get about 50 to 100 a day.

    --
    A Government Is a Body of People, Usually Notably Ungoverned
  58. who is a victim? by axxackall · · Score: 1
    All right. Corporate users are protected by the corporate IT stuff. ISP users are protected (somehow) too, depends on ISP they pay their fee. Personal home server owners are usually protected by the definition of their skills. Who is left? People without job, without home servers and even without home ISP accounts. So? Who will care about those poor souls? I doubt there may be any lobby to push a law to protect such users. Therefore, there is no way to kill the spam as a business.

    I predict that in one or two year free email account will be dead as most of people use it anyway just to subscribe for spam.

    --

    Less is more !
  59. acronyms by Anonymous Coward · · Score: 0

    YMMV.. wtf is YMMV, wait I know!

    defc0n@luminaire:~$ /usr/games/wtf is ymmv
    YMMV: your mileage may vary

    or alternatively

    defc0n@luminaire:~$ cat /usr/share/misc/acronyms | grep YMMV
    YMMV your mileage may vary


    (yes, i had to perform this task after reading the headline)

  60. why is blatantly obvious. by Anonymous Coward · · Score: 0

    Nobody knows my WORK email address except my co-workers, clients and my loved ones.

    Nobody knows my HOME email address except my loved ones and most of the rest of the internet. Any time I buy something, register something, or post non-anonymously to websites or newsgroups I use my home email address.

    That's why I barely get any spam at work compared to home.

  61. AOL by danny256 · · Score: 1

    Do you ever get the feeling that the news at cnn.com is more for making AOL look good and less for providing unbiased information to the public?
    Well, do you?

  62. Lol, that's how I got the son of Ford! by BoomerSooner · · Score: 2, Troll

    Just bford@ford.com (or something like that).

    It's real easy to tell to because you get
    b.ford@ford.com (undeliverable)
    bill.ford@ford.com (undeliverable)
    william.ford@ford.com (undeliverable)
    bford@ford.com (no auto reply so it hit something).

    He was real nice though, forwarded my questions to the head of marketing. I was inquiring as to why they don't make a Cobra 2 seater instead of the faster standard mustang body style.

    Ford kicks Chevy's ass. GM sucks.

    Ford/Jaguar/Volvo/Lincoln/Mazda ...

  63. losing legit email because of spam filtering s/w?? by Ken+Williams · · Score: 5, Informative

    hrm, we use complex filtering software and techniques, and i still get lots of spam. i receive about 200 work related emails each day to a certain account, and about 25% of that is spam.

    what i really wonder though is how many legitimate (non-spams) emails i never receive because of filtering software! i frequently get email or calls from people who claim they sent email that i never received. i also frequently get mailing list bounce warning emails (primarily from securityfocus lists though) claiming that emails sent to me are bouncing. hrm ...

    --
    -- ken williams
  64. 3. ??? 4. PROFIT!!! by Anonymous Coward · · Score: 0
  65. My BS detector is acting up again. by The+Jonas · · Score: 1

    Several people I work with receive way too much spam (and the very offensive kind). For instance, one lady received over 100 spam messages in a day just after ordering NASCAR tickets online. BTW, here is link to the PEW Study advisory board - Full of high ranking execs from Pro-Spam companies.

  66. Personal vs. Work by confusion · · Score: 1

    I think one of the single biggest reasons is that people's home email addresses are sold by ISPs, are used when shopping online [1], posting on message boards/mail lists/newsgroups which are harvested [1], etc etc etc.

    Most companies don't sell their employee lists (but I see an opportunity for increasing the bottom line), and most employees, while they surf voraciously at work, use non-work email addresses when shopping online, viewing porn, etc. Further, many companies don't have their email systems connected to the Internet. I think its the minority of companies that are acutally employing effective anti-spam techniques.

    I think many /.ers also have the misfortune of being a member of common lists @theircompanydomain.com, ie. webmaster, postmaster, etc etc. There are many many many spammers that walk the domain registries sending to those addresses. That certainly skews my view of the world, as I get about 200 to 400 spams a day.

    [1] and hence sold

    1. Re:Personal vs. Work by Anonymous Coward · · Score: 0

      I think one of the single biggest reasons is that people's home email addresses are sold by ISPs,

      Have any proof to back-up that load of crap? After Earthlink made that same ridiculous claim and were sued, they couldn't come-up with a single example to use to back-up their claim. Geez, instead of blaming the victims of spam, the ISP's (since they lose customers, have to buy more bandwidth, bigger mail servers, spend time handling complaints and attackers, etc.) shouldn't you blame the spammers?

  67. spamassassin, and a responsible email client. by dizco · · Score: 2

    We use spamassassin at work, which we've just setup recently.. We've been using pegasus email for years and years. Since the machines were ps/2s running dos 3.x. pegasus doesn't cut down on spam, but there is *no* excuse for email clients such as outlook that can infect your computer with such apparent ease. If you use a client like this, or force it on your users, you are an irresponsible net citizen.

  68. Another name by dark-br · · Score: 1
    office workers in the US are not bothered by spam

    They already had those fscking TPS reports, there's no free bother time for SPAM.

    I'm to lazy to have a real signature

    1. Re:Another name by whizzmo · · Score: 1

      "Now, Peter, I heard there was some.. confusion about your TPS reports.
      You know that we're putting cover sheets on all TPS reports now. If you
      could just put a cover sheet on all your TPS reports from now,
      that'd be Greaaat. Yeah."

      --
      nuclear presidential echelon assassination encryption virulent strain
      Whizzmo
  69. little spam at work by Anonymous Coward · · Score: 0

    for me this is because we all (12 or so of us) use the same frickin' email address! one of the employees usually comes in about 4 in the morning and deletes the spam off the server that we connect to...

    effective, but lame :-(

  70. It depends by night_flyer · · Score: 2

    at the place I work we have 3 full time people monitoring an expensive piece of spam filtering software. so if may save a couple of minutes of time off of the other 500 people, those 3 have been pulled from other duties to take care of the task...

    --


    Thanks to file sharing, I purchase more CDs
    Thanks to the RIAA, I buy them used...
    1. Re:It depends by TeddyR · · Score: 2

      Ahh. but the way that it is calculated is that if it takes only 3 mins per day deleting spam, it is costing the company 25 man hours per day to "just press delete". The real time spent on spam deleteion may be up to 6 times that number. Also... some of the spam may be from 3k to several megabytes. for a 100k spam message that reaches everyony, thats about 50mb of disk space. Multiply that by 20 spams/day, and the cost of disk storage for the mail server goes up..... (also the backup tape unit backing up the mail would have to increase in size)...

