Slashdot Mirror


Microsoft Going After Hotmail Spammers

Mirkon writes "Quoth The Register: "Microsoft has targeted spammers with a lawsuit aimed at bulk mailers who harvest email addresses of Hotmail subscribers in order to bombard them with junk." Details are apparently sketchy at this point, but it's nice to see America's favorite monopoly putting its power to good use." The original news.com.com story is slightly more informative.

314 comments

  1. So what.... by IWantMoreSpamPlease · · Score: 2, Interesting

    Now they are going to go after themselves?

    I created a hotmail account as a test purpose. I picked as odd a combination of names and letters I could, to the maximum allowed. I never used the account, nor told anyone about it.

    One month later the box was *filled* with spam. My guess is that MS itself sold the account to spammers.

    So let's see them go after themselves and fine themselves heavily. Or better yet, put themselves out of business.

    --
    So rise up, all ye lost ones, as one, we'll claw the clouds.
    1. Re:So what.... by robw47 · · Score: 5, Insightful
      The article says the spammers are harvesting the e-mail addresses.

      Why would MS sell your e-mail address so they can turn around and pay for the bandwith it takes to receive thousands of spam e-mails?

      Besides they have banner ads to serve you to make $$$

    2. Re:So what.... by Khalidz0r · · Score: 2, Insightful

      Well that's a weird case to be honest, because I have been using different kinds of account names to see which ones recieve less spam, and I have noticed that some kinds of names actually recieve more spam then others, most noteably first alphabet emails. I have recieved emails sent to names very simillar to mine (in the To list) in a brute force manner. Maybe you forgot to uncheck the addition to white pages or something? Because it is there by default, and if you have it checked then reasons of spam are obvious.

      --
      "What you 'seek' is what you get!"
    3. Re:So what.... by peterpi · · Score: 1
      One month later the box was *filled* with spam. My guess is that MS itself sold the account to spammers.

      Yeah, I just bet that's what they're doing, after all, Micro$oft Suxx0rZ and Linux is teh BOMB

    4. Re:So what.... by alx.slashdot · · Score: 4, Funny

      That might be just a new bussiness model. Invest in bandwidth to receive spam and then get your money back tenfold by sueing the spammers and winning the case...

    5. Re:So what.... by Anonymous Coward · · Score: 0

      I think you are right!

    6. Re:So what.... by christopher240240 · · Score: 1

      I have had a hotmail account for years, and yes, spam used to be a problem. But I would say over the last year I get maybe one spam per week on that account. I hear this all the time, but I never see the evidence. I don't even bother to set any particular spam filters (if there are any???) because it's not a problem anymore.

    7. Re:So what.... by Khalidz0r · · Score: 1

      http://www.theregister.co.uk/content/archive/17379 .html speaks about the fact that addresses are added to the white pages by default.

      --
      "What you 'seek' is what you get!"
    8. Re:So what.... by cribb · · Score: 1

      not only that, the spam is personally addressed to you.

      --
      Hostes alienigieni me abduxerunt. Qui annus est?
    9. Re:So what.... by u-235-sentinel · · Score: 2, Funny

      Actually Microsoft is suing spammers because they don't like the competition.

      --
      Has Comcast disconnected your Internet account? Same here. You can read about it at http://comcastissue.blogspot.com
    10. Re:So what.... by Bungie · · Score: 1

      Because it is there by default, and if you have it checked then reasons of spam are obvious.

      I think that the White Pages are responsible for most of the spam problems on Hotmail. One of my Hotmail accounts was created way back in '96 when it was a good idea to list yourself in the White Pages. That account receives tons of spam a day, all of it addressed to myself and all of the other listed Hotmail members who are alphabetically near me. The other account that I created for use with Windows Messenger receives maybe 3 spam messages a week.

      --
      The clash of honour calls, to stand when others fall.
    11. Re:So what.... by zuggy · · Score: 5, Interesting

      Why would MS sell your e-mail address so they can turn around and pay for the bandwith it takes to receive thousands of spam e-mails?

      Easy, to force people to return often to said free email account to delete spam on the very small capacity accounts, thus seeing more ad banners in the process...

      AND

      To frustrate serious users into shelling out money to purchase an account with a higher capacity

      You don't become a monopoly by thinking linearly!

    12. Re:So what.... by santos_douglas · · Score: 1

      Perhaps this will be the eventual basis for a lawsuit. MS itself could create a number of dummy accounts that are kept non-public. Spam the accounts receive could be tracked (maybe) and used as evidence that the spammers illegally attained the addresses.

    13. Re:So what.... by binner1 · · Score: 2, Funny

      I realize that this was a tongue in cheek post, but really, is it that far of a stretch. I can just imagine a room full of bean counters nodding agreement with the idiot who thought up the scheme.

      -Ben

    14. Re:So what.... by jumpingfred · · Score: 1

      Amazing I did the same thing and got not spam at all.

    15. Re:So what.... by babbage · · Score: 5, Informative
      I've been wondering about that since the Spam Conference last month, where both an engineer from Microsoft Research and a representative from Brightmail spoke about how they're trying to filter spam from large networks such as Hotmail and MSN. The scenario you describe is a common perception -- the most obvious explanation for the way even unused, "funny looking" (not dictionary words, numbers, etc) Hotmail addresses get so much spam is that the company must be selling their subscription list to spammers. But if that were actually true, then why are they putting so much effort into filtering out spam at both the network & mail client levels?

      A different idea that came up at the conference was what I'll describe as "bigger targets attract more arrows". That is, an ISP with millions of subscribers (Hotmail, Yahoo, AOL, Earthlink) is a more appealing target for things like dictionary attacks than, say, my personal DynDNS account with two legitimate users behind it.

      If you're going to carry out a dictionary attack against a domain, diminishing returns will take over for the little one (one billion tries, two hits -- 2e9%), but for the big one you can expect a reasonable hit rate (one billion tries, 3 million hits -- 0.003% -- and in fact a reasonably big fraction of all users on the network).

      In practice, this means today that the bigger the netwowrk, the greater the current spam volume, to the point that of the largest ISPs and corporate networks around today, something like 40% to 50% of their mail traffic is now spam.

      I think this is a better explanation for what's going at Hotmail et al., and it also does a better job of why they want so badly to control the spam issue. The explanation they'll give to the public is that this is good customer service, and to an extent that's true. But at the same time, trying to handle all this network traffic is probably a technical nightmare (and comments about the migration from FreeBSD to Win2000 are not helpful here :). For a free service, having to handle that much unwanted traffic is probably killing them, and bringing it under control for that reason is probably at least as important as maintaining customer good will.

    16. Re:So what.... by SB5 · · Score: 1

      I don't know what the hell you are talking about unless you signed up for random crap and didn't read everything when you signed up for the account. I have had my e-mail address for over a year, and I don't get any spam at all. At most I get a monthly e-mail from Microsoft itself that is clearly labeled as coming from Microsofts Hotmail service. I don't even have the paid account I have a regular free account.

      My spam filter is and has been off. I get at most two extra pieces of miscellanous spam from god-knows-where. Compared to my old e-mail on my ISP, which received at least 30 spam e-mails a day.

      --
      If what you are reading sounds funny, or sarcastic, lame, or stupid
      it is because it is supposed to be. just laugh
    17. Re:So what.... by gbjbaanb · · Score: 1

      you've just been lucky. One day someone will harvest your email address and then it'll spread around all the spam lists in the world.

      This happened to me - with my paid-for ISP email account. Some korean got hold of it, now all I get are mails for teddy bear shops and porn in a foreign language.
      I never bothered to use that email account as I had others my friends knew about.

      My hotmail account gets a fair few spams, but not nearly as many as that isp account.

      The moral of this reply - it isn't MSs fault here. Stop being partisan and focus on the real bad guys at least for this thread.

    18. Re:So what.... by kalidasa · · Score: 1

      RTFA. Microsoft is suing the spammers for using a type of dictionary attack to find valid hotmail addresses. Your test account would be vulnerable to that attack.

    19. Re:So what.... by SB5 · · Score: 1
      you've just been lucky. One day someone will harvest your email address and then it'll spread around all the spam lists in the world.

      This happened to me - with my paid-for ISP email account. Some korean got hold of it, now all I get are mails for teddy bear shops and porn in a foreign language.
      I never bothered to use that email account as I had others my friends knew about.

      My hotmail account gets a fair few spams, but not nearly as many as that isp account.

      The moral of this reply - it isn't MSs fault here. Stop being partisan and focus on the real bad guys at least for this thread.

      And the real bad guys would be the Saddam and Osama right?
      --
      If what you are reading sounds funny, or sarcastic, lame, or stupid
      it is because it is supposed to be. just laugh
    20. Re:So what.... by Guppy06 · · Score: 1

      "Why would MS sell your e-mail address so they can turn around and pay for the bandwith it takes to receive thousands of spam e-mails?"

      You're assuming they'd sell the addresses for less than the cost of bandwidth.

    21. Re:So what.... by Anonymous Coward · · Score: 0

      Christ...get real. Every single action MS does is not some conspiracy born of greed. Go make up some more imaginary evil intentions. Then get over it.

    22. Re:So what.... by Anonymous Coward · · Score: 0, Offtopic

      That's why I propose we bomb Iraq.

    23. Re:So what.... by Anonymous Coward · · Score: 0
      Why would MS sell your e-mail address so they can turn around and pay for the bandwith it takes to receive thousands of spam e-mails?

      Why would Sauron forge The Ring, only to let Isildur cut it off?

      Answer: Evil!!!!!!!!!!!!!!!

  2. A good start by interstellar_donkey · · Score: 5, Interesting

    Now if I could only get hotmail to stop spamming me. About once a month I get spam from hotmail under the guise of 'hotmail member services'. These junk emails have ads for all sorts of things, have little to do with the opperation of my email, and are annoying.

    You can't block this address (staff@hotmail.com), and there is no 'opt out' other then to stop using the hotmail service.

    Mildly tolerable and acceptable if you are getting the email for free, but unacceptable if you sign up for a years service and pay them. Needless to say, I did not renew my pay subscription.

    --
    The Internet is generally stupid
    1. Re:A good start by Anonymous Coward · · Score: 0

      HAHAHA, you *paid* them??

      hahahahahahahaha

      heh, whew, that was a great joke..

      wait, you weren't joking, were you?

      ahhahahahahahahahahahahahaha

      hahahahahaha

      hah!

    2. Re:A good start by tgagnon · · Score: 1

      I don't see how you can complain about one e-mail from hotmail per month. I mean, I get around 20-30 e-mails a day of just spam. What do I care if once out of those 30 days its 21-31? Even if you pay for the service (why would you do that anyways) I don't see how it can really bug you that much. I mean, people pay for cable, yet on every station there are loads of commercials every few minutes. Just bite the bullet and click the check box next to that e-mail, it takes about 3 secs and its only once a month.

    3. Re:A good start by Nurlman · · Score: 3, Informative

      > You can't block this address (staff@hotmail.com), and there is no 'opt out' other then to stop using the hotmail service.

      You can't block it (sneaky, Microsoft!), but you can sure as shootin' filter it. In Options|Custom Filters, put in a rule that redirects all mail from staff@hotmail.com right inot the trash. Or, if you're afraid of missing out on a valuable deal to get a bigger mailbox, you can always sort Hotmail Services e-mails to some junk mailbox that you only check intermittently.

    4. Re:A good start by Alan · · Score: 2, Informative

      Yes, I love how the junk filter setting of "only allow mail that I have explicitly allowed" blocks everyone but them.

      *sigh*

      Gotta love being a monopoly. Of course, depending on how you think of it, it's their service, so they can do what they want with it, no one is forcing you to use it.

      Well, no one except MS themselves, who force you to get a hotmail account for your .NET stuff, but no one is forcing you to use that.

      Well, except for MS who is building .NET into their OS, apps, and pretty much everything else they have, and they only have 90% of the desktop.

    5. Re:A good start by jdvernon1976 · · Score: 1

      true, you can't block the email address (they want to make sure we get all important messages from the account manager types)

      but you CAN set up a rule to delete any email from staff@hotmail.com

      i did it, worked fine, cleared the damn thing right on out

    6. Re:A good start by interstellar_donkey · · Score: 1

      oh, you may find this interesting:

      Beauty & Fashion FREE $100 Victoria's Secret Gift Certificate! Feb 19 6k
      jmbpspathighgate@min... Reminder. Amazing pathighgate.You gotta see i... Feb 19 2k
      DandyOffers Your Choice- VISA or MasterCard Feb 19 5k
      Wi-Fi Meetup Vote Now for the Next Wi-Fi Meetup Feb 19 1k
      TheCounterProfession... TheCounter.com Professional Edition - Februar... Feb 19 21k
      The Princeton Review Law School tips: Applications, Financial Aid,... Feb 19 39k
      Sex Sells I found financial freedom Feb 19 7k
      Ultimate Fitness Maximize Your Workout Feb 19 9k
      slashdot@slashdot.or... [Slashdot] Comment Moderation Feb 19 3k
      On Call Therapy We're here to help you manage your life's iss... Feb 19 9k
      Patrick [CVALE] installfest on the 22nd? Feb 19 2k
      slashdot@slashdot.or... [Slashdot] Reply to "A good start" by jdverno... Feb 19 2k
      TheCounter Weekly statistics for account: 1114005 Feb 19 7k
      Cupid.com Party Invi... Aardvo: Some recent articles from Cupid.com's... Feb 19 5k
      cyron Question about your Janet pack Feb 19 4k
      Cheap Tickets Introducing Web fares Feb 19 47k
      Jonathan Your Choice- VISA or MasterCard Feb 19 5k
      slashdot@slashdot.or... [Slashdot] Reply to "A good start" by Nurlman Feb 19 2k
      noreply@crossdaily.c... Christian Friendship - A Success Story - path... Feb 19 4k
      slashdot@slashdot.or... [Slashdot] Reply to "A good start" by Alan Feb 19 2k
      Jonathan Your Choice- VISA or MasterCard Feb 19 5k
      slashdot@slashdot.or... [Slashdot] Reply to "A good start" by jkrise Feb 19 2k
      slashdot@slashdot.or... [Slashdot] Reply to "A good start" by Skapare Feb 19 2k
      slashdot@slashdot.or... [Slashdot] Reply to "A good start" by tgagnon Feb 19 2k
      slashdot@slashdot.or... [Slashdot] Reply to "A good start" by Anonymo... Feb 19 2k
      slashdot@slashdot.or... [Slashdot] Reply to "A good start" by Anonymo... Feb 19 2k
      Fanball Football Fanball Football Newsbreakers ...
      mind you, this is with hotmails spam filter on max.

