MIT Spam Conference Conclusions

RT Alec writes "The 2003 Spam Conference has concluded, reports InfoWorld. (related read: abstracts of the conference discussions). I was unable to attend the conference, but it appears all that was discussed was filters (client and server). I think the key problem is ISPs that do not block egress traffic on port 25. If you need to send mail through a different SMTP server than provided by your ISP, the admin of that server ought to provide you with a means of using it with authentication on a port other than 25 (you do have permission to use that SMTP server, don't you?). It is not too tough to set up an SMTP server to require authentication, or at a minimum to run off a different port. I am suprised that this is never mentioned as a cure for spam. If just AOL blocked port 25, this could reduce spam by 50% (I base this figure on close examination of the headers of the spam I receive). I was pleased to see that Barry Shein, president of The World (a Boston based ISP) was included in the talks. I am not sure by the abstract (see link above) posted if he mentioned blocking port 25. In a recent interview he did not mention it."

Comments

AOL the source? I think not.

[Powercntrl]

I think AOL is really being blamed for a lot of spam it shouldn't be.

Send spam using AOL's e-mail client and your account is nearly-instant toast, thanks to automated rate-limiting software.

AOL set up rate limiting sometime around 07/98. Yes, it was THAT long ago. Note, as another poster has said, this wouldn't stop someone from using AOL as their ISP and connecting to another SMTP server for spamming purposes, but considering how slow (not to mention expensive) AOL-provided net access is, I doubt any real spammer would use it for even that.

Since most of the /. readers are probably not still using AOL, here's what can be found at AOL keyword: Rate Limiting.

America Online has received an overwhelming amount of complaints concerning unsolicited commercial e-mail, or "junk" mail, and we are doing everything we can to protect our members' online experience. Because many junk e-mailers collect screen names from AOL chat rooms, we put a "Rate Limit" feature in place to deter junk e-mailers from collecting member screen names from chat rooms. The Rate Limit feature is also used to deter members from sending mass numbers of e-mail, Instant Message(TM) notes, or Buddy Chat(TM) invitations that can disrupt the normal member experience.

AOL imposes a rate limit on an AOL member's account for any of the following:

* When a member exceeds the acceptable number of Instant Message notes or Buddy Chat invitations they send in a given time period.

* When a member exceeds the acceptable number of chat room changes or "Who's Chatting" requests in a given time period.

When an account is rate limited, the ability to send Instant Message notes and Buddy Chat invitations or to see who's chatting in a room or move from room to room is blocked for a certain period of time or the screen name's connection to AOL may be disconnected.

While we are working hard to stop junk e-mailers, there are steps that we also encourage our members to take to avoid junk e-mail. For example, you can create a screen name (Keyword: Names) that you use when you enter chat rooms, then use Mail Controls to block all e-mail to that screen name. When you want to e-mail with someone you meet in chat, give them your regular screen name OR go back to Mail Controls, select the "Allow e-mail only from selected AOL screen names, Internet domains, and addresses" option and add your friend's name.

AOL considers the sending of mass numbers of unwanted, disruptive messages or the gathering of AOL screen names to be abusive online conduct and a violation of AOL's Terms of Service. Rate Limits have been put in place to curtail abuse and ensure an enjoyable online experience.