      Spam costs the company ALOT more than the software and the 3 fulltime people when all the other stuff is added up...

      --

      --
      Time is on my side
  71. But of course... by Anonymous Coward · · Score: 0

    This would suggest that american workers are not people and therefore don't have personal accounts in the first place.

    Ughh..republicans

  72. I must be in the minority then... by TGZubby · · Score: 1

    because I get MORE spam at work than in my personal email account.

  73. spam / snail spam debate by hhknighter · · Score: 1

    A friend and I were having a debate, and I wanted to bring it out into the open. Our debate (might have been done numerous times already, but still) comes to spam in snail mail. Anyone have any good insights? Electronic Spam vs Snail Spam. Why outlaw one and not the other? I know most people hate spam of anykind, so some should be devil advocates :)

    1. Re:spam / snail spam debate by TeddyR · · Score: 2

      The big difference betweem the two is that email spam the brunt of the cost is paid by the reciever, and NOT the sender. The reciever pays for their own email account. They pay their ISP for the bandwidth they use to download the mail. They pay the ISP for the storage disk space that the stuff takes. Most spammers also use "other" peoples servers to send their junk. The spam often has incorrect mail headers that end up causing more load on the servers sending the stuff, cauing more work for those servers and for those that have to handle the costs of "cleanup" and postmaster bounces....

      Snail mail spam is paid for by the sender. The content of snail mail spam is regulated by the FTC under certain guidelines. The postoffice is getting paid to deliver it.

      --

      --
      Time is on my side
    2. Re:spam / snail spam debate by mindstrm · · Score: 3, Insightful

      Yeah yeah, blah blah blah...

      Get real man. Show me how many of the spam whiners are paying per byte. Show me how the cost of their email account or internet service would be less because of spam.

    3. Re:spam / snail spam debate by Anonymous Coward · · Score: 0

      As someone that works for an ISP, I can calculate exactly how much spam is costing us in terms of sustained extra bandwidth that we have to maintain so that our customers dont complain.

      Part of the price increases over the past few years are there just because it costs so much more. We have to add about 1 terabyte of storage JUST AS A RESULT OF SPAM... those disk arrays cost $$$$$$ to run and maintain to store all that extra junk as it comes in .... (each customer gets 20mb email space.....

    4. Re:spam / snail spam debate by mindstrm · · Score: 1

      Great. now how do those numbers compare to your total cost of operation? That's the only part that is relative.

    5. Re:spam / snail spam debate by hhknighter · · Score: 1
      Let's put it this way. If you use the ISP as a base, each end user that subscribe to that ISP will be affected. Not only in terms of bandwidth (considering broadband), but the nuisance level. Customers should receive the highest priority in business. As a customer myself, I choose an ISP that will filter better than another that filters little.

      The cost is necessary, and it is not a fixed number. It is continuous, to a point where spam get smarter too. No specific reply address, illegal email addresses, ip spoofed spam, OFFENSIVE spam (can't do jack, they are sending from a country that doesn't regulate).

      Spam to one end user may not be of upmost importance, but to companies that offer services to these end users, it should be.

    6. Re:spam / snail spam debate by UncleFluffy · · Score: 2
      Get real man. Show me how many of the spam whiners are paying per byte.

      The ISPs are, and that puts up the costs for the customers

      --

      What would Lemmy do?

  74. It's spam, spam, spam, spam and spam for me by KNicolson · · Score: 2

    I still get spam addressed to my old company's two old obsolete domains (I can't persuade them to turn that off!), plus my old company's current, my current company's current address (I transferred from a subsiduary company, so get to see both email servers) and now both companies are in the processes of changing their domain names again, so it looks like another two servings of spam for me.

    Fortunately, I use filters which catch 90% of the 25 or so daily spams.

    As comparative data points, my home email (freely used in Usenet, etc) gets about 50+ spam per day, but as I use POBox.com, they kill 75% at the server, and another 20% gets forwarded with a spam tag, to get binned at my home PC.

    Oh, and my Hotmail address (an obvious [firstname]_[lastname]) gets almost zero spam, filtered or unfiltered - I think I get more messages from M$ than junk (well, non-M$ junk anyway!)

  75. Re:losing legit email because of spam filtering s/ by Jerf · · Score: 2

    what i really wonder though is how many legitimate (non-spams) emails i never receive because of filtering software!

    That is how the spam war will end: The spammers will become sophisticated enough that no matter what we do, any filter we try to use will result in too many false positives (falsely labelled "spam") to be of any use.

    (False positives, of the four possible outcomes, are by far the worst, if you think about it.)

    Spam is only going to get worse.

  76. This article is way off by darxpryte · · Score: 2, Insightful

    and I'll tell you why. The only reason businesses don't get as much spam compared to home users is because of one difference. The average home user doesn't have an IT department at their disposal to help fight spam. At the company I'm at we still get tons of spam for the same reason home users do. Too many people treating their work account like their home account and signing up for lists and things they shouldn't be. Spam has gotten so bad that we're considering implimenting the silver bullet of spam filtering, TMDA. The only problem is that this is very difficult to impliment and it goes purely on a whitelist only basis. Spam is everywhere and anyone who says differently is either downplaying the problem, or living in a bubble.

    1. Re:This article is way off by RealityProphet · · Score: 1

      The summary of the article itself states,

      "Thanks to a good job done by the tech staff and filtering software, office workers in the US are not bothered by spam mail and the value of email communications has not eroded."

      The article never says spam is not received, spam just never reaches the end user.

  77. I shall have to report you... by wirelessbuzzers · · Score: 1

    ... to the American Association Against Acronym Abuse (AAAAA)

    --
    I hereby place the above post in the public domain.
    1. Re:I shall have to report you... by jkeyes · · Score: 1

      And yet it has a German TLD.

    2. Re:I shall have to report you... by SEWilco · · Score: 4, Funny

      Are they a member of the American Association Against Acronym Abuse Alliance?
      I don't approve of their methods, so I am a member of the Anti American Association Against Acronym Abuse Alliance Activists (not to be confused with the Anti-American Association Against Acronym Abuse Alliance Activists, some group of Albanians).

    3. Re:I shall have to report you... by Anonymous Coward · · Score: 0

      Let's face it. These aren't acronyms at all. They are abbreviations. Acronyms are abbreviations which form words, such as LASER and FUBAR.