      --
      The Internet is generally stupid
    7. Re:A good start by Anonymous Coward · · Score: 0

      you CAN block these...

      Go to options, select the option for custom filtering, choose filter options so that email from staff@hotmail.com is deleted...

      works for me..

      ^_^

      Also do this for emails containing the words 'financial' and 'debt' and 'penis' as well

  3. In a word.... by earthforce_1 · · Score: 2, Interesting


    Yessssss!!!!

    I also use hotmail, and their filters are not as good as Yahoo's, because you cannot filter on message content, only header. I get an average of two spams a day in my hotmail account. I wish MS/hotmail would improve their inbox filtering, but I am glad to see them doing something about the problem.

    I have no problem siding with the Borg on this one!

    --
    My rights don't need management.
  4. I never thought I'd see the day but... by Nokey · · Score: 4, Funny

    *cringe* it is almost too hard to say but...

    Yay for Microsoft!

    *ugh* that was hard. And it still hurt to say.

    NoKey.

    --
    I'm sorry, but my kharma just ran over your dogma.
    1. Re:I never thought I'd see the day but... by Anonymous Coward · · Score: 0

      Take the tin-foil hat off. It didn't hurt to say, that's a lie, dick breath.

    2. Re:I never thought I'd see the day but... by Nokey · · Score: 1

      Anonymous Coward,

      I resent your reply because:
      1. I don't have a tin-foil hat (it's *aluminum-foil* thank you very much!).
      2. It *did* hurt (and who are *you* to judge *my* feelings).
      3. My breath smells of chocolate (currently).
      4. Your posting is flamebait.

      NoKey.

      --
      I'm sorry, but my kharma just ran over your dogma.
    3. Re:I never thought I'd see the day but... by Anonymous Coward · · Score: 0

      Generic Slashdot Loser,

      I resent your post because:
      1. You act like a slashbot group-mind node.
      2. You have a stupid ideological hatred that makes you act like a spoiled adolescent when things don't go your way.
      3. Covering up the smell of semen with chocolate doesn't change anything, dick breath.
      4. Your post is a whiny piece of shit. Grow a fucking backbone.

      A different Anonymous Coward.

    4. Re:I never thought I'd see the day but... by Nokey · · Score: 1

      A different Anonymous Coward,

      1. What is a "slashbot group-mind node"?
      2. My hatred is, indeed, at least partially ideological. It is also partially technical. But I am *really* puzzled why you think I am "acting like a spoiled adolescent". Besides, it actually seems things *are* going my way when someone (even MS) takes on spammers. I'd do this myself if I had the means. Or maybe send hitmen after them (now that *does* sound like a spoiled adolescent).
      3.1. If my breath would smell like semen this would make me a sexually active person, while point 1 of your reply seems to imply that I am not. Please remain consistent in your replies.
      3.2. Dicks do *not* smell of semen. I Know this for fact. You obviously don't.
      4. I do no need to grow a backbone. I already have, some 34 years ago and it works just fine (I can move my toes and anything above that).

      Additional comments:
      Your posting is also flamebait. It is, however, extremely amusing. Please post more replies, I really enjoy posting these tart replies!

      NoKey.

      --
      I'm sorry, but my kharma just ran over your dogma.
  5. brute force by solidox · · Score: 1

    given that apparently every word in the dictionary is registered as a hotmail email addy (so i read somewhere), a spammer could just run thru a dictionary and stick an @hotmail.com suffix and mail it, in fact... u could prolly just use an incremental brute algorithm and prolly get 100% hits upto about 5chars. i do suspect that microsoft sell there hotmail members email addresses, as someone posted earlier about an inbox being spammed even when it hasn't been given out, i've tried this too. uni diploma's is a popular one ;)

    --
    1. Re:brute force by Duds · · Score: 1

      I can't think they make much money from selling them these days

      because it's so much cheaper just to brute force given the likely success rate.

    2. Re:brute force by Anonymous Coward · · Score: 0

      a spammer could just run thru a dictionary and stick an @hotmail.com suffix and mail it, in fact... u could prolly just use an incremental brute algorithm and prolly get 100% hits upto about 5chars

      In that case he'd probably never use prolly@hotmail.com, huh?

    3. Re:brute force by Anonymous Coward · · Score: 0

      Yeah, people do that. WHat's more, they do it with combinations of words.

      I have 2 hotmail accounts. One was listed for some time in the member directory and receives tons of spam. The other one has never been listed and until recently had never received a single spam.

      This second account received one spam where many other addresses were cc-d. Looking at the other cc-addresses in the spam, it was clearly part of a dictionary attack of the form: _@hotmail.com.

  6. brute force spamming by vena · · Score: 4, Insightful

    One month later the box was *filled* with spam. My guess is that MS itself sold the account to spammers.

    Microsoft actually might be at fault there. Spammers have been bruteforcing honeypot domains for a few years now, sending spam to any and all combinations of letters and numbers. what doesn't bounce gets added to a "cleared" list and passed along, so the spam accumulates from there.

    1. Re:brute force spamming by kasperd · · Score: 1

      Spammers have been bruteforcing honeypot domains for a few years now, sending spam to any and all combinations of letters and numbers.

      Surely they can bruteforce some, but they cannot try all combinations. If the test addresses are long and random enough, they cannot be found by bruteforce. I wanted to try that experiment myself, but I wasn't even able to create an account on hotmail. When I was a hotmail user many years ago, it worked nicely in many browsers. And hotmail was even improved during the time I used it. I stopped using hotmail the day Microsoft bought it. But I did check if new mail arrived for some time after that, but Microsoft introduced more and more problems, and eventually I was no longer able to use it.

      And BTW, some of the spammers verifying addresses on hotmail have been using my honeypot, which they thought was an open proxy. My honeypot said OK to all of those addresses, so there will be invalid email addresses on their lists.

      --

      Do you care about the security of your wireless mouse?
    2. Re:brute force spamming by Anonymous Coward · · Score: 0

      What browser are you using? Lynx? I've used hotmail in the past few weeks with Mozilla 1.2, Phoenix, Opera 7 and IE. It worked fine with all of them. Even when MSN wasn't working with Opera, Hotmail still worked fine.

    3. Re:brute force spamming by Hellkitten · · Score: 1

      And BTW, some of the spammers verifying addresses on hotmail have been using my honeypot, which they thought was an open proxy. My honeypot said OK to all of those addresses, so there will be invalid email addresses on their lists.

      Just wanted to say thank you for making the job harder for spammers

      Now mod me off topic, it was worth it :)

      --
      - We are the slashdot. Resistance is futile. Prepare to be moderated -
    4. Re:brute force spamming by Anonymous Coward · · Score: 0

      What browser are you using? Lynx? I've used hotmail in the past few weeks with Mozilla 1.2, Phoenix, Opera 7 and IE. It worked fine with all of them.

      I have a Win2k box at home, and I've tried accesssing Hotmail with IE6, Phoenix 0.4 & 0.5, and Opera 5.12, 6.05 & 7.01. The only browser that was unable to show me my weekly spam was (*drum roll*) Microsoft's very own Internet Explorer (with all the latest patches installed, I might add). Weird.

      P.S.: My Phoenix (v0.5) doesn't seem to be able to submit anything to Slashdot at the moment. Opera works just fine. One would like to switch, but when the closed source alternative is this fucking good...

    5. Re:brute force spamming by IWantMoreSpamPlease · · Score: 1

      Several insightful posts here, many claiming a "dictionary type" of attack. I have yet to see the program the spammers use for this type of attack. I'm certainly not saying it doesn't exist, I just haven't seen one.

      But consider...if your email address name is 26 characters long (the maximum allowed by hotmail IIRC) the brute-force attack to get the proper e.mail address must take a *huge* amount of time, would that be worth it for one address??

      --
      So rise up, all ye lost ones, as one, we'll claw the clouds.
    6. Re:brute force spamming by kalidasa · · Score: 2, Insightful

      Yeah, but most folks tend to stick with shorter email addresses. E.g., less than 8 letters. If you can ignore case and punctuation, and numerics, and stick with 7-bit ASCII valid addresses, you would get 26^8. That's more managable; and you could limit it further by running a phone book's list of surnames in combination with initials.

    7. Re:brute force spamming by vena · · Score: 3, Informative

      various references for your amusement:

      http://www.wired.com/news/infostructure/0,1377,571 32,00.html

      http://www.spamhaus.org/newsdog.lasso?article=114

      http://www.unicom.com/chrome/a/000032.html

      the last one is of particular interest because it claims that Hotmail doesn't seem to do anything about these dictionary attacks:

      They have discovered that MSN/Hotmail seems to allow spammers to run long-lived dictionary attacks, in one case extending over five months in duration.

      as for software capable of launching this type of attack - there are already programs which exist for launching these attacks against authentication systems. those written in scripting languages (many of them are written in perl) are easily altered to attack a mail server.

    8. Re:brute force spamming by Anonymous Coward · · Score: 0

      I've been doing the "honeypot" thing also, and another thing I do is take advantage of their forms page. If you have your own web server and can run CGI's, you can do multiple forms submissions and give the spammers millions of honeypot addresses, polluting their mailing lists.

    9. Re:brute force spamming by Anonymous Coward · · Score: 0

      Many spam messages I get, are for Ad's for this kind of program. They won't call them "spammer programs", instead they are disguised as "Work at home" packages. So, when you send them $149 for your "work at home" package, you'll receive your very own SPAMMER KIT. In it, you'll recieve...

      1) Harvester program - you use to harvest Emails.
      2) Gatway finder - a program you use to find open gateways.
      3) A list of spam messages from companies who already want these messages scattered far and wide.
      4) A URL you use to send your reports on how many you sent so they can pay you.
      5) A spam mailer program you use to spam, including lots of forged return addresses (some even belonging to innocent people)

      Get yours today....

    10. Re:brute force spamming by Le+Marteau · · Score: 1

      If you have your own web server and can run CGI's, you can do multiple forms submissions and give the spammers millions of honeypot addresses, polluting their mailing lists

      Um, no you can't. You need an automated web CLIENT (e.g. a perl script) to do that not a web SERVER. What a nit wit.

      --
      Mod down people who tell people how to mod in their sigs
    11. Re:brute force spamming by kasperd · · Score: 1

      What browser are you using?

      I did the experiment last time I heard about this spam to unused addresses. I don't remember which browser I used, neither what problem I got. But I think it must have been a version of either Netscape or Mozilla.

      --

      Do you care about the security of your wireless mouse?
  7. It's a guessing game by fleener · · Score: 5, Insightful

    > My guess is that MS itself sold the account to spammers.

    The spammer probably used the dictionary-like-attack described in the Register article to guess your address. I receive all mail sent to my domain regardless of the address. I am the first and only owner of the domain, yet I receive spam sent to addresses I've never used. The spammers are clearly not bothering with harvesting addresses; now they're just making 'em up.

    1. Re:It's a guessing game by spacefight · · Score: 0

      1) Turn off catch-all
      2) Setup specified boxen.
      3) Get less spam
      4) ...

    2. Re:It's a guessing game by Jugalator · · Score: 1

      The spammer probably used the dictionary-like-attack

      He used a random mix of characters, so it would have to be a brute force attack in that case.

      --
      Beware: In C++, your friends can see your privates!
  8. I'm confused by Anonymous Coward · · Score: 0

    Why aren't linux vendors doing this? because they don't have the bling bling?

  9. I took Hotmail spammers to mean ... by Strike · · Score: 2, Interesting

    ... the people using Hotmail to spam everyone else. Like 50% of the spam that I get is from accounts like hotmail.com or yahoo.com, even on accounts for those very same domains and even with the spam filters for each of those domains on (set to "high" in Hotmail's case). Eliminating spam BEFORE it gets sent seems like perhaps a more important issue for everyone, but then again corporations doing what's best for them and not everyone isn't exactly news either (nor necessarily bad).