  78. Re:losing legit email because of spam filtering s/ by GordoSlasher · · Score: 1

    If spam gets so bad that the filters cause too many false positive, then it's time for whitelist-only email. For many email users at work, whitelists are all that's needed. For example, 99.5% of email received at my work address is from a coworker. The other 0.5% is from my home account, a former coworker who is keeping in touch, or other addresses I already know. Many people never need to receive messages from unknown senders at their work address. Sure, there are exceptions, but that just means a little more effort maintaining the whitelist (i.e. any email address that originated from my business card scanner should automatically be added to my whitelist).

  79. Easier fix by 0x0d0a · · Score: 4, Interesting

    with an HTML enabled mail reader, sometimes the first thing they saw was some pornographic picture.

    The obvious solution would be to not use an HTML "enabled" mail reader...

    1. Re:Easier fix by berniecase · · Score: 2, Informative

      If they're using Outlook, they should turn off the preview pane for the inbox. That should help good deal.

  80. FIRST POST! by Anonymous Coward · · Score: 0

    First Post!

    I finally got it! :)

    1. Re:FIRST POST! by uberdave · · Score: 2

      First post is passe. The current trend is posting well informed, insightful (and possibly humourous) comments.

  81. Yeah, right. by berniecase · · Score: 1

    I'll tell you - the IS staff at my work has (to my knowledge) done only one thing to keep the spam from flooding my inbox: denied open relays from sending email to me and the rest of our staff. Apart from that, they're doing nothing.

    I have an Outlook rule that catches about 90% of my spam, but I can't save anymore server-side rules because my rule exceeds the 32K maximum Exchange Server packet size.

    I read this article and seriously wondered what these people were smoking. I've had my work e-mail address for almost six years. I get over 100 spam emails a day now. Tomorrow morning when I get into work, I should have somewhere around 300 emails sitting in my spam folder. Then, I should have about 30-40 that haven't been caught by my filters.

    I think the survey takers got some bad data.

  82. But virus emails more than make up for that by Durindana · · Score: 2, Insightful

    At least in my office environment, where we've got new Pentium 4s running Windows 95 unpatched (it's an old-school custom-job database/workflow "solution" tying us down).

    We get our share of "You've been accepted!" but more common by far is "Japanese lass' sexy pictures" and "A very powful tool" - you know the drill. Our IT people's idea of security is forbidding accessing personal email accounts on the Web.

    I'd trade virus emails (which crash Outlook even when you're running VirusScan or similar) for spam any day.

  83. Writing and maintaining filters cost money by gorbachev · · Score: 1

    Companies are wasting insane amounts of money writing and maintaining spam filters. This is money that's unavailable for enhancing the business or providing new jobs for employees.

    I think the conclusion saying american workers do not spend huge amounts ot their time fighting spam is incorrect. It's all about cost shifting with spam...

    Proletariat of the world, unite to kill spammers. The slower the better. Remember, knees first, so that they can't run away

    --
    In Soviet Russia, I ruled you
  84. Not my mileage unfortunately ... by msp0 · · Score: 2, Insightful

    Where I work, we get affected by each Outlook addressbook-reading virus as they come through, even though Outlook is banned on the internal network, with threats of firing employees who use it.

    Somehow, people don't seem to get the message.

    While these occurrences are not common, they generate a huge amount of email.

    They also generate a large number of clueless replies from people, asking to be taken off internal mailing lists that have been spammed, or back to the person whose addressbook has been compromised asking them to stop sending messages!

    It all comes back to education in my opinion ...

  85. Don't you mean easy out? by bastion_xx · · Score: 2

    Explicit emails, graphics or not, are not welcome. What if the same user, using Eudora or whatever received a message with the word "fuck fuck fuck" in the subject line? Still offensive and could provoke "hostile workplace" initiatives.....

  86. Re:losing legit email because of spam filtering s/ by Jerf · · Score: 2

    That's actually what I do now. A filter for each of my mailing lists (which are all nice enough to use the [abbrev.] convention in every title), and a filter per left-over person that goes into my generic "Keepers" folder.

    No spam filtering in terms of what most people mean, but it turns out that unless you have a lot of people emailing you out of the blue (tech support, maybe an Open Source project lead), this means that around 90%-95% of the stuff that *isn't* filtered into a folder is spam, and the percentage is going up every week. That's for my personal account, which is less focused then the average work account, where I think your numbers would hold.

    This can't be perfect, but it also can't be fooled or defeated in the general case. It's a hell of a lot less sexy then the latest Bayesian filters, but in another six months, the whitelists will work better.

  87. filtering the spam - some do, some don't by porky_pig_jr · · Score: 2

    When I've worked for BBN Planet, they did not do ANY spam filtering, whatsoever. Since I've made a mistake posting a few messages on usenet with my corporate e-mail address (which apparently got harvested by bots), in a few month my e-mail box became overflown with spam for the next several years while I was working for BBN. I no longer make the same mistake since, and all my usenet postings contain completely fake address. The bottom line - some companies do and some companies simply don't care.

  88. What about false positives? by weiyuent · · Score: 2, Insightful

    Filtering isn't effective if it also blocks legitimate mail, and from anecdotal evidence it seems to do that excessively.

    All my friends who work in places that have spam filtering implemented complain incessantly of emails not received, often times important emails on which their work depends.

  89. A little secret by Anonymous Coward · · Score: 0

    Dell uses MIMEDefang on its Internet bastion hosts.

    Sshhh... don't tell M$ Dell runs Red Hat and Sendmail on its Internet mail servers....

  90. It's still a problem. by Galahad2 · · Score: 1

    The fact that every individual employees don't have to battle spam doesn't mean that spam isn't a problem for business.

    1. Re:It's still a problem. by Galahad2 · · Score: 2, Interesting

      Oops... itchy "submit" finger. The fact that every individual employee doesn't have to battle spam doesn't mean that its not a problem for business. It only means that the company has hired a $70,000/year person whose entire job is to stop spam. Or bought a ten thousand dollar program that must be constantly monitored.

  91. Overzealous filtering by IronyChef · · Score: 2, Insightful

    And I wonder how much non-spam email is going down the memory hole? For instance, take the case of a company that lost significant mail from foreign customers in a classic "Risks Digest" blunder: offensive words in English may be perfectly innocuous in other languages...

    1. Re:Overzealous filtering by cant_get_a_good_nick · · Score: 1

      Hmm, me curious, what was this blunder, what word was it?

  92. Hmm SPAM? by Baudrillard · · Score: 1

    I am concerned that the debate about SPAM provides cover for a covert attempt to install corporate censorware. SPAM blocking should be done at the level of the individual recipient, by blocking options they choose. If it is done further upstream then this simply trasfers control of a very powerful apparatus of censorship to the upper echelons of corporate hierarchy. Can we really trust them to block ONLY SPAM and nothing else?

  93. Wow. by mindstrm · · Score: 2, Flamebait

    See, I get about five times as much spam as real mail on most days. Do I care? No. I spend less than 30 seconds deleting spam on any given day.

    So.. let's see.

    By NOT spending hours bitching about spam
    NOT spending hours tweaking an anti-spam system
    and just pressing delete... I figure I save myself a good 20 hours anually, at least.

    People waste more time whining about spam and fighting spam than they would fighting it with the most simple method: the delete key.

    yes, I disagree with spam. I think it's rude, wrong, and a waste of time. If I had 20x the amount of spam I get, I would probably speak differently.... but as it is, I get 20 or 30 spams a day, and it's not worth the effort to complain.

    We could pretend it eats up valuable resources, or we could get real, and realize that the total disk space eaten by all the spam is really very small, relatively speaking. Even if it's 4 or 5x the amount of legitimate mail, it's still nothing.

    1. Re:Wow. by KlausBreuer · · Score: 4, Insightful

      Sorry, but *that* was marked up as 'Interesting'?

      Personally, I loathe advertising. Spam is just another form of that. Filtering out all that trash bothers me a *lot*.

      And yes, it is expensive. My parents live in South Africa, downloading their email through a little 56K modem (which rarely hits over 9600, thanks to the lousy ISP). They pay per KB and per minute. Think they don't mind "just pressing delete"?
      I'm lucky - I sit in Germany with an unlimited DSL line - and it *still* bothers me. Spam is on the verge of making my accounts unusable.

      Bah. You sound a little like that idiot I read who called himself "all-american free-speech spammer".

      Ciao,
      Klaus

      --
      Free PC version of ChipWits at http://www.breueronline.de/klaus/chipwits/
  94. No Doubt Because...... by ONOIML8 · · Score: 2

    I'm sure this is due, in no small part, to the excellent software provided by Microsoft. You know, the folks who bring you MSNBC and Hotmail.

    Oh.....shit.....wait a minute.....lemme rethink that.

    .

    --
    . Quit playing Monopoly with Bill. Switch to one of many non-Microsoft products today.
  95. Only in America.... by mindstrm · · Score: 2

    and probably Canada....

    Most other countries have a little more common sense when it comes to their women getting offended becuase of a nice pair or a bad word.

    Bad words and boobies are reality. If you can't accept that, check out.

  96. interesting... by Transcendent · · Score: 2

    This is contrary to the perception that American workers are wasting too much time battling spam.

    So only Americans get spam now? Well that settles it! I'm moving to canada!

    ...wait...

  97. Employee turnover ? by M@T · · Score: 2


    Sounds to me like their employees' email addresses aren't hanging around that long.

    My email address has been public domain for
    8 years now... makes all the difference in the
    world as far as spam goes.

    --
    'sapientia potestas est'
  98. My spam experiences by angle_slam · · Score: 1

    At work, I get a ton of spam. I think I may have entered my work email address on one site once, and it just went everywhere. Now that I use a Hotmail account for all my public postings, I get no spam on any of my personal email accounts, except the Hotmail account, of course.

  99. why SPAM is good for us by Baudrillard · · Score: 0, Flamebait

    The ability to SPAM places the power of the mass media in the hands of the individual. Although SPAM can be extrememly annoying, I think the price to pay is well worth it because it can be used as a powerful force for the democritization of information. By quashing SPAM, the common person is cut off from the ability to reach a mass audience (they could start a web page but people must be AWARE of it in order that their message gets out). In other words, quashing SPAM has the effect of helping to silence dissent. Then the power of the mass media is held only by the corporate elite.

    1. Re:why SPAM is good for us by hhknighter · · Score: 1
      however,

      Who is sending those messages out? Or rather, who is behind the support of spammers? Not quite an individual. Small companies maybe. And what's the message? They got a way to enlarge your thing and your gf/wife's front. Wonderful. While they are at it, they can tell you what you can do to relax yourself, by going to their porn site.

      in another note, you post something to a board of newsgroup, and you will get spam sooner or later. That common person is then cut off from the ability to reach mass audience too. Just one of those mouse and electricution. Eventually the mouse will stop trying to reach for that cheese.

  100. Sendmail + Trend Micro VirusWall + Trend eManager! by nbvb · · Score: 4, Informative

    I work for a Rather Large Company (tm) and was tasked with architecting the mailgate for the entire company. Several requirements:

    1) Ingress spam & virus filtration;
    2) LDAP directory integration;
    3) Message address rewriting on ingress & egress.

    See, I was tasked with this when our company merged with 3 other ones, so we had a mess of Exchange and Notes servers out there. The idea was for me (your friendly local Unix sysadmin) to build a single ingress/egress point (my boxes) while the NT admins rebuilt all the exchange & notes servers into one coherent infrastructure. (That's a lot of work with ~40,000 employees!)

    Anywho, the way I did it was to install a pair of Sun boxes in our DMZ with Trend Micro VirusWall on it, as well as their eManager product. That handles our ingress spam & virus filtration. That product proxies an inbound connection on port 25 to another pair of Sun boxen that run Sendmail gateways, which, thanks to some custom rules, do the LDAP lookups & address translations.

    So we have multiple levels of SPAM & virus filtration -- the Trend stuff is very simplistic, crappy, relatively undocumented code, and works exactly as designed. As much as it looks amateurish to me, I can't help but to recommend it because it Just Freakin' Works. Also, if you're a big enough fish, the folks at Trend are incredibly friendly & helpful -- several of our suggestions made it into the product.

    Someone high-up in our organization decided after Nimda and Code Red that all inbound messages with attachments should be quarantined for an hour, because Trend promised virus pattern updates within an hour after a virus outbreak. We were able to graft that on using some shell scripts. Works just peachy.