    1. Re:I took Hotmail spammers to mean ... by radish · · Score: 4, Informative

      Do you actually think the spam comes from hotmail? Have you heard of people forging from: addresses? Please, go read the SMTP RFC and come back when you have something to contribute :)

      --

      ---- Den ene knappen er powerknapp, den andre er Bender voice knapp "Bite My Shiny Metal Ass"

    2. Re:I took Hotmail spammers to mean ... by hoggoth · · Score: 5, Informative

      > spam that I get is from accounts like hotmail.com or yahoo.com

      Take a look at your full headers, those are forged.
      I filter out mail from @yahoo.com|@msn.com|@hotmail.com|@aol.com where the connecting host does NOT end in yahoo.com, msn.com, hotmail.com, or aol.com
      Just this alone got rid of 20% of my mail (all spam, never a false positive).

      --
      - For the complete works of Shakespeare: cat /dev/random (may take some time)
    3. Re:I took Hotmail spammers to mean ... by Guanix · · Score: 1

      I think the point is that they're not send from inside Hotmail, but that the From: addresses are genuine Hotmail mailboxes that are used by people who want their penis enlarged. Spammers probably have their own dedicated servers for actually emitting the mail.

    4. Re:I took Hotmail spammers to mean ... by Steve+B · · Score: 2, Interesting

      The spam dropboxes (the address for suckers to reply) often is on hotmail. Whenever I report one, the drones send a message a few days later asking if the issue has been resolved (yeah, right, I'm going to try to send mail to a spam drop box to find out whether or not you bothered to do your fscking job and nuke it).

      --
      /. If the government wants us to respect the law, it should set a better example.
    5. Re:I took Hotmail spammers to mean ... by Mr_Silver · · Score: 1
      Take a look at your full headers, those are forged.
      I filter out mail from @yahoo.com|@msn.com|@hotmail.com|@aol.com where the connecting host does NOT end in yahoo.com, msn.com, hotmail.com, or aol.com

      Neat idea and would go great with my current spam filters.

      I don't suppose you would be so generious to share with us the procmail lines you use to do this? Would be appreciated.

      --
      Avantslash - View Slashdot cleanly on your mobile phone.
    6. Re:I took Hotmail spammers to mean ... by hoggoth · · Score: 1

      > share with us the procmail lines you use to do this

      Sorry, not procmail. It's a sendmail milter. A Perl program that uses the Sendmail MILTER API to filter mail as it comes in, before it sits in my mail queue.

      --
      - For the complete works of Shakespeare: cat /dev/random (may take some time)
    7. Re:I took Hotmail spammers to mean ... by Anonymous Coward · · Score: 0

      The SMTP RFC won't do you much good (We'll, you'll understand how MAIL FROM: relates to the From: header). There is a second RFC (2822, if I remember correctly) which defines the standard mail headers (As well as encodings and other stuff you need to send an email).

      I'll stop being a pedent now.

    8. Re:I took Hotmail spammers to mean ... by Reziac · · Score: 1

      Spam truly from Hotmail used to be a problem, but Hotmail was *always* good about nuking accounts within minutes of being notified of abuse. And I haven't seen a spam with a *legit* Hotmail header in 3 or 4 years now.

      There *are* still spams coming from legit Yahoo addresses, tho they're no longer common.

      --
      ~REZ~ #43301. Who'd fake being me anyway?
    9. Re:I took Hotmail spammers to mean ... by Pieroxy · · Score: 1

      Well, I actually think that they do. The point here is most likely to protect hotmail users from spam coming from hotmail. I suspect that you can't send an email through the hotmail's SMTPs giving an hotmail email address as the FROM. Hotmail users send their emails through the web interface instead of an SMTP connection.

      So that means that if you want to send spam that looks like it comes from hotmail to hotmail users (who are likely to not set "@hotmail.com" in their blacklist because they have a lot of friends on hotmail), then you have to use a robot to send emails through a valid hotmail account.

      My .02

    10. Re:I took Hotmail spammers to mean ... by Anonymous Coward · · Score: 0

      Out of 2964 spams (to my hotmail account) I've kept the from address for:

      442 yahoo.com
      169 hotmail.com
      155 msn.com
      107 aol.com
      86 excite.com
      28 netscape.net
      27 hotbot.com
      23 juno.com
      lycos.com
      20 earthlink.net
      17 eudoramail.com
      15 prodigy.net

      compuserve.com, cs.com, flashmail.com, geocities.com, mail.com, email.com, and mailexcite.com are some also-rans.

  10. One spam a month? BIG DEAL by Anonymous Coward · · Score: 0

    "Now if I could only get hotmail to stop spamming me. About once a month I get spam from hotmail under the guise of 'hotmail member services'. These junk emails have ads for all sorts of things, have little to do with the opperation of my email, and are annoying."

    All things considered, ONE spam a month from Hotmail goes way way under the spam annoyance radar. (I think I get 2 or 3 of them, actually, and do not mind it). I've never minded very small amounts of spam from the e-mail provider.

    Did you know, at one spam a month, it probably took you as long to type your complaint about Hotmail spam as it did for you to delete an entire year's worth of such spams? Put it into perspective.

    Now, if you still don't want them, are you capable of blocking any header containing "taff" as a way around the block?

  11. paying for bandwidth by ebuite37 · · Score: 2, Interesting

    Microsoft sick of paying for bandwidth? NO! They get paid for giving out their emails. I used to use hotmail before it was bought by MS, and I never got spam. All the sudden I started receiving tons of it after the purchase. I wrote Hotmail tech support to complain, who responded by telling me they have to pay for the service somehow. That was six years ago, but I believe it still happens. Why else does their spam filters filter one porn subject line but ignore another with the same or similar strings?

    1. Re:paying for bandwidth by user+no.+590291 · · Score: 1
      Why else does their spam filters filter one porn subject line but ignore another with the same or similar strings?

      My guess would be that they're using an IP address-based blocklist and one porn subject line came from an address on the blocklist, and the other didn't.

    2. Re:paying for bandwidth by Anonymous Coward · · Score: 0

      Dude, Hotmail did *not* email you saying they spam accounts because they have to pay for their service somehow. Liar.

  12. Not true... by dotgod · · Score: 4, Insightful

    There are programs out there that generate random email adresses for a given domain. There is no way Microsoft would do something so stupid. Why does everything posted about MS on Slashdot have to be some kind of conspircy?

    1. Re:Not true... by Christianfreak · · Score: 2, Interesting

      Its a conspiracy because many of us used hotmail before it was bought out by the Borg. I used it for 2 years and got maybe 5 spams. It wasn't more than a week after MS bought it and it started getting flooded with spam. At that point I quit using it. I don't remember what the password to the account is now (and MS in their infinate monopoly spirit will only let you retrieve your lost password if you have IE), I shudder to think of what is in that account now.

    2. Re:Not true... by ceejayoz · · Score: 2, Insightful

      Part of that could be the increase in popularity and name recognition that would be happening when MS buys a formerly independent site.

    3. Re:Not true... by Sodium+Attack · · Score: 0, Flamebait

      Why does everything posted about MS on Slashdot have to be some kind of conspircy?

      Because at least 80% of /.ers' heads would explode if they actually tried to wrap their minds around the concept of MS doing something good.

      --

      Never take moderation advice from sigs, including this one.

    4. Re:Not true... by jpmorgan · · Score: 2, Funny
      More likely some disgruntled employee didn't like the buyout and took matters into his own hands.

      Even if Microsoft intended to do that, I question whether they could actually move on the issue of selling a subscriber list so quickly.

    5. Re:Not true... by Reziac · · Score: 1

      Actually, hotmail was THE place for free web-based email long before M$ bought it.

      --
      ~REZ~ #43301. Who'd fake being me anyway?
    6. Re:Not true... by benzapp · · Score: 1

      It wasn't more than a week after MS bought it and it started getting flooded with spam.

      Bullshit. I don't even remember when Microsoft purchased hotmail. What I do know is spam did not become a serious problem until the last 1.5 years. Spam has always existed, going back for 8 years. But around summer of 2001, I would get 50+ spams a day, so much that I would have to check my email constantly less I go over my limit. It was never like that, even the first two years of MS's ownership of the company.

      --
      I don't read or respond to AC posts
  13. See, I told you so by ksplatter · · Score: 1, Funny

    I have always said that Once Microsoft Rules the World things will go much smoother. If anyone has a problem with anything (SPAM, Computer, Entertainment center, fridge, toilet ...) there will only be one support line!

    I Can't wait!! The Possibilities are endless.

    yours truly,
    Gill Bates

    1. Re:See, I told you so by aborchers · · Score: 1

      Don't forget that this line will be pay-by-incident...

      --
      Trouble making decisions? Just flip for it.
    2. Re:See, I told you so by Palos · · Score: 1
    3. Re:See, I told you so by Rip!ey · · Score: 1

      Ahh, so thats why I've seen footage of Steve Balmer hopping around like a mad monkey. He's dying for a piss and can't find the bathroom ...

  14. In other news... by Ranger+Rick · · Score: 2, Funny

    ...it's time to allow women to vote!

    Seriously, while it's good they're finally doing it, why weren't they doing it years ago?

    --

    WWJD? JWRTFM!!!

  15. Using their power for good use.. by oZZoZZ · · Score: 5, Insightful

    HAHA. that's funny. I can think of three reasons to do this:
    1. The spam is costing them insane amounts of money in bandwidth

    2. People stopped using MSN hotmail because of the spam, and they need more subscribers to look better compared to AOL.. because potentially Microsoft could boost it's "MSN Userbase" by including some hotmail users

    3. More money. This option is unlikely, since Microsoft probably won't gain any money directly from the lawsuits, but I guarntee that more userbase + less bandwidth fees because of spam = more money in the long run for msft.

    1. Re:Using their power for good use.. by ManUMan · · Score: 1

      Amazing. A company that has shareholders that cares about the amount of money it costs them to do business. MS really is a good citizen for caring about their bottom line.

      --
      If you are never moderated, do you really exist?
    2. Re:Using their power for good use.. by Matty_ · · Score: 2, Interesting

      As a somewhat former mali server administrator, I would say that the intense amount of SPAM being sent to hotmail.com has a lot do with the decreasing availibility of MX's for hotmail.com. I remember watching the Postfix logs one day and it received "connection refused" messages one right after another until it finally found an MX that responded to it, which was maybe the fifth or sixth one it tried.

    3. Re:Using their power for good use.. by gosand · · Score: 1
      HAHA. that's funny. I can think of three reasons to do this: ((snip))

      Or maybe it is as simple as EVERYONE HATES SPAMMERS! Even Microsoft.

      Or maybe it is just because there is something out there that Microsoft doesn't own. It could be that one of the stipulations of the lawsuit is that Microsoft is allowed to purchase the spam harvesting intellectual property rights. ;-)

      --

      My beliefs do not require that you agree with them.

    4. Re:Using their power for good use.. by rhizome · · Score: 1

      4. Hotmail is planning an advertising campaign.

      --
      When I was a kid, we only had one Darth.
  16. that's funny by Anonymous Coward · · Score: 0

    i have a hotmail account with a relatively simple name - it certainly doesn't employ any literary gymanastics. i've had this account for, oh, probably a good 6 months and i've probably received, on average, 1, maybe 2 messages from Hotmail services per month. this can be annoying if you let it, but i hardly call it *filled.* anyway my point is ...

    come to think of it i really don't have one.

  17. err, i meant *NOT* be at fault :) by vena · · Score: 1

    sorry about that ;)

  18. No e-mail monopoly. Get real! by Anonymous Coward · · Score: 5, Insightful

    "Instead they use Hotmail. Which means that M$ effectively controls all Internet email"

    Huh? When there are dozens if not hundreds of alternative e-mail services that you can easily use from anywhere for free? Not even close. In fact, in the e-mail I receive, only a small percentage come from people using Hotmail.

    "If they start filtering stuff out--even spam--then they are abusing their monopoly power to limit free speech"

    No, it is their network. Free speech is not an issue; you are a guest on their system. Just as it does not violate "free speech" if the New York Times does not bother to print your latest letter about jet contrails.

  19. Just do this by eonblueye · · Score: 5, Informative

    Just keep your name out of their Member Directory and you will be spam free. I've had my Hotmail account for years spam free.

    --
    +++ David Watts 5495 0.0 0.5 1888 884
    1. Re:Just do this by Mostly+a+lurker · · Score: 1

      I am very careful always to opt out of any directory listings. Twice, Hotmail has added me to their directory without my permission.

    2. Re:Just do this by Anonymous Coward · · Score: 0

      Absolutely true- anyone who has done this, and has a resonable address (ie. eleven character, mixture of letter and numbers) will find they will get no spam.

    3. Re:Just do this by PepperedApple · · Score: 1

      Actually if you've read the article, the spammers didn't get the email addresses from the directory, they got it by randomly choosing dictionary words to guess people's emails.


      In this case, the program guessed millions of random e-mail addresses to see which ones were active, Microsoft alleged.


      It's just another reason to never reply to spam.

    4. Re:Just do this by quacking+duck · · Score: 1

      I'm sure the member directory plays a significant part. A year ago I created an email addy with them but forgot to opt out when registering. The name was a very obscure Babylon 5 alien reference (i.e. doesn't resemble any dictionary word); many fans don't even know about it. But the VERY NEXT DAY I had 5 spams sitting in my inbox. I hadn't even used it yet.

      I wonder also if using MSN Messenger increases the chances of you getting spam; is there an MSN site that lists users who are online?

      Last week I created another email with them. Name is far more obvious, but I opted out from the beginning, haven't used Messenger with it, and have given it out to a couple of friends. No spams yet (knock on wood)

    5. Re:Just do this by Piquan · · Score: 1

      I don't know whether it's Messenger or Hotmail, but...