    Between Trend Micro & Sendmail, we've got a GREAT solution that gives us plenty of filters. We have all the spam & anti-virus filters using Trend, and can block or redirect by domain using a mailertable with Sendmail. Also, the LDAP support in Sendmail wasn't very good when we started integrating that (8.10 was the first usable LDAP release), but by 8.12, it works great. We redirect the message internal to the company based on what's in LDAP, and it works flawlessly for ~1 million messages/day.

    Tastes great, less filling. And mostly free software (Sendmail was free, as was the Directory Server, since that license comes with Solaris.) All we paid for was the Trend Micro stuff, which we had a site license for anyway since we use it on the Exchange servers as well.

    So yeah, I'd have to agree that SPAM isn't NEARLY the problem at work that it is at home. Also, since we got the Exchange servers out of the SMTP business and "just" for mailboxes, we haven't had a virus outbreak since. Lovely!

    --NBVB

  101. Re:losing legit email because of spam filtering s/ by dlakelan · · Score: 1

    Don't knock the Baysian approach until you've tried it.

    As Paul Graham said, the thing about spam that can't change is the message. If they start sending things that don't have spam like messages in them, they're no longer spam.

    Since the spam messages are relatively easily recognized by simple naive Bayesian approaches, these filters work very well.

    I use bogofilter from ESR in a procmail script. the first thing the procmail script does is bogofilter, if it classifies as spam, I put in in "spam" otherwise it passes through to my other filters.

    I never lose anything. Spam never gets through, and the false positives are all things like auto-replies from online ordering, or people who were dumb enough to put html attachment stuff into an email list. These happen only a few per month.

    I get about a hundred spams per week in the spam folder. I use mutt, and when i delete them I have mut automatically add the spams to the database.

    it works. It doesn't save my bandwidth but it saves me having to do anything about spam.

    --
    ((lambda (x) (x x)) (lambda (x) (x x))) http://www.endpointcomputing.com a scientific approach to custom computing.
  102. what? by twitter · · Score: 2
    You are telling me that you got "I love you" through hotmail? Give me a break. As buggy and easy to break as IE is and as much code as IE and Outlook share, I never heard of anything bad hapening through hotmail or Yahoo accounts.

    Worse than that, blocking access to Yahoo will break your employee's access to some of their owner's groups. You know, that impartial third party publishing kind of thing that folks at different companies use to share experience and knowledge that benifits all?

    Congratulations on decreasing your rate of virus infection. You might have done better by installing Mozilla and making that your default browser. Is there any bogus policy on that one? I just don't get why some big companies insist on the bug farm that is Outlook.

    --

    Friends don't help friends install M$ junk.

    1. Re:what? by Jucius+Maximus · · Score: 1
      "You are telling me that you got "I love you" through hotmail? Give me a break. As buggy and easy to break as IE is and as much code as IE and Outlook share, I never heard of anything bad hapening through hotmail or Yahoo accounts."

      I still get plenty of klez in my netscape webmail. The goner worm got in this way, although I don't know what webmail provider the guy was using.

      "Worse than that, blocking access to Yahoo will break your employee's access to some of their owner's groups. You know, that impartial third party publishing kind of thing that folks at different companies use to share experience and knowledge that benifits all?"

      Well they wern't my employees so to speak. I'm just a low ranking peon coder still working toward a degree ;-) But as to sharing knowledge with people from other companies so as to get the benefit of outside knowledge ... well let's say that this company was a special case. It was definitely a monopoly (this was not a software or electronics company btw) and due to geographical reasons, the only company of its type on the continent, if not in the world. There were no other companies to share knowledge with. Overall, sharing information was a big no-no especially at the time I was working there for reasons that are ... well ... sharing was a no-no so I can't tell you ;-)

      "Congratulations on decreasing your rate of virus infection. You might have done better by installing Mozilla and making that your default browser. Is there any bogus policy on that one?"

      I wish they would have had the sense to do that. Although I love mozilla, I would still recommend Opera.

      " I just don't get why some big companies insist on the bug farm that is Outlook."

      Because the management doesn't know any better, and more importantly, they don't want to be told any better.

  103. Er... by inode_buddha · · Score: 2

    does the phrase "reported in this article by MSNBC.com" ring any alarms for anyone else here?

    My mileage most definitely varies, and far too much at that.

    --
    C|N>K
  104. Bullshit by netwiz · · Score: 2

    I have to filter approximately 20 messages daily from my inbox, and they've gotten worse as the holidays approached. I guess everyone out there's hung up on the rampant consumerism and decided that they could "make money at home with your computer" to afford a new bike for Jonny or some other such rot.

  105. Recursion detected. by twitter · · Score: 2
    I get 20 or 30 spams a day, and it's not worth the effort to complain.

    Yet you complain when others say that it sucks to not be able to find their mail under a pile of shit. Hmmm, how much of your time do you waste dissing people?

    --

    Friends don't help friends install M$ junk.

    1. Re:Recursion detected. by mindstrm · · Score: 2

      I don't consider dissing people on slashdot a waste of time.
      I use the free time I would have spend bitching about spam to bitch at other people about other stuff to make myself feel better, of course.

      MOST people who bitch about spam whine because they get a few emails, and get mad as hell the second they see it.. it's not even a nuisance, they just choose to get boiled up over it.

      SOME poeple have real problems with spam, but it's a small minority.

  106. I don't know if you work for the same telco by Anonymous Coward · · Score: 0

    But I laughed when I recieved a 1 meg email telling us to tighten up our email polices. Why was it a 1 meg email? Because the sender used a 999k black and white image of his signiture.

  107. Spam free my ass... by Majestix · · Score: 1

    ...where i work spam is a major problem. YET, the lawyers i work for, DONT want their email filtered at all. Can you believe that? They're afraid that some important communication will be caught and they'll look bad.

    --
    --- I was far from home, and the spell of the Eastern sea was upon me. -Lovecraft-
  108. They can't be right. by rnturn · · Score: 2

    My personal email accounts are spam-free and I'm not doing anything in the way of filtering. On the other hand, at work, where there are supposedly junk mail filters in place, I tend to see about 50%-75% of the email as junk. And that's not counting the stuff that I'm filtering into the Trash folder by filtering on my desktop. (So until the folks running the company's email infrastructure can get their poop in a pile, I can at least deal with it within my mail client.)

    As a few other posters noted, co-workers can be the source of an awful lot of junk email. And much of that can be more time consuming to deal with than the obvious spam. Seeing bizaare, Unicode-like characters is a dead giveaway of a piece of junk email and make it quite easy to get rid of. But... the message from HR that contains a Powerpoint slideshow announcing the new look of the HR intranet site actually takes far longer to deal with.