      I recently got a Hotmail account just to use Messenger (the question of why I needed Messenger-- actually, kMerlin-- isn't worth going into). I set up my Hotmail account and Messenger account nearly the same time.

      In under five minutes, my Hotmail account was getting spam. Yes, I opted out of the directory, and my addy is not in the dictionary. But still I was getting spam.

      The only thing I can figure is that Microsoft is giving out the email addys!

    6. Re:Just do this by Jucius+Maximus · · Score: 1
      " I'm sure the member directory plays a significant part. A year ago I created an email addy with them but forgot to opt out when registering. The name was a very obscure Babylon 5 alien reference (i.e. doesn't resemble any dictionary word); many fans don't even know about it. But the VERY NEXT DAY I had 5 spams sitting in my inbox. I hadn't even used it yet."

      Spambot databases have very low lag. One time, as an experiment, I un-spam-armoured the e-mail address attached to my slashdot posts, and then I posted some messages. Within eight hours, I had spam. Fortunately for me, Sneakemail allows me to generate a new 'relay address' instantaneously.

  20. Mail readers. by IncarnationTwo · · Score: 2, Interesting

    An intresting widget for a mail reader would be a "spam button". It deletes the spam, blacklists the spammer, and sends an error message to the spammer... Like the one you get when there is no address with that name.

    Are there any mailreaders with thatkind of widget?

    --
    In dream society, people could be given the ability to mod replies. In real life, it would be disaster.
    1. Re:Mail readers. by MindStalker · · Score: 2, Informative

      Mozilla has a "Junk" button, it blacklist the spammer, creates a holistic statistic based on all spam blacklisted to help in guessing future spam and can automatically delete it. Now if someone will just hack in a bounce message.

    2. Re:Mail readers. by chrisseaton · · Score: 1

      Do your really think spammers check the accounts they send from?

    3. Re:Mail readers. by mce · · Score: 1

      Sounds nice, but the last thing that I need is even more people telling me not to spam them about diplomas from prestigious non-accredited universities (as if such a things existed...). It's not me who is spamming them, it's some !@#$%^&* idiot *ssh*le out there who is illegally abusing my e-mail address. Grrr...

    4. Re:Mail readers. by Anonymous Coward · · Score: 2, Informative

      For Windows there is Mailwasher

    5. Re:Mail readers. by Daniel+Dvorkin · · Score: 2, Interesting

      Apple's Mail.app for OS X has such a feature. The first few times you run the program, it runs in "training" mode -- you get all the messages in your inbox, it marks what it thinks is and isn't spam, and you tell it if it's right or not. When you're satisfied, you switch it to regular mode, which is pretty much the same except that the messages it marks as spam get sent either to a special "Junk" mailbox, or the trash, your choice. You can always tell it if it makes a wrong choice, and if you mark a message as spam, it sends it off to the Junk box for you and ... does whatever it does to learn the changes. I usually have it send the marked messages to Junk rather than straight to the trash, since I like to look through the subject lines and senders to make sure there aren't any false positives before I delete them.

      It's very, very good. I'd say I haven't had any false positives since training it early on (some of the mailing lists I subscribe to tend to look a lot like spam, but it picked up on those fast) and I get very few false negatives, under 5%. It's not perfect, but it's a good start. It also has a "Bounce Message To Sender" option that I rarely use, since what usually happens is that the message gets bounced right back to me -- forged headers, etc.

      --
      The correlation between ignorance of statistics and using "correlation is not causation" as an argument is close to 1.
    6. Re:Mail readers. by GregWebb · · Score: 1

      What version? I'm running Win32 1.2.1 at home and would love that function but don't have it.

      --

      Greg

      (Inside a nuclear plant)
      Aaaarrrggh! Run! The canary has mutated!

    7. Re:Mail readers. by jweb · · Score: 4, Insightful

      All fine and good, as long as the reply-to address isn't forged.

      Case in point: About 3 weeks ago my email was flooded with bounce-backs from spam. Apparently someone had used my email address in a forged From and Reply-To header. I recieved about 300 of these messages in 5 hours.

      In your scenario, suddenly my email address is blacklisted, not the spammers. Oh well, guess it's time for a new Hotamil address anyway. (BTW, I do have another Hotamil address, that has never recived a non-"Hotmail member services" spam. I think the trick was to put nonstandard characters in there, that particular address has an _ character in it).

      --

      Think For Yourself. Question Authority.
    8. Re:Mail readers. by Erasmus+Darwin · · Score: 4, Informative
      "sends an error message to the spammer... Like the one you get when there is no address with that name."

      The problem is that spammers who're searching for valid addresses generally check whether or not an error occurs at the SMTP level. When the message is in your mailbox, it's already too late.

      First, the spammer connects directly to your server and checks how you handle invalid addresses (by sending an email to an almost guaranteed bogus account). If your mail server rejects mail to the test address, the spammer then begins doing a dictionary-based attack. If any mail gets through, that address goes on the spammer's list of valid targets.

    9. Re:Mail readers. by ceejayoz · · Score: 3, Informative

      1.3b is the first version to have it - phenomenal! :-)

    10. Re:Mail readers. by mark_lybarger · · Score: 1

      i hate spam to, but i don't think there is or should be anything illegal about it. i certainly don't think the spammer is abusing your email address, they're merely using their address/servers/whatever.

      if i send the same messages via snail mail is it illegal abuse of your home address? if i ask the same question personally to people on the street ("hey, you.. wanna larger groin/chest?"), is it abusing their personal address?

      spam is a technological problem to a technoligocal system that warrants a technological solution. it does not and should not warrant a legislative solution. the legislature is not a playground supervisor.

      again, yes, spam is annoying. yes, the spammers could find more appealing ways to earn a living. no, congress does not need to be involved (unless other crimes are being committed "send 5$ to me to save for my kidney transplant that is needed")

    11. Re:Mail readers. by kasperd · · Score: 1
      Like the one you get when there is no address with that name.

      That is probably not possible.
      1. The error is generated by the sending mailserver, not the receiving mailserver. The sender is told already when sending wether the destination address is valid, so once your mailserver has said OK, it is already too late.
      2. The sender address could be invalid, so the generated error message could be send to somebody else.
      3. You would live in a constant risk of blacklisting a valid sender address.
      --

      Do you care about the security of your wireless mouse?
    12. Re:Mail readers. by Bilbo · · Score: 4, Interesting
      > i hate spam to, but i don't think there is or should be anything illegal about it.

      Heh... You've obviously never been on the receiving end of this little trick. You'd quickly change your pretty little tune after receiving several thousand hate-mail messages, and had your ISP account cancelled because you were "generating illegal spam and violating the User Agreement," and then got blacklisted from other ISP's because you were a known spammer, and had people hacking into your computer to get back at you and... well, need I go on?

      > if i send the same messages via snail mail is it illegal abuse of your home address?

      Ummm.... that's called Mail Fraud, and carries heavy fines, and jail time if you do it enough.

      --
      Your Servant, B. Baggins
    13. Re:Mail readers. by twofidyKidd · · Score: 1

      You might be onto something. My address contains an underscore and to date, I never receive more than 6 "spam" messages in a week to my hotmail account.

      I think the user of the account has to take some responsibility in avoiding spam. I realize its a pain in the ass, but were all aware that spam is a fact of life, so taking some accountability in whether you're getting flooded by it or not is something we should get used to.

      --


      Hades, PoD: Official Advocate
    14. Re:Mail readers. by aridhol · · Score: 1
      The error is generated by the sending mailserver, not the receiving mailserver. The sender is told already when sending wether the destination address is valid, so once your mailserver has said OK, it is already too late.
      Not true. The error is generated by the receiving mailserver, which is why bounce messages all have different formats, even if you use the same outgoing server. Besides, if bounce messages had to be created during the initial contact, relaying wouldn't work.

      For example, my college received all email on one system, then relayed it to the appropriate department's mailserver (behind the firewall). So the college would always accept the message, then forward it to the department server, which would then create the bounce.

      However, none of this would work anyway, because a bounce is only useful if the spammer actually receives it, which they don't because they use fake email addresses.

      --
      I can't say that I don't give a fuck. I've just run out of fuck to give.
    15. Re:Mail readers. by aridhol · · Score: 1

      The parent isn't talking about receiving spam. He's talking about spam being sent with his own account as the sending address. The abuse of the parent's address is the fact that he is listed as the return address, not the recipient address.

      --
      I can't say that I don't give a fuck. I've just run out of fuck to give.
    16. Re:Mail readers. by Anonymous Coward · · Score: 0

      or spamx for linux: http://freshmeat.net/projects/spamx

    17. Re:Mail readers. by mark_lybarger · · Score: 1

      breaking into one's computer is another crime, sending spam isn't. the spam is merely a motivation for the crime. holding up a liquor store is a crime, drinking liquor isn't, but is a motivation for the crime.

      if my mailings are to sell you a groin enlarger, or a student loan consolidation, or a visa card, or a service to find all the public information on your long lost "friend", then it's a legitimite business. no fraud. no mail fraud. yes, some people choose to walk the fine line between fraud and a legitimate business.

      in any case i believe that spam mailing (sending an unsolicted email message) should not be regulated by congress. hacking into someone elses computer, physically gaining access to their resources should be highly illegal and we shoudl send folks to jail without bail for a long time and not let them make any phone calls for fear that they could send off a nuclear wepon from the phone. seriously, hacking anothers computer should be a serious offense that congress should regulate. the constitution allows people to have private property. congress has the authority to protect that right with laws that punish people for violating others rights.

    18. Re:Mail readers. by Hellkitten · · Score: 1

      The parent isn't talking about receiving spam. He's talking about spam being sent with his own account as the sending address. The abuse of the parent's address is the fact that he is listed as the return address, not the recipient address.

      This is the reason why mailservers should be a lot smarter about bounce messages. When a server recieve an email for a non existing user it shouldn't simply bounce the message. It should check the message against some kind of spam filter and bounce only if the message doesn't look like spam.

      This will make things much easier on the poor guy that has his email used as a reply to adress. In addition if a spammer uses an address he owns as reply in order to clean his address list from invalid addresses this will mean the list will still contain non existing addresses, making it cost the spammer more to reach the same number of real people

      --
      - We are the slashdot. Resistance is futile. Prepare to be moderated -
    19. Re:Mail readers. by mce · · Score: 1

      Computer break in is not the issue here. Identity theft is the issue.

    20. Re:Mail readers. by sirinek · · Score: 1

      They have something that can do all of that for you.

      1) You can send a bounce message back to the spammer.

      2) You can blacklist the spammer

      3) Caught spam doesnt get deleted, but automatically put into a quarantine folder.

      It even keeps "spam definitions" which it updates periodically much like virus software. Its very nice.

      Its a $$ product, but worth it, its called Spam Inspector and you can get it from http://www.giantcompany.com

      siri

    21. Re:Mail readers. by milkman_matt · · Score: 1
      An intresting widget for a mail reader would be a "spam button". It deletes the spam, blacklists the spammer, and sends an error message to the spammer... Like the one you get when there is no address with that name.

      Are there any mailreaders with thatkind of widget?

      For windows there's a program called MailWasher that i've had a LOT of success with... it's really only good on a Monday morning, because you don't run it all the time.. but basically you just put all of your accounts in it and it will check every account against whatever blacklists you want, along with its own rule sets (and yours) and tags things as spam.. you just have to make sure there's no false positives, then hit 'process mail' and it will bounce back and blacklist every address that was tagged, then remove them from your server.. then when you go to check it with your mail program, you have nothing you don't want..

      I wish there was a way this could be plugged into a mail program. As for myself, I just use the Junk option in Mail.app which just puts them in a Junk folder.. but it'll do for now.

      -matt

    22. Re:Mail readers. by Anonymous Coward · · Score: 0

      I would not rely on the _, I have one and I've been getting spam there for years.

      In all fairness, this is the address I use when I have to give out my email address to someone other then a blood relative, of course some of them only get the hotmail address too!

    23. Re:Mail readers. by GregWebb · · Score: 1

      Roll on 1.3 final then :-)

      Wimp, I know, but I've got far too much archived mail to trust anything with an a or b in its version number ;-)

      Only a couple of weeks now, according to that roadmap.

      --

      Greg

      (Inside a nuclear plant)
      Aaaarrrggh! Run! The canary has mutated!

    24. Re:Mail readers. by Anonymous Coward · · Score: 0

      Well consider this:

      Legitimite snail mail has an appropriate address to opt-out, as well as some identification of the marketing firm that sent it out.

      Spam, to my knowledge has never had the marketer's name behind it (only the item being marketed), and to make matters worse the headers are forged to make tracing difficult at best. That is not marketing, marketing is not supposed to alienate. It's just pure harassment.

      Basically until these guys get the cajones to be professional about it, then we need legislation.

    25. Re:Mail readers. by aedan · · Score: 0, Troll

      Mail for Mac OS X can learn junk mail addresses and trash them for you. It can also bounce mail back to the sender. Like another poster here I usually find the sender doesn't exist.

      aedan

    26. Re:Mail readers. by Sir+Tristam · · Score: 1
      i hate spam to, but i don't think there is or should be anything illegal about it.
      Okay, we'll leave out all the stuff about theft of service and such, and just stick to what the guy you're replying to was complaining about.

      Imagine that a spammer didn't want to get all the bounce messages, complaints and death threats that the latest round of spam he was sending out was sure to elicit. So, he decides to forge the header on the message to have a 'From' and 'Reply-to' that has YOUR email address. (He only cares about people who click on the link in the message and go to the web site to order.) So now for every invalid address the spammer sends the message to, you get a bounce message in your mailbox. Every time somebody who gets the message hits the 'Reply' button and sends of a message saying, "Listen you no-good, mother-loving, slime-crawling, cess-pool polluting, lower-than-a-lawyer-who's-a-politician spammer, if I ever find out who you are I'm going to rip your head off and tie it back on to your arse with your own intestines", you'll get that message.

      That's what the guy you were replying to was complaining about, and it's called a 'joe job'.

      But hey, that's okay, because you don't think there's anything wrong with spam. Even though they are all theives, and they defame innocent people.

      Chris Beckenbach

    27. Re:Mail readers. by mark_lybarger · · Score: 1

      i obviously didn't get that the OP was talking about a joe job.

      but a joe job sounds like an impressionist, or an actor, someone pretending to be someone they're not. in the emailing world we'll call it fraud, in the entertainment world they call it good acting. go figure.

      if we want our message to be authentic, then why are we using a protocol that allows anybody to sign anything for the "reply-to" portion of the email header? i use to try to keep my yahoo/hotmail box clean of spam by clicking on the remove me buttons or replying to the messages. complete waste of time. now i've got a private email that seems to work ok.

    28. Re:Mail readers. by Anonymous Coward · · Score: 0

      When a server recieve an email for a non existing user it shouldn't simply bounce the message.

      That's right. It should also add that source address to a list, and immediately start returning temporary failures for any further delivery attempts from that host.

      Anyone with a few months worth of mail logs should be able to identify the same never-valid accounts that are passed around by spammers. Some are truncations of real accounts. Some are misspellings used on web forms that don't confirm subscriptions. There are plenty of other possibilities.

      One thing is clear: once you know what they are, you should do something about it rather than watch your mail server chug out "550 User unknown" every couple of days. If you halt mail from that host until someone can review the situation, you have the potential to stop bunches of spam.

      The reasoning is simple: any host that mails one of my spam traps is either a spammer, is being abused by a spammer (open proxy/relay/formmail), or has clueless users. I don't want to receive mail from anything of the sort.

      Even if spammers try to work around this by only abusing one relay/proxy per recipient, they just run out the supplies of vulnerable boxes faster. That's where the open proxy/relay DNSBLs come in.

    29. Re:Mail readers. by Anonymous Coward · · Score: 0

      Ack!, nope I have an _ in my hotmail addr. and it gets spam like MAD!

    30. Re:Mail readers. by ninewands · · Score: 1

      KMail has (or "had" when I last used it) a "Bounce" selection on it's "Message" menu that I have used more than once.

    31. Re:Mail readers. by kasperd · · Score: 1

      Not true.

      You are wrong.

      The error is generated by the receiving mailserver

      The server will respond with a 550 SMTP error code. It will even refuse to accept the message if the recipient does not exist. Once the server has refused to receive the message it does no more about it.

      Besides, if bounce messages had to be created during the initial contact, relaying wouldn't work.

      Again it is the sending server that will generate the error message. However in this case the same message is being transfered with SMTP multiple times. It is in the last SMTP session the error is detected, and it is the sending server in this session that needs to generate the error mail.

      which they don't because they use fake email addresses.

      Again they can abuse the SMTP protocol to know if the address worked or not. Nobody forces the spammer to use a mailserver for sending spam, they can use any software they desire. In particular the spammer can use software, that rather than generating the bounce simply generate lists with good and bad addresses. This does not work if the spammer uses an open relay, because the relay accepts the message, and it is then the relay that generates the bounce message. But the spammer can still hide by using an open proxy rather than an open relay.

      --

      Do you care about the security of your wireless mouse?
  21. My experience with hotmail.... by dfenstrate · · Score: 2, Interesting

    I don't actually get a lot of junkmail on my hotmail account. In fact, I haven't checked my hotmail account for two weeks, and I only have two pieces of mail in there:
    1. Some crap from a mailing list I signed up for.
    2. Spam.... from 'hotmail member services' sadly, I can't block them (I tried), but really, are "7 hot tax tips" really all that important for me to know, at least in terms of maintaining my account?

    Shouldn't this kind of stuff come in as MSN-approved spam?

    I can't really complain, though, cause it's free, and they only spam me once in a while.

    I've had this account for a couple years now, and I use it as a junk email account whenever a website demands an email address. Still, no deluge of spam.

    --
    Alcohol, Tobacco and Firearms should be the name of a store, not a government agency.
  22. I dont believe them... by xtermz · · Score: 1

    ..I dont think Hotmail is doing crap to stop spam. Don't tell me there is no way to block out emails from wersdfjwer@Erfsdfgdfg.sdfwer

    How the funk are you going to tell me you cant tell if something doesnt even have a proper domain name..... Hotmails "spam filtering" is laughable...

    --


    I lost my concept of community when my community lost all concept of me.
    1. Re:I dont believe them... by Anonymous Coward · · Score: 0

      Because if some user mistypes his reply-to address by accident (ie. jim@slashdot.ort) and you don't receive the message, then you'd be pissed at them. The main reason that Hotmail lets you configure the mail filtering is so that you can't whine when something valid gets filtered.

  23. Resent the French please by Anonymous Coward · · Score: 0

    " Oh yes, they are actually quetioning the wisdom of what Bush and the gang are doing"

    That would be fine and dandy, except that none of their objections have any validity at all.

    "How dare they make their opinion public"

    If you don't think before you speak, you'd best keep your mouth shut.

    1. Re:Resent the French please by Anonymous Coward · · Score: 0

      >> none of their objections have any validity at all

      I think they consider the 4 billion they have invested in Saddam's regime valid.

      It may be an american ideal that we dont negotiate with terrorists, but France and Germany have pretty much based their economies on doing just that.

    2. Re:Resent the French please by pommiekiwifruit · · Score: 1
      It may be an american ideal that we dont negotiate with terrorists

      Nah, you just fund them (IRA*, Osama bin Laden, Taliban, Saddam Hussein, Contras) and train them (as before minus IRA). *=privately.

      Of course the French actually are terrorists (google for "rainbow warrior 1985") but then so is the USA (google for "cia car bomb women children" for examples). [West] Germany has behaved itself since WW2, and that's what the US is complaining about!

    3. Re:Resent the French please by Anonymous Coward · · Score: 0

      also, re: the we don't negotiate with terrorists, see the arms-for-hostages stunt some of our fellow Americans pulled in the 80's.

  24. It's not Microsoft doing this ... by Khalidz0r · · Score: 3, Interesting

    Many of the comments have been blaming this on Microsoft itself selling addresses or stuff like this. I am not pro-Microsoft or whatever, but I think that's just nonsense.

    Spam, I guess, hurts the company more than anybody else, it clutters the database, and waste space, and fills unused email accounts with lots of junk, ...

    We should think a bit before blaming everything on Microsoft just because of the bad guy it is being towards us.

    --
    "What you 'seek' is what you get!"
    1. Re:It's not Microsoft doing this ... by Anonymous Coward · · Score: 0
      We should think a bit before blaming everything on Microsoft just because of the bad guy it is being towards us.

      Yeah, but still, they really do suck, and very much so. Thus, after thinking, I have decided to blame Microsoft whether they deserve it or not. Hurting them is a good thing to do. Always.

      If just 99 other guys like me would blame Microsoft, BG would get feel depressed, repressed, and oppressed, and commit suicide. So join me: blame Microsoft today.

  25. They want their share. by Colosse · · Score: 1, Funny

    Microsoft : "You'll have to stop using Hotmail adresse or we'll sue you!" Spammer : "I can give you 20%" Microsoft : "80%" Spammer : "40!" Microsoft : "50% and we got a deal!" *Shakes hand in agreement*

    --
    Colosse.
  26. Re:deceptive by guacamolefoo · · Score: 3, Funny

    Most people these days don't even use their ISP email addresses, because they may change and are often hard to remember in the first place.

    My local ISP is named after my town, which has six letters. I have a three character username, so it is essentially xyz@mytown.net. That is a helluva lot easier than rox0r432@hotmail.com.

    Boromir, son of Faramir, King of Gondor and Minas Tirith

    Boromir is Faramir' brother. Both are the sons of Denethor. Neither could ever be the king of Gondor, since they are the stewards, charged with taking care of the kingdom until the return of the rightful king. For Boromir to be Faramir's son would require some plot manipulations that even Peter Jackson would probably feel uncomfortable with.

    GF.

  27. Paid by the sender by ultraslide · · Score: 2, Insightful

    Here it somes folks ... the herecy.

    E-mail should be paid for by the sender! Just like real mail. A new protcol needs to be designed (or maybe has been ???) to address (pun intended) this problem.

    Right now the reciever covers all the costs of filtering, blocking, and dealing with the god awful Relay and Domain Blacklists (if you've ever been on one, good luck getting off ...)

    As soon as the sender has to pay you'll see spam practically drop off the map except for "legitimate" product offers and announcements.

    the 'slide

    --
    "Corporate rock still sucks. What are you gonna do about it?"
    1. Re:Paid by the sender by Dragon213 · · Score: 2, Insightful

      As soon as the sender has to pay you'll see spam practically drop off the map except for "legitimate" product offers and announcements.

      The only problem with that idea, is that the major benefit of using e-mail instead of snail mail is that it doesn't cost anything.
      If you make it so that the sender has to pay for every email they send, I think you would get less and less people using email and other internet services every year. The internet and e-commerce is the way you pay for "free" services like hotmail, not by putting a "postage fee" on every email sent.

      And besides, to be able to charge someone for the email, you have to be able to track them down. How many spammers do you know of stupid enough to do their spamming from their home computer, using their actual email addy?

      --
      --CypherDragon
    2. Re:Paid by the sender by PDHoss · · Score: 1
      --
      ======================================
      Writers get in shape by pumping irony.
    3. Re:Paid by the sender by InadequateCamel · · Score: 1

      So you are proposing a per-use fee for e-mailing? The reason e-mail is so popular is largely because it allows world-wide communication for almost nothing. I scarcely telephone home anymore because it costs me 10p/min to use my phone plus a 2p/min charge on my calling card. Besides, people already pay for their e-mail because they pay monthly internet connection fees.

      I don't think too many people will support additional e-mail surcharges on top of the existing connection fee, because it is like paying a fee to use your phone and to hear the lovely things other people and automated answering machines have to say, but then having to pay _extra_ to talk into it.

    4. Re:Paid by the sender by Anonymous Coward · · Score: 0

      I get junk mail in real life too. So wtf. No, I will not pay for email. eat shit.

    5. Re:Paid by the sender by Anonymous Coward · · Score: 0

      You're an idiot. People DO pay to send email. Its called your monthly internet bill. What about the people who only use the internet to communicate with friends/family who are far away. You expect them to pay an additional fee on top of their isp bill? You're an idiot. I suppose you would be the one to bring us this wonderful pay to email plan. Go slide off the face of the planet.

    6. Re:Paid by the sender by Rip!ey · · Score: 1

      The major benefit of using e-mail instead of snail mail is that it doesn't cost anything.

      And here was me believing that the major benefit of e-mail instead of snail mail was the fact that it will be sitting in your inbox in a matter of seconds.

      I would happily pay to send e-mail (I imagine a system where known parties can agree to reciprocate no fees) to help address a problem that really doesn't cause me much trouble.

      Since we're on the subject of e-mail and spam, I had my main address (not free web-mail) get out a few months ago. It got up to about ten spam messages a day (thats bad for me). After spending a couple of months making sure they were never opened (to make sure that they are spam) whilst connected online, and making sure that I *never* replied to their "please remove me from your list addresses", I'm down to about one spam message a week.

    7. Re:Paid by the sender by Anonymous Coward · · Score: 0
      A new protcol needs to be designed (or maybe has been ???) to address (pun intended) this problem.
      Fine, design a new protocol. But how will you get anyone to use it? If your mother uses it and your aunt doesn't use it, then your mother can't mail your aunt. Then your mother tells you that you fucked up her email program.

      Networks effects are killer.

  28. The Essence of Value Added by Schlemphfer · · Score: 5, Interesting
    I think we'd all agree that an e-mail address isn't worth much, by itself. Spam prevention has become one of the best ways to add value to an email address, and make it more worth paying for. Filters work with varying success, and to the extent that filters are effective, an email account becomes more worth paying for. But filters will only take you so far; I use a Yahoo account for my personal email. Once upon a time, I never got spam there. But now I get hundreds of spams a month, and at least three or four a day slip past the filter.

    Hotmail's filters have always been poor compared to Yahoo's (insert obligatory anti-ms joke here.) But I have to say, that if Microsoft is going to start aggressively suing spammers who send email to Hotmail accounts, it's going to make their Hotmail service a whole lot more desirable. Microsoft has been desperately trying to get people to pay money for their Hotmail accounts (which, back in the DotCom boom, once promised "free email for life."), and I think suing spammers might be their best possible strategy. Not only does will it reduce Microsoft's storage and bandwidth costs, it will differentiate Hotmail from the slew of freemail providers, and make the service much more worth paying for.

    Until we get aggressive federal anti-spam legislation, this new strategy from Microsoft will be great for Hotmail users and good for the Internet in general. If the lawsuits actually frighten spammers away from Hotmail, I might indeed finally pay for my Hotmail account, which I now use only as one of those disposable junkmail accounts for registering on sites I don't trust.