    --
    CUR ALLOC 20195.....5804M
  109. Yeah... by whois · · Score: 1

    I noticed this two years ago when I went to work for a responsible employer. I wondered about it for a while and then reached the natural conclusion that these people would've reached if they weren't stupid.

    SPAM isn't prevented in the workplace because of diligant admins or hard working filters. It's prevented because companies don't sell their email addresses.

    Point:

    I signed up for flash.net a few years ago and was getting spam within the first 4 hours of having an account. This was using a new email address that wasen't easily guessable and probably wasen't given out before. This was also before spammers learned about dictionary attacks. How did they get my email? Someone at flash.net gave it to them.

    Nowadays, after having some 3 letter email addresses for a few years dictionary attackers finally decided to probe our domain at work and found me, now I get about 1 spam a week.

    My other account which uses first.middle.last@my.work.com notation hasen't been found yet and probably never will be, unless my company sells out and gives their email list away, or I screw up and sign myself up for spam.

    SPAM is pretty much only a problem now because people are selling email addresses.

    Experiment:

    pick a hotmail address with totally random characters that nobody would pick before and see if you get spammed. If you do, then Microsoft is selling your email address.

    Hotmail doesn't care though because you're an individual, it's not a corporate account and they don't lose revenue.

    Point 2:

    People with publicly visable email addresses get spammed all the time.

    Apparently this survey was only on email addresses of people who barely use email. Have these people put their email address on a corperate webpage and see how much spam they get in a few weeks.

    Think about how much spam you get. Then ask yourself "How did these motherfuckers get my email address?"

    Sometimes it's obvious. I went to a conference one year and gave them my email address, which they posted on a webpage. Two years later someone sent an email to 3 people in my group at work, guess which 3 people were at a conference? Somebody had probed the webpage.

    If you don't want spam, don't give you're email address out to ANYBODY you don't know. Use throwaway accounts for any online purchases.

    If you already get spam without giving out your email address well then switch providers, because obviously the dickfucks at your ISP sold your account to a spam list.

    Thats all...

  110. Re:HMMMM by Tonetheman · · Score: 1

    Or mine either. I get so much freakin spam at work it is not funny. We have Spam Assasin (I think) and it fails miserably on about 10% of all my mail. Which 10% does not sound like much but it adds up.

  111. Spam vs. Telemarketers by WickedClean · · Score: 1

    I've been at my new job for a little over 4 months and have not gotten anything in the way of spam.

    However, I have had two telemarketer calls already. One was one of those pre-recorded messages from a "Cowboy Bob" talking about how I can get a free pager.

    --
    ...All I can say is that my life is pretty strange...
  112. I fought against spam filters.... by SwedishChef · · Score: 2

    For years my thinking on spam filters was, "spam is the user's problem". Generally if you are careful about where your email address goes, my reasoning went, you won't be bothered. And, sure enough, I wasn't bothered.

    But then I discovered that customers *were* bothered and bothered enough to switch their accounts in order to get email filtering. A bit of rethinking was in order here.

    I implemented Message Wall on one of our boxes and had it connect to our regular email box. I figured that this way we could implement filtering and, if we didn't like it, we could move it off with just a DNS change. (The normal installation is to put it on the same box as the mail server but I didn't want to have to reconvert the mail server if I didn't like it.)

    Messagewall has worked quite nicely in cutting down spam and email-borne viruses. We've implemented it on a school district too. One of the great things about it (besides "free") is that it has upgradable definitions, it's dead easy to exempt a user from the service, and it's free (did I mention that?).

    --
    No one ever had to evacuate a city because the solar panels broke!
  113. Re:Sendmail + Trend Micro VirusWall + Trend eManag by odaiwai · · Score: 2

    That's basically my setup here as well, except that after virus checking, I pass the email onto procmail to have SpamAssassin run over it. *Then*, if it ain't spam, it get's forwarded to the Exchange server where a second, different virus checker scans it.

    I tried eManager, but it was awful. SpamAssassin is much better.

    dave

  114. WTF? by lscotte · · Score: 1

    This is just so wrong! My home/personal email account has received maybe 5 spam in 3 years.

    At work I receive anywhere from 10-50 per day - before filtering (where I can, one of my address is straight into a M$ exchange server which I can procmail on).

    --
    This post is licensed under the Creative Commons Attribution-Noncommercial-No Derivative Works 3.0 License.
  115. Re:Sendmail + Trend Micro VirusWall + Trend eManag by nbvb · · Score: 2

    Here's the question for you though ....

    Since I'm the Unix sysadmin, I built this thing. I also maintain the Sendmail piece of it. The NT admins maintain the ruleset on the spam & eManager rules on the Trend server. They use TVCS so they can update the rules on both of our gateways, as well as on the Exchange servers.

    Is spamassasin NT-admin-friendly? :) Does it have a web GUI front end thingy so they can point-n-click rules on and off?

    --NBVB

  116. IN SOVIET RUSSIA... by Pig+Hogger · · Score: 2

    ...SPAM RECEIVES THE USERS.

  117. Slashdot: number one source of humor by inkswamp · · Score: 2, Funny
    Thanks to a good job done by the tech staff and filtering software, office workers in the US are not bothered by spam mail and the value of email communications has not eroded.

    HAHAHAHAHAHAHAHA... HAHAHAHAHAHAHAHAHAHA... HAHAHAHAHAHAHAHA... HAHAHAHAHAHAHAHAHAHA... HAHAHAHAHAHAHAHA... *gasp*... HAHAHAHAHAHAHAHAHAHA... HAHAHAHAHAHAHAHA... HAHAHAHAHA... HAHAHAHAHAHAHAHA... HAHAHAHAHAHAHA...

    A survey conducted by Pew Internet & American Life Project, whose findings are reported in this article by MSNBC.com, found that spam is certainly a problem for personal email accounts but not for company provided email accounts.

    HAHAHAHAHAHAHAHA... HAHAHA... HAHAHAHAHAHAHAHA... HAHAHAHAHAHAHAHA... HAHAHAHAHA... HAHAHAHAHAHAHAHAHAHA... HAHAHAHAHAHAHAHA... HAHAHAHAHAHAHAHA... HAHAHAHAHAHAHAHA... HAHAHAHAHAHAHAAAAAAAAA...

    Thank you Slashdot for posting this hilarious article. It's almost as good as The Onion. It's nice to end the day with such a great laugh!