    --
    I'm generally "Interesting," "Insightful," and even "Funny" here. What the hell happens to me at parties?
    1. Re:The Essence of Value Added by olethrosdc · · Score: 1

      Currently the best email provider that is free is "myrealbox".

      Thank you.

      --

      I miss my rubber keyboard.(Homepage)

    2. Re:The Essence of Value Added by orkysoft · · Score: 1

      You don't say? :-)

      --

      I suffer from attention surplus disorder.
    3. Re:The Essence of Value Added by tcr · · Score: 1

      Rather than paying for a webmail account like Hotmail, I think it's better to pay for a good filtering service like SpamCop.

      Just one domain can receive quite a lot of spam... I now forward mail from some 14 domains that I maintain through the filter, and on to various mailboxes I use. Very effective at dealing with the problem, and I get a buzz from reporting the held junk to the respective ISP's...

      --


      Information wants to be beer.
  29. Slant :| by Anonymous Coward · · Score: 0

    The poster just had to throw the slant into the end of the article. Does one twitch uncontrollably if they don't at /.?

  30. hrmm by clarionhaze · · Score: 2, Interesting

    for some reason eberyone thinks your info has to be sold for the spammers to get it. thats discusting incorrect! there are ways for them to get into the databases of emails, you'd probably be surprised.

    --
    all i see are 1's and 0's
    1. Re:hrmm by ronaldcromwell · · Score: 1

      why don't you elaborate on this? or was that one of those "i could hack you if i wanted to, but... er... i don't feel like it" comments?

  31. doubleclick.net,and The Register by Anonymous Coward · · Score: 0

    Why is it,if I block doubleclick.net cookies,I can't visit The Register's website?

  32. Kudos to hotmail by broothal · · Score: 1

    Putting aside my general "I hate MS" opinion for a second here, this is good news. The folks at Hotmail is doing us all a favour by sueing spammers. Remember, that albeit we're all swamped with spam, there aren't that many spammers out there. Recent studies (based on equal amount of facts and handwaving) shows that less than 200 spammers account for 95% of all the spam we receive. Thusly, if MS could sue the bejezus out of some of them, it would help all of us. /Christian

  33. Re:It's a guessing game...clearly harvesting by djupedal · · Score: 1

    A dictionary attack helps them determine which combinations are genuienly not valid, thus putting more uumph behind the guesses. They want to know when they are wasting effort...not if. In this case, a miss is as good as a hit.

    And in other news, sendmail honeypots are more entertaining than ever.

  34. Re:Obtain ID's from banner ad server referal? by tiohero · · Score: 2, Interesting
    Maybe its comming from the banner ad servers?

    Is is possible for spammers to obtain email ID's from the URL obtained from a banner ad's "referal" data? Or perhaps they can harvest emails ID's if you click on a banner ad. Isn't there some sort of HTML mechanisms to do this?... I don't know, thats why I'm asking.

    What about if they serve flash animations? Can flash code be made to spit back the complete refering URL?

  35. Hotmail could start by blocking UUNet by Skapare · · Score: 1

    Hotmail could start by blocking UUNet address space. Given the huge number of spammers there, this would be worthwhile, even though it would affect quite a number of people. If they did this, and monitored UUNet's performance with regard to when all the spammers (and there are a lot of them) in UUNet's space get disconnected, it really could force UUNet to once and for all stop supporting spammers.

    What would Hotmail get out of it? Based on how much my mail servers get pounded on by spammers on UUNet space, I'd guess that Hotmail servers are getting hit to the tune of at least 10 million and possibly 100 million times a day. And even if Hotmail just blocked the spammer addresses, that would still amount to an economic burden of maybe several dozen servers just to handle those hits.

    SPEWS blocks a large amount of UUNet space because of UUNet's continued support of spammers. Lots of innocent legitimate businesses are suffering because of this, but it's better than UUNet customers suffer rather than the recipient mail server operators. UUNet is too clueless to deal with the spammers, and SPEWS is apparently has too small a user base to have an effect on UUNet. But if Hotmail did this, UUNet would be forced to finally, once and for all, disconnect the spammers. This would be good for everyone (and even for spammers who might realize they need to stop spamming and become productive members of society, instead of being thieves).

    Having a big name like Hotmail do some things like this could really help turn the tide against spamming (defined as unsolicited bulk email), and restore public confidence in email as a working medium of commerce, and enable legitimate forms of permission based email marketing.

    --
    now we need to go OSS in diesel cars
  36. I wish they'd target their spammer USERS! by rdmiller3 · · Score: 2, Redundant
    I don't care if MS goes after spammers who target HotMail users... but more than half of the SPAM I get in my in-box comes through some HotMail address! HotMail is the spammer.

    It's too easy for spammers to use a free HotMail account (like "bigscam89734@hotmail.com") to send SPAM from. Microsoft should fix that first.

    1. Re:I wish they'd target their spammer USERS! by Skapare · · Score: 2, Informative

      While in some cases dumb spammers will use a live Hotmail account as the return address for a spam run, in the majority of cases, the Hotmail addresses (and those of others like BigFoot, Juno, Yahoo, etc) are fabricated. And yes, some spammers are so dumb they leave no means of contact whatsoever. In other cases it's a web site hosted entirely separately from where the spam came from (often a wide range of open proxies for which no origin tracking headers are inserted). And those web hosters refuse to shut down those spammer sites claiming that since the spam didn't come through their network they won't do anything about it (but at least SPEWS lists them, too, which has resulted in many takedowns).

      Look at the headers and see if the message actually came from one of Hotmail's servers. Microsoft already has made it so that it is incredibly hard to spam through the web interface (just like Slashdot's "slow down cowboy" feature for those who post too fast here). But if someone does manage to spam through Hotmail, by all means notify them, although they probably already know about it.

      I don't know whether it is good to report the likely forged return address spams to Hotmail or not. Certainly if the address is real, it should be, so they can shut it down (they do). But knowing whether it is real or not is not easy.

      I don't actually see all that much spam with Hotmail as a return address. I haven't seen any from Hotmail servers in ages. I do NOT block Hotmail.

      --
      now we need to go OSS in diesel cars
    2. Re:I wish they'd target their spammer USERS! by Anonymous Coward · · Score: 0

      "Informative"? Misinformed, more like.

    3. Re:I wish they'd target their spammer USERS! by Anonymous Coward · · Score: 0

      Sorry Mr Clueless, but that's not true. Spammers often FORGE hotmail addresses. But it is clear they are NOT mailing from hotmail.

      They (spammers) are using one of many thousands of open SMTP mail gateways in China, Korea, and now Brazil.

      Spammers setup their OWN SMTP gatways, and connect them to UUNET (A major backbone provider).

      With a huge ass IP address block to work from, they can move their SMTP servers into any of the thousands of available IP's.

      Of course this is how large backbone providers get their income, and sure as heck aren't going to try and regulate it.

      It might be possible to create "spam free" zones, but the subnets wouldn't be very large (for performance reasons).

      This kind of filtering would have to take place at "upstream routers" covering lots of internet "real estate".

    4. Re:I wish they'd target their spammer USERS! by eclectechie · · Score: 1
      I don't care if MS goes after spammers who target HotMail users... but more than half of the SPAM I get in my in-box comes through some HotMail address! HotMail is the spammer.

      Actually, it does not come from hotmail. The sender name is forged.

      I run a patched mail server that checks whether mail purportedly from Hotmail originates from a Hotmail server. If it doesn't, I bounce it.

      Bingo, no spam from "Hotmail" in my inbox. Or Yahoo, or Earthlink, or severals others; I check those, too.

      --
      "The empty vessel makes the greatest sound." -- William Shakespeare; Henry V, 4. 4
  37. What about ... by JSkills · · Score: 2, Interesting
    ... people who use a continuous flow of newly creatred hotmail accounts to SEND spam? Shouldn't Msoft do something about them too?

    I've written a server based SPAM filter that uses the RBL and mail from hotmail addresses are always rejected since it appears they are on the RBL. This makes it difficult for legit people using Hotmail to send mail to places using the RBL for filtering.

    1. Re:What about ... by Steve+B · · Score: 2, Interesting
      people who use a continuous flow of newly creatred hotmail accounts to SEND spam? Shouldn't Msoft do something about them too?

      Now, now, you can't expect them to be able to handle something as technically complex as imposing a 2 second per destination address delay on new accounts.

      --
      /. If the government wants us to respect the law, it should set a better example.
    2. Re:What about ... by Tsuzuki · · Score: 1

      Having let an earlier Hotmail account expire because of all the spam I was getting and now owning a Hotmail address which is being spambombed too, I can say that Hotmail's abuse desk will gladly kill an account if the headers confirm that the spam truly came from Hotmail. However, legions of spammers use fake Hotmail addresses in their to or replyto fields, so the abuse desk can't do anything about it.

  38. in other news by oliverthered · · Score: 2, Funny

    A class action suit is filed against microsoft for bugs in IIS, Outlook and IE.
    Sending tonnes of virus spam and cloging up networks.

    --
    thank God the internet isn't a human right.
    1. Re:in other news by mrkurt · · Score: 1

      In a more serious vein, you wonder if this address harvesting isn't the result of exploiting a known or unknown vulnerability in IIS or Exchange. Campers, what's your experience been with this?

      --
      Always look on the briight side of life! (whistle, whistle)
    2. Re:in other news by Anonymous Coward · · Score: 0

      Personally, I always save the email address of who-ever has sent me a virus and sign them up for spam.

  39. More nefarious? by swb · · Score: 1

    Ohters in this thread suggest dictionary-style spam campaigns aimed at high-profile domains, which is a good explanation.

    However, I wonder if this isn't the beginning of an attempt to corner the market on (euphamism mode on) "permissioned, targeted email marketing" to hotmail users.

    Step 1: chase away spammers who don't buy protection from MS
    Step 2: sell access to spammers (high quality lists, demographics, etc)
    Step 3: $$$$$

    It's got to frost MS a little that there are all those "consumers" at hotmail and somebody else is sending them marketing info that MS doesn't get a big slice of.

  40. Gosh.. by Anonymous Coward · · Score: 0

    From all these replies, you'd think you guys didn't like Microsoft or something...

  41. Re:Obtain ID's from banner ad server referal? by Ed+Avis · · Score: 3, Interesting

    Yes, you can harvest addresses from your referrer log if people come from Hotmail to your site. At least, you could: I haven't checked if Hotmail's URLs still include the email address or some munged version of it.

    --
    -- Ed Avis ed@membled.com
  42. But Then Why? by Bilbo · · Score: 3, Interesting
    If it's a brute force guessing attack, then why don't I get the same amount of spam on my Yahoo account?

    Actually, there is a solution, at least on my end. I created a hotmail account just so I could talk to someone on the Microsoft IM client, so I know I should receive ZERO messages on that account. I just set filtering to only accept mail from people in my address book, and then have zero entries in my address book.

    It doesn't stop all the Spam that Microsoft itself sends me, but it keeps most of the rest of the spam away.

    --
    Your Servant, B. Baggins
    1. Re:But Then Why? by fleener · · Score: 1

      Just a guess... does your Yahoo address have a series of numbers tacked on at the end? All of the common names, dictionary words and word combinations have long since been taken by users for Yahoo addresses, and so most new accounts these days have things like "username2003" or other silly numbers the user chooses to add on the end. That kind of randomness is a lot harder to attack with brute force.

  43. And yet... by Zebra_X · · Score: 3, Interesting

    "...monopoly putting powers to good use."

    and yet not so much. imagine how much they could "save" by not having to broker all the crap the spammers are sending to their systems. less hardware costs, less bandwidth, less headaches. less spam for hotmail users is really only a by product of their business goal to save money. if they could make money from spam - then hotmail users would get a lot more of it!

    business is the worst of people.

  44. Set up your own mail server by Skapare · · Score: 1

    If you don't like having Microsoft send you advertising, which really is something you have agreed to in exchange for the email services (these are not free to operate, and this is how they get the revenue to pay for the services, just like commercials on TV) ... then set up your own mail server. Set up an IMAP service on it, and top that off with SquirrelMail, and you have your own web based mail that can also be used via IMAP. You can then sell it to your friends (or give it away to your really good friends). Or you can give it away to anyone in exchange for your right to advertise to them.

    --
    now we need to go OSS in diesel cars
    1. Re:Set up your own mail server by dattaway · · Score: 5, Funny

      these are not free to operate

      I thought everyone paid the Microsoft Tax when they bought a computer.

    2. Re:Set up your own mail server by Pieroxy · · Score: 1

      I don't buy computer (at least I didn't buy any in the last 10 years), instead I keep on upgrading the same old box.

      I started my actual computer with the first one I ever bought: a 80286 12MHz, 512KB RAM, 10MB HDD, 360K 5"1/4 Floppy, EGA (640x350x16 colors). Since then I didn't pay the MS tax anymore ;-)

    3. Re:Set up your own mail server by interstellar_donkey · · Score: 1

      Actually, no. I'm a law student. I reread all of their AUPs. They violate everything they stand for. If I was a scumbag, I could sue them and win. Sadly, I'm not a scumbag.

      Does this make Microsoft a bad company?

      no. Hotmail is a good, free service (despite all of their other transgressions)

      Does this make hotmail a crummy email provider?

      Perhaps.

      Does this mean Microsoft Hotmail lawyers suck?

      Uh, yeah.

      --
      The Internet is generally stupid
  45. Finally someone we can all agree to go after..... by Anonymous Coward · · Score: 0

    This could be an M$ publicity stunt, but so what? I hope M$ will perform a relentless pursuit in prosecuting these bottom feeders

  46. Yay for Microsoft! A winner is me! by CTD · · Score: 5, Insightful

    I am a Hotmail user. I have been since 1997.

    I'm also a Yahoo Mail user. I have been since 2000.

    Last fall I decided that I either had to subscribe to a third free mail service (I hid the address I pay for, thank you very much) or try to work with the filtering tools. Both accounts were flooding with spam to the point of tediousness.

    First Step: I spent a week unsubscribing out of every spam that came into my inbox at both accounts.

    Expected Result: I expected the spam to increase. I was proving that not only was the address valid, but it was read.

    Actual Result: Spam did decrease. Some of the spammers actually are good for their word. Others are not.

    Second Step: Identify who is spamming me despite my requests. Block them, and filter them with the tools at both websites.

    Expected Result: I expected to be able to stop some of the spam, but not much. They are crafty bastards after all.

    Actual Result: A good portion of them dropped off.

    Short Term Prognosis: After two weeks of work (Step One and Two) the volume of spam at both accounts fell about 66%. Roughly. Unscientifically. Hotmail went from 100 daily spams to 30. Yahoo went from 30 to 10. Give or take.

    Mid Term Results: After a month of time passing, I encountered a spike in spam. On both accounts. My addresses had been sold.

    Mid Term Actions: I repeated steps One and Two. After a short bit of work, both accounts settled back down.

    Long Term Results: It's been about 6 months. I still get spam, at a much reduced rate. I dedicate one day out of every month to opt out of spam mails in my inbox. I dedicate another day to working my filters and blocks (when I say "day" I mean about an hour of work on a single day).

    I get less spam. It's not all gone, but I get less. Both Hotmail and Yahoo send me "user updates". About once monthly. Sometimes I read them. Sometimes I delete them. I am not overly concerned about it. One letter per month is not something to quit a free service over. Unless I want to grandstand with my important indignation.

    The point of all of this, and how it relates to the actual discussion:

    If you aren't paying for the service, you get what you pay for. I don't pay for either, and it costs me about 4 hours each month to keep each one useful. Fair trade.

    If Microsoft is going to endeavor to get rid of unwanted spam from outsiders. I applaud them. It might not impress the anti-MS crowd, but I'm ok with that. I don't pay for the service, and they are trying to do something to make it better. In a fashion that costs them money. With a method that no other free email service is attempting.

    I'm sure it will somehow go all wrong and I will be forced to wear my MSYou! Implant Chip05 at the end of it all, but that's the price of working with the Evil Empire. So long as I get less spam with my Soilent Green, I can live with it.

    --
    Grimwell - old, cranky, mean, obsessive
    1. Re:Yay for Microsoft! A winner is me! by Anonymous Coward · · Score: 0

      Unless I want to grandstand with my important indignation.

      Ummm, you're in the right place for that.

    2. Re: Yay for Microsoft! A winner is me! by varjag · · Score: 1

      I don't pay for either, and it costs me about 4 hours each month to keep each one useful. Fair trade.

      ..and that spiked necklace is not that much incovenient too.

      --
      Lisp is the Tengwar of programming languages.
    3. Re:Yay for Microsoft! A winner is me! by Alan · · Score: 1

      Sounds like far more work than I'm willing to do :) My solution is (I'm lucky enough to have my own domain on a co-lo-ed server) bogofilter/spamassassin, and a bit of training to get these spam filters to see what is spam and what isn't. End result, one or two spams get through every couple of days, the rest is filtered to a spam folder which I keep around for amusement, and to someday categorize and post on the web in some humorous form :)

    4. Re:Yay for Microsoft! A winner is me! by Reziac · · Score: 1

      I have both Hotmail and Yahoo accounts. Neither is in realworld use or exposure. Both are somewhat over 4 years old. My Hotmail account has spam filtering turned on, my Yahoo account does not. My Hotmail account gets TONS of spam (mostly Asian porn); my Yahoo account has yet to get its FIRST spam.

      That alone is why I don't believe Yahoo sells its users' email addresses.

      There have been two known thefts of Hotmail address lists that I remember, one before M$, one shortly after.

      --
      ~REZ~ #43301. Who'd fake being me anyway?
    5. Re:Yay for Microsoft! A winner is me! by MS · · Score: 1
      If Microsoft is going to endeavor to get rid of unwanted spam from outsiders. I applaud them. It might not impress the anti-MS crowd, but I'm ok with that. I don't pay for the service, and they are trying to do something to make it better. In a fashion that costs them money

      Wrong: it saves them money!

      • spam gets sent to the hotmail account: that costs bandwidth
      • spam gets stored on hotmail servers: that costs harddisk space
      • spam gets read by the user: that costs bandwidth
      • operating servers, routers etc. for the increased traffic due to spam costs electricity and manpower
      The biggest costs running an ISP are electricity, bandwidth, manpower and hardware (usually in that order).

      All in all: spam has a big impact on costs running a service like Hotmail, and Microsoft will in the end save a lot of money by fighting spam. To keep Hotmail free, Microsoft will have to reduce its operating costs - and that's what Microsoft is doing.

      My 2c
      ms

    6. Re:Yay for Microsoft! A winner is me! by CTD · · Score: 1

      Points granted.

      If Microsoft is smart enough to realize that a little action and expense on their part will save them long term expense, I still applaud them for two reasons:

      1. They are working to reduce the spam.
      2. Saving money is a good thing in my neighborhood.

      --
      Grimwell - old, cranky, mean, obsessive
    7. Re:Yay for Microsoft! A winner is me! by CTD · · Score: 1

      If they cut my Asian porn off I'll kill them! ;)

      The thefts of Hotmail addresses accounts for a lot of their issue...

      My yahoo gets spam. Things like offers to help Nigerians with banking problems. Despite me not having a history of being interested in such affairs.

      Ah well. Perhaps I can get a huge government grant to research the issue and prove that spam is actually a terrorist plot...

      I don't think either company sells it's addresses. The backlash from exposure would be a bad thing. Plus MS makes plenty of profit. They don't need to sell email addresses to stay afloat.

      I wouldn't put it past a middle manager who is desperate to find something positive to put on their annual review ("Anally manipulated all Hotmail account holders for a few cheap bucks! I make profit, promote me! Please!"), but as a deliberate plan for profit? Nah.

      Better to loose money on the bandwith and use that as a writeoff against the profits made elsewhere.

      --
      Grimwell - old, cranky, mean, obsessive
    8. Re:Yay for Microsoft! A winner is me! by petsounds · · Score: 1

      If you aren't paying for the service, you get what you pay for. I don't pay for either, and it costs me about 4 hours each month to keep each one useful. Fair trade.

      Four hours per month * the rate at which you value your time = much too costly and tedious for most people's tastes. Only a fair trade if you consider the value of Hotmail/Yahoo's services to be worth your four hours of time. For a few dollars you can usually request an additional e-mail account from your preferred ISP or hosting company, of which most have some sort of web interface to access the mail account, and they won't serve up banner ads or send you advertisements. Seems like a fairer trade than your current solution.

    9. Re:Yay for Microsoft! A winner is me! by Reziac · · Score: 1

      AOL has been accused of selling addresses too, but it didn't happen -- not directly. However they did get victimized by a crooked employee selling 'em, at least once that I know of, maybe twice. AOL is pretty good about plugging loopholes, tho, once ID'd.

      But yeah, a webmail host or ISP selling addresses to spammers would be just plain stupid. Providing them to "partners" -- well, that's borderline, but as a rule it means another legit business, who aren't all that interested in selling addresses to spammers at $39 per 50 million (which is somewhere around the going rate, given what's in some spam I get). That makes Hotmail worth what, $45 a crack? Even if you sell that to 1000 spammers, you haven't covered what incoming spam costs in bandwidth. Makes the whole concept of selling addresses self-defeating.

      Now, I *am* suspicious that M$'s incarnation of Hotmail has a security hole that makes it too easy for spammers, but that's a different issue.

      --
      ~REZ~ #43301. Who'd fake being me anyway?
  47. Read the RFC? by Anonymous Coward · · Score: 0

    What kind of loser are you? Have you ever looked in your average RFC? Even if I had it printed out and left in the bathroom, I'd read one of those only after I'd exhausted my supply of shampoo bottles.

  48. Hushmail's spam filter... by dark_panda · · Score: 4, Interesting
    This thing works pretty well...
    1. When someone (or something) sends you an email, it gets stuffed into a "pending" folder rather than your inbox.
    2. Whoever sent you the email gets an automated reply from hushmail that requires them to click on a picture of a keyhole that's placed randomly on the screen in a java app, or something to that effect.
    3. After clicking on the keyhole once, they'll automatically get past your spam filter from then on. You can also set up lists of addresses or domains that bypass the filter all together.
    This system basically assumes that there's a human on the other end of that email to click through the filter. I haven't seen a single spam in my inbox since I enabled it.

    It's not impossible to defeat, but for the moment, it works great.

    J
  49. Spammers Love Micro$oft by DarwinDan · · Score: 1

    What about spammers who USE M$ Hotmail as their "base of operations"? Why doesn't M$ require Hotmail users to provide a credit card or bank account? They could use a cross-referenced database to make sure there is only ONE account per person (or at least one per credit card/bank account).

    This solution will ultimately lead to spammers' shying away from Hotmail and looking for other less-recognized freeMail providers.

    --
    $DEITY bless $NATION
    1. Re:Spammers Love Micro$oft by British · · Score: 1

      Becase then people would be bitching about privacy invasion if MS asked for such acconut info.

    2. Re:Spammers Love Micro$oft by Anonymous Coward · · Score: 0

      I actually use multiple accounts on Hotmail to reduce and track the spam I am receiving. I have one account that is not listed on the directory and the address of which is only given to people I know. It receives no spam at all. The other two accounts are used occasionally on various websites. They receive roughly the same amount of spam.

    3. Re:Spammers Love Micro$oft by Stonehand · · Score: 1

      Off-hand, I don't think I've /ever/ gotten spam that actually was from hotmail.com; instead, the From: address is practically always forged. You can tell by the (a) Received: headers, and (b) Hotmail automatically puts the client's IP address in an additional header, if memory serves, something which practically no spammers bother faking.

      Spammers are much more likely to use relays in Korea (irritatingly, these usually give only IP address, so a mere .kr or *.kornet.* block won't work; try blocking 203.224-255.*.*, and 211.55.5*.*, and 211.224.226.*), China, Brazil, or Taiwan than they are Hotmail servers, as far as I can tell.

      --
      Only the dead have seen the end of war.
    4. Re:Spammers Love Micro$oft by La+Temperanza · · Score: 1

      Yeah, that's why old Microsoft installers took personal info off your computer without your permission. They were just trying to protect their users from malicious spammers.

      --

      --
      est modus in rebus
  50. Apparently... by Greyfox · · Score: 2, Funny

    Apparently Microsoft hates spammers as much as the rest of us. Now if they'd only hate the other scourge of the Internet as much as the rest of us do...

    --

    I'm trying to teach myself to set people on fire with my mind... Is it hot in here?

  51. Spam affects Passport, too by revscat · · Score: 1

    I would add:

    4) Increased usage of Passport. I would imagine that a significant number of people first encounter Passport through their Hotmail account. If Hotmail users are drifting away because of spam, this would affect the general acceptance of Passport.

    This ties directly into point 3, of course. :)

  52. Re:spammers,btw, please collect this address by Anonymous Coward · · Score: 0

    While I do not support a war against Iraq without a second U.N Resolution, the French are assholes. Always have been, always will be. Ce lá vie.

  53. Spmmers / Messengers by OrbNobz · · Score: 3, Interesting

    My hotmail account is awash in spam, I have never used the account. Simply amazing.
    I really think we are going about the spam issue the WRONG way, however. Hear me out.
    We are hellbent on shooting (drawing/quartering) the messengers. The messengers are ever-changing, fraudulent, pieces of crap that forge everything from the originating IP to the recipients address. But all Spam has one thing in common. Content.
    All spam is trying to get you to buy some product or service.
    The only reason spammers do what they do is because it's MAD profitable. Why? Because the content's originator makes it that way.
    I propose we turn this massive gun we call "public outcry" towards the TRUE originators of all the spam: The people who construct the content, or pay the spammers.
    If spamming becomes unprofitable, it will stop. Spammers aren't doing it to be malicious, they are monetarily motivated! Stop the source of the money, and stop the spammer.
    Order one of those mini-hovercraft RC things, find out who it ships from, then sic your lawyers on them. Buy that Viagra from an online pharmaceutical, find out where it ships from, then set the coordinates on your lawyer-launcher. Go after AT&T, Discover, Home lending companies.
    Your email address, once harvested, is like the freakin village bicycle! It gets passed around so much, you have no CLUE as to who grabbed it orginally, nor does it matter since so many other spammers have it! It's a vicious circle, and I say go after the TRUE SOURCE!

    Does this make sense to anyone else, or should I drink some more coffee and calm down?

    - OrbNobz
    If I had a nickel for every spam I received, I'd...be...getting...paid, thus part of the problem! Ack!

    1. Re:Spmmers / Messengers by Anonymous Coward · · Score: 0

      This makes sense to me. I go after the end result, rather then try and follow the mail path (which always leads to a dead end anyway).

      I read the spam mail and go to their site. I use that information to track them down.