    --
    --Rick "If it isn't broken, take it apart and find out why."
    1. Re:Slashdot: number one source of humor by KlausBreuer · · Score: 1

      Well, apparently the Slashdot quote for the day is working for you :)

      (Quote has now changed - when I read this first, it was "The human race has one really effective weapon, and that is laughter. -- Mark Twain")

      Ciao,
      Klaus

      --
      Free PC version of ChipWits at http://www.breueronline.de/klaus/chipwits/
  118. YMMV, indeed! by CrystalFalcon · · Score: 2

    Who TF smoked up this article? Is it just me who gets tons of spam at work?

  119. Been there by CrystalFalcon · · Score: 2

    Oh. Sort of like when I got a mail from stevecase@aol.com asking me if I wanted a larger penis.

  120. Office Spam? Not a problem for me. by Anonymous Coward · · Score: 0

    I receive almost nothing at work. My work spam is stupid crap like somebody replying to all in response to the email that the benefits department sent out explaining the new dental plan. For some reason, everybody in the whole office needs to know if Derek Johnson over in Marketing doesn't know what "accrued" means in this context.

  121. You don't have to delete it immediatly. by RustyTaco · · Score: 1

    Having read the thread in -1 I feel I must add that you don't need to automatically delete anything when you're using a spam filtering system. For both my personal domain (lots of addresses each used for a different set of mailing lists) and my work acccount (oops, I have Key3Media my email, bad idea) I have SpamAssassin score the messages then have procmail throw the bad ones into a spam box. A quick scan of the subject lines in that box is enough to make sure that nothing was mistagged.

    It isn't perfect, I do get false positives but they are usually "You're the winner" messages from eBay sellers and are easy to spot and rescue. At work I go as far as to archive all messages for a month or two just in case something gets lost.

    I really should go through the archives and check the ratio of X-Spam-Status: Yes to No's is.

    - RustyTaco

  122. Spam is directly proportional to exposure by nich37ways · · Score: 1
    I have two e-mail addresses at home, one that I have been using for about 3 years and it receives a lot of spam, but everyone has it so it is difficult to change.
    While the other one I created around the same time and then never used.
    Both names are the same except the unused email address has '83' appended to it.

    I needed to use the second address a couple of days ago because I was sick of getting so much spam and decided I would start sending everything through the '83' address. When I logged in to the account for the first time in about 2 years there were a grand total of 2 Messages in it, both from my ISP.

    Which basically means no one has tried to generate or brute force my account. It's with iPrimus in Australia, they are reasonably large probably second or third for users in Australia. So they would make a fairly good target for spammers.

    nich

    --
    37 - what does it stand for really...
  123. Reality at last by melonman · · Score: 2

    Finally, an article that states the blindingly obvious but constantly ignored fact that spam is not about to destroy life as we know it. Can we move on and be paranoid about something else now?

    --
    Virtually serving coffee
  124. Re:Sendmail + Trend Micro VirusWall + Trend eManag by odaiwai · · Score: 2

    Some webmail type systems have a gui front end for Spamassassin - http://www.horde.org is one.

    To be honest, I don't change the rules much, just edit the whitelist.

    dave

  125. Scunthorpe by StrawberryFrog · · Score: 2

    anyone else with real names that hotmail doesn't like?)

    This is known generically as "the Scunthorpe problem". Scunthorpe, BTW, is a town in England. It's not a dirty word, except to regexp matches for c--t.

    --

    My Karma: ran over your Dogma
    StrawberryFrog

  126. Re:losing legit email because of spam filtering s/ by nzhavok · · Score: 3, Interesting

    That is how the spam war will end: The spammers will become sophisticated enough that no matter what we do, any filter we try to use will result in too many false positives (falsely labelled "spam") to be of any use

    At this point people will most probably switch to whitelists or somesort, however I had a horrible thought once when thinking about this.

    <horrible_thought>

    Another approach other than a whitelist is to include a signature like PGP in the email. This could be placed in the headers of the mail and attached by the mail client. Mail servers could have an option to check these signatures automatically, or the signature can be checked by the recieving mail client at the expense of a bit more bandwidth. Once the clients can transparently sign and verify messages this means that a user can choose to only to accept signed messages (i.e. I don't add you to a whitelist but you need a valid key). These keys need to be managed by some central authority which revokes keys if they are found to be used by spam, therefy causing all the messages sent to be useless.

    My horrible thought is that MS is in the best position to offer this becasue of the Outlook/Hotmail dominance. They would call it their spam inititive and ship all updates to outlook with this feature, the next update when the feature is widespread would auto-enable the feature. This would block out most mail to and from non MS agents in the name of fighting SPAM.

    </horrible_thought>

    --

    He who defends everything, defends nothing. -- Fredrick The Great
  127. Re:I agree -- BZZZ by SacredNaCl · · Score: 2

    The real problem with home users is that 0.04% of them (read morons) actually buy the stuff being solicited. Talk about a minority rule. The best anti-spam algorithm is thus: "Don't buy their shit".

    As much as I wish that were true, I know it isn't. Here is why: People still buy get rich quick schemes. This is how the spam mailing list and tools sellers pitch their scheme. "Just think about how you'll feel living in your new luxorious house, being your own boss, never having to worry about money, working the hours that you want to work...How it will feel to have more time with your family... The Amazing Spam-Money-Making System includes 100 million email addresses...."

    So, even IF no one was buying from spammers it wouldn't stop new entrants into the spammer business. They just can't seem to pass up that amazing money making oppurtunity available only for a limited time. ;-)

    --
    Freedom is merely privilege extended unless enjoyed by one and all.
  128. Why... by Junta · · Score: 2

    Most office workers don't use their work email address for anything much, so no one knows about their email address aside from maybe family and business contacts, of course spam will be lower. Any sort of server-side mail filtering is a gamble, to say the least. If anything gets mis-catagorized, it could be a disaster.... My company has discussed it and decided it is better to let users deal with it than risk trashing legitimate mail.

    --
    XML is like violence. If it doesn't solve the problem, use more.
  129. Am I more likely to get spam by Anonymous Coward · · Score: 0

    if I was given an email address of the form xyz12@my-university.edu (initials + number)?

    Seems to me, if you saw one such address, it'd be fairly trivial to come up with several thousand. I wonder if I might get less spam if they'd let me pick something less obvious.

  130. The Washington Post's take on study by rhwalker22 · · Score: 1

    Read Post reporter Shannon Henry's take on the same study -- online here.

  131. Spam is a nuisance at work, but... by dcavanaugh · · Score: 2
    We waste time on many things, spam being only one of them. In order (worst first):
    1. Telemarketers (we need a commercial statewide "do not call list"!)
    2. Virus hoaxes, cleanup & prevention (yes, we have multiple layers of defense)
    3. Fraudulent invoice scams (phone, fax, e-mail and snail mail)
    4. Spam
    5. Junk faxes
    Spam is only #4 on my list of unnecessary time wasters. The telephone will die as a business tool before e-mail does, because it's much easier to filter e-mail than it is to pre-screen a phone call.
  132. Can I have what MSNBC's been smoking? by casmithva · · Score: 1
    My experience has been exactly the opposite, without exception. This morning I found 34 pieces of spam in my work inbox -- that's 34 since 4pm on Friday. Despite being listed in Whois and posting in USENET, I have gotten maybe 34 pieces of spam in six months at my personal email address.

    I've complained about the spam situation more times than I can remember, mentioned how email addresses are being harvested off of our email servers, and described how much resource is probably being wasted processing and storing the spam, all to no avail. I mentioned anti-spam options, such as SpamAssassin, but nothing ever came of that, either. Perhaps I'm expecting too much from an IT department that's so heavily entrenched in Windows and Exchange...

  133. Spam from the Lord by Skidge · · Score: 2

    Maybe this isn't totally on topic, but it is about spam and I just read it hear at work. I just got a spam email about Jesus and how he can save me, including a handy little prayer that will start me on my way, and also a suggestion to go to Google and search on "Bible". There's also a nice little opt-out link at the bottom.

    Kind of caught me by surprise. I was expecting to delete my daily share of hot wet teen sluts.

  134. How about small business... by terraformer · · Score: 1
    ...who can't afford the time and the resources for filters and sysadmins to install the freebie solutions. Yeah, /.'rs are capable of doing this stuff in their sleep (myself included) but most small businesses don't have the resources of MSNBC and other Fortune 500s.

    Anyhow, the only workers inundated with spam are going to be those who post to internet sites and/or those who are responsible for reading email that comes into public email addresses (ie; webmaster, info, sales, etc). I am not surprised by the results.

    --
    Who are you? The new #2 Who is #1? You are #617565. I am not a number, I am a free man! Muhahaha.
  135. Hundreds and hundreds by Teko · · Score: 1

    ....that's how many spam emails I get each day. We're forced to use Mac Outlook here at work, which has no HTML support and extremely poor filters; I can't unsubscribe, I can't weed them out, so I delete, delete, delete. An average weekend generates 300-400 spam emails.

    And they're getting nastier. I went from tons of FTD.com and Perfumania emails to 50+ emails a day for rape porn, zoo porn, kiddie porn, and videos of people being bludgeoned. Jesus Christ, people. Leave me the fuck alone.

  136. They do it to themselves by rczyzewski · · Score: 1

    All but one of my users who complain about spam are actually receiving emails from sites they signed up for. It's amazing how a fiesty a 65 year old woman gets when you tell her the emails from eBay and hallmark are because she spends her time at work bidding on Beanie Babies and sending flowers.

  137. Don't preview spam by artemis67 · · Score: 2

    I'm always very careful about not previewing spam email. I try to select all of the messages as a group and delete them. It's fairly easy to tell from the subject and the sender which ones are spam; I don't have to preview messages with subjects like "Barnyard animals!" to know that I don't want it.

    Besides, previewing HTML spams only give the spammer the means to validate your email address and keep your account active.

  138. DUDE! by Neutropia_1 · · Score: 1

    You're not gettin' spam!!

  139. Search engines on websites by Corporate+Troll · · Score: 1
    Oh, any you think that is nessecary? Go look around on many companies websites, you can easily find email adresses. Some even list their complete databases.
    For example someone showed me this , while it is no company, it must be the spammers delight to find out valid email adresses. Just try for example the name "black" (made up name) and you already get three valid email adresses. How hard would it be to point a robot at it and fire up different requests? Worst is actually that there is much more information than just the email address. I even doubt about the legality of such a system.

    I'm pretty sure it's possible to find a lot of sites that allow this kind of functionality! I means, it's not as spammers shun from harvesting stuff from the whois database.

  140. Ditto that by Keeper · · Score: 2

    I just started using it about a week ago.

    Even after starting with a very small sample of messages to define each bucket, the accuracy of determinations was suprising. Over the last week or so I've been correcting it on the emails it gets wrong. It's accuracy has been increasing dramatically. I havn't had to correct any assessments for the last 2 days.

  141. Bandwidth theft notwithstanding? by Anonymous Coward · · Score: 0

    Yes, the article said most spam never makes it to the inbox. It was filtered at the firewall or mail server. This means bandwidth was still consumed and servers were still burdened with locating and terminating the junk mail. This is a direct cost to the receivers, who must spend more on bandwidth and servers to maintain an acceptable quality of service despite the performance penalty of dealing with spam. It's theft of service, plain and simple. Why is it not prosecuted as such?

  142. Google spam for a laugh by troysorzano · · Score: 1

    The top advert I get is from Microsoft.

    google spam results

    The advert
    Spam - Get Internet Service From MICROSOFT!
    join.msn.com Unlimited Access & Low Monthly
    Rate - Call 1-866-900-MSN8

  143. Now you are stretchign it by mindstrm · · Score: 2

    into the cost of fighting spam.

    People keep saying spam costs money. Show me how spam costs money to the isp if they aren't filtering it. How much money, and how much of the total cost.

    I don't know about you, but any ISP I've ever had doesn't filter my mail.

    You are ranting about spam being evil, but not providing numbers.

    Yes, it annoys people. So what. Lots of things annoy people. Once in a while you get a piece of gristle in your KFC burger.. so what.

    I want to see costs.

  144. They must be kidding! by Anonymous Coward · · Score: 0

    I wade through tons of spam at work. I do have filters on my email client, which at least redirects most of it out of my Inbox. But I'd say I still get dozens, if not hundreds, each day.

    I'm the sysadmin, though, so I guess I've got no one to blame but myself....

  145. Re: MS Exchange by tomoe27 · · Score: 1

    One of the other big offenders when it comes to spam is Exchange if the admin doesn't turn off anonymous LDAP. With anonymous LDAP, a harvester can easily harvest a list of every email address on that server.