      You would be surpsised at how many you find will come right out and say "Gee! We are totally unaware we are spamming!". Always consider that a lie until proven to be true.

      Act interested about their product, while always taking notes on them. It is highly doubtful you will find anyone there that knows about how they spam. Most companies hire "Marketing" companies for thier ads and promotions. These Marketing companies then hire outside resellers to do the actual spamming. These are solicited by the thousands of "work at home" spams you get.

      So your Email address is then copied onto a CD or DVD and sold out by the millions.

      Once they have your address, you can "kiss it off", because it's either going to have to be heavily filtered, or used as a honeypot.

  54. Harvest Hotmail? Don't need to.... by i_want_you_to_throw_ · · Score: 1

    Hotmail has so many members that if you're a spammer, creating any combination of letters/numbers prefixed to "@hotmail.com" is sure to get you some one. AOL is pretty much the same way.

  55. Diversity! by alexandre · · Score: 1

    But think about it! It will kill spam diversity... you wont receive any more nigerian scam or nude girl with cows... now only MSN publicity!
    Let's fight for the right to SPAM! and let's bring yet another antitrust trial against M$ ;-)

    </sarcasm>

  56. Coincidence ??? by andrewbaldwin · · Score: 5, Interesting

    Just by pure coincidence I submitted a posting about 2 hours before this, asking if anyone had done a comparative study of e-mail providers and Spam.

    I created a Hotmail account specifically for product registrations. It's NEVER been used in newsgroups (or to send out an e-mail for that matter), yet within hours it stared receiveing junk mail.

    I've not had that problem with my main e-mail provider

    Does this mean that

    a) Hotmail is a prime target for people generating "random" names for spamming

    b) Hotmail / Microsoft have weak security

    c) MS are selling or leaking addresses so that they can publicly clean up later and gain credit

    d) I'm just unlucky

    Personally I favour Napoleon's dictum that we should not attribute to malic that which can adequately be explained by incompetence (in other words, favour the cock-up theory over the conspiracy)

    1. Re:Coincidence ??? by josh+crawley · · Score: 1

      I'd believe that if you outputted the first 6 alphanumerical ascii characters out of /dev/urandom and made that yoru username. If you get spam while your email's f29Yx5@hotmail.com , you know MS's leaking stuff (and not the random email hits).

    2. Re:Coincidence ??? by burns210 · · Score: 1

      so who has a better _free_ service that has good mail filters, a nonobscure website name(no user_name@sfoadfe235.com ), and the ability to check email through outlook express. I have been looking for a decent alternative and would love some feedback.

  57. Adjusting my TFH by karlandtanya · · Score: 1
    Who wants to bet me that any Microsoft Customers--those who pay Microsoft for mailing lists--will be named as defendants?

    This is not about protecting the end user from harassment. This is about "creating value" for a Microsoft "product". That product is the user's time and attention.

    --
    "Reality is that which, when you stop believing in it, doesn't go away." - Philip K. Dick
  58. Is spam, SPAM??... will MS sue itself?? by jkrise · · Score: 1

    I doubt this is a good start by MS, and I'm not sure MS is completely helpless or innocent either.
    I suspect this is a PR stunt to plead helpnessness in a matter where they are actually the guilty party.

    I get frequent spam on my hotmail account, I'm using this account for 4 years now. Curious thing is, these spam mails for elongated pelvic protusions, anlarged mammiary glands and Nigerian style mails - APPEAR - to be spam.

    But APPEARANCES CAN BE DECEPTIVE. I'm pasting a complete mail I got recently from a bogus address, to my hotmail account, sundaram_kr@hotmail.com I post this address publicly - so I can study the spam problem in detail.

    My reasoning first, then the attachment:
    1. This mail APPEARS to be spam, but is NOT. The instinctive reaction of any 'SENSIBLE' receiver of spam is to hit the delete button. I did not. I sent a 'reply' and it bounced off the non-existent sender's address.
    2. I checked the mail for any snail-mail address - surprisingly, there was NONE WHATSOEVER!!

    Thus, I conclude:(Elementary, my dear Watson)
    1. If the 'sender' were indeed a Nigerian bank spammer, he'd have included his snail mail address.
    2. If he's paying for the bandwidth to send the mails to MS Hotmail, he'd better have a sound motive. Annoying me does not serve any purpose for a banker, however moronic.
    3.Even if he'd planted the mail in insecure servers and used their bandwidth to spread his spam, he'd still need a motive - none appears to exist.
    4. It should be trivial for a co. like MS to track down such a bulk e-mailer - years ago. Apparently hey have not done so - and thus:
    5. MS 'IS' THE SPAMMER. They are the ONLY ones who'd gain a cent by annoying me, and charging me for a spam-free service. They are the only ones who could store these messages on their servers and not need to pay any bandwidth charges.

    and now, the so-called spam:
    begin attachment

    Mr.Isaiah K.Muttai.
    Senior Manager,
    Operations
    Banking Services,
    Kenya commercial Bank.

    Dear Sir,
    I Isaiah K.Muttai the Senior Manager, Operations
    Banking Services, I want to include you in this God's given opportunity.
    On Saturday 30th January 2000, flight KQ 431 left Nairobi at 12.00 p.m. headed
    for Lagos, Nigeria on a scheduled flight. The thirteen-year old Airbus had on
    board a total of 179 passengers who included 11 crew members.

    This plane could not land at Lagos due to poor weather and the pilot decided to
    stop and refuel in Abidjan, Cote d'Ivoire. However, on leaving Abidjan, about
    two to three kilometres from the coast,the plane crashed in the ocean. This is
    the first time a crash involving a Kenya airways plane since it was established
    in 1977.

    So my friend, one of our customers happened to be involved in the plane crash,
    who deposited £11.3m.(eleveen million, three hundred thousands pounds) few
    months before the incedent.
    This fund has been dormant in his account with this Bank without any claim of
    the fund in our custody either from his family or relation before our discovery
    to this development.

    Although personally,I keep this information secret within myself and partners to
    enable the whole plans and idea be profitable and successful.

    Meanwhile all the whole arrangement to put claim over this fund as the bonafide
    next of kin to the deceased, get the required approval and transfer this money
    to a foreign account has been put in place
    and directives and needed information will be relayed to you as soon as you
    indicate your interest and willingness to assist us and also benefit your self
    to this great business opportunity.

    In fact I could have done this deal alone but because of my position in this
    country as a civil servant,we are not allowed to operate a foreign account and
    would eventually raise an eye brow on my side during the time of transfer
    because I work in this bank.
    This is the actual reason why it will require a second party or fellow who will
    forward claims as the next of kin with affidavit of trust of oath to the Bank
    and also present a foreign account where he
    will need the money to be re-transferred into on his request as it may be after
    due verification and larification by the correspondent branch of the bank,where
    the whole money will be remitted from to
    your own designation bank account.

    I will not fail to inform you that this transaction is 100% risk free. The
    sharing rate of this money will be discussed later upon your favourable response
    showing your zealous determination to assist
    us but the first priority is your total acceptance and commitment to assist.

    Please,you have been adviced to keep top secret as we are still in service and
    intend to retire from service after we conclude this deal with you. I will be
    monitoring the whole situation here in this bank
    until you confirm the money in your account and ask me to come down to your
    country for subsequent sharing of the fund according to percentages.

    Please my friend, i will like to hear from you whether you are interested or
    not.

    Best Regard,
    Mr Isaiah K Muttai. .end attachment
    The 'header' with the bogus details...

    From :
    "Isaiah Muttai"
    To :
    isaiahkm@myself.com
    Subject :
    Thanks for understanding
    Date :
    Tue, 05 Nov 2002 07:50:37 -0500

    end header..

    --
    If you keep throwing chairs, one day you'll break windows....
    1. Re:Is spam, SPAM??... will MS sue itself?? by br0ck · · Score: 1

      I sent a 'reply' and it bounced off the non-existent sender's address.

      Perhaps hotmail staff had already removed the offending account. I highly doubt they would violate federal laws by sending you such an obvious scam just to irritate you. To show you that these checking account scammers are actually out there, here's an article from last fall where Something Awful got back at one of them.

  59. Re:fp..fight them by Anonymous Coward · · Score: 0

    The Wayback Machine (aka Archive.org, The Internet Archive) has, with little fanfare, removed entire domains from its archive in accordance with a request from Scientology's lawyers:
    Lawyers for the Church of Scientology contacted the Internet Archive, asserted ownership of materials visible through the Wayback Machine, and those materials have been removed from the Wayback Machine. [email to LawMeme]

    The problem is not that the Internet Archive received such a request from the Church of Scientology's lawyers, or even complied with the legal portions of the request, but that the Internet Archive has not taken minimal steps to defend free inquiry and access to information. LawMeme reveals the sordid details...

    This current attack by Scientology on freedom of expression appears very similar to what happened to Google back in March 2002, initially reported among other places in Microcontent News (Church v. Google: How the Church of Scientology is forcing Google to censor its critics). The New York Times (reg. req.) has a good summary of the entire controversy on Google vs. Scientology (Google Runs Into Copyright Dispute).

  60. While i doubt its for *us*, its good. by nurb432 · · Score: 1

    Im sure its more to reduce network traffic and server resorurces, ratner then protecting its users ( us ).

    But its still a good thing, and I hope they can make a dent in the 'spam-trade'. its way out of hand and only getting worse.

    --
    ---- Booth was a patriot ----
  61. Strange Yet True by OrcishSpacesuit · · Score: 2, Interesting

    I've had a spare hotmail account for nearly a year now, and I've gotten no spam in it at all, unless you count the MS stuff. I've even used it, giving out the address to people I know and to sites I trust (like slashdot.org and skotos.net), and to small community sites like forums and such.

    No spam. At all.

    If I had to guess, I would say that the 15-character username throws off some spammers. Mine's actually a combination of two words, though you won't find one in most dictionaries.

  62. MS may not sell you email adr but ... by Whammy666 · · Score: 1

    From what I've heard (hearsay), they do sell the email addresses of the people you email. This allows them to harvest email addresses from outgoing mail for sale to spammers while complying with the privacy statement that they won't sell your email adr to spammers. I strongly suspect they're not alone in this practice.

    --
    When all else fails, run.
  63. more likely scenario by Anonymous Coward · · Score: 1, Interesting

    MS spam is going unnoticed due to all the "illegitemate" spam (not that it's illegitimate to *it's* source).
    Illegal spam is BS, like it's somehow different from paid for advertising. I think it's kinda nice that some MS scam is side by side in my inbox with cell phone antenna boosters. Two products that claim to do something...
    It's like those guys in redmond have a lot in common with thieves everywhere.

    1. Re:more likely scenario by Anonymous Coward · · Score: 0

      It's like us anonymous cowards in Slashdot have a lot of common with trolls everywhere.

  64. Hotmail and my hotmail account by Anonymous Coward · · Score: 1, Insightful

    I run trillian, I needed an MSN Messager account to contact 1 friend who does not run AIM, Yahoo, or ICQ which I already run on that beasty. So I signed up for a hotmail account as Trillian pushed me to it.

    I did not write the hotmail account name down, I did not post it anywhere, I never wrote a message to anyone from it, and I never typed the words that the account name contains. In other words, nobody short of me and a secure connection should have ever seen the account name.

    Within 2 days I had MSN sponsored spam, within 5 days I had my first real world spam. As of today I now have all these MSN member services announcements, and MSN will not let me block their valuable announcements (today was how to manage my money by using MSN)

    blah.

    Hotmail sells to authorized retailers who then turn around and sell to other places and next thing you know you're signed up for herbal viagra spam.

    1. Re:Hotmail and my hotmail account by santos_douglas · · Score: 1

      Interesting - I have the same exact scenario - I started using Trillian after getting sick of opening three differnt chat programs every time. I signed up with MSN only to use their messaging service - and to date not a single spam message! Just an occasional (monthly) mail from MS itself advertising some new lameass service they are pushing.

  65. MS **IS** THE SPAMMER.. by jkrise · · Score: 2, Troll

    I doubt this is a good start by MS, and I'm not sure MS is completely helpless or innocent either.
    I suspect this is a PR stunt to plead helpnessness in a matter where they are actually the guilty party.

    I get frequent spam on my hotmail account, I'm using this account for 4 years now. Curious thing is, these spam mails for elongated pelvic protusions, anlarged mammiary glands and Nigerian style mails - APPEAR - to be spam.

    But APPEARANCES CAN BE DECEPTIVE. I'm pasting a complete mail I got recently from a bogus address, to my hotmail account, sundaram_kr@hotmail.com I post this address publicly - so I can study the spam problem in detail.

    My reasoning first, then the attachment:
    1. This mail APPEARS to be spam, but is NOT. The instinctive reaction of any 'SENSIBLE' receiver of spam is to hit the delete button. I did not. I sent a 'reply' and it bounced off the non-existent sender's address.
    2. I checked the mail for any snail-mail address - surprisingly, there was NONE WHATSOEVER!!

    Thus, I conclude:(Elementary, my dear Watson)
    1. If the 'sender' were indeed a Nigerian bank spammer, he'd have included his snail mail address.
    2. If he's paying for the bandwidth to send the mails to MS Hotmail, he'd better have a sound motive. Annoying me does not serve any purpose for a banker, however moronic.
    3.Even if he'd planted the mail in insecure servers and used their bandwidth to spread his spam, he'd still need a motive - none appears to exist.
    4. It should be trivial for a co. like MS to track down such a bulk e-mailer - years ago. Apparently hey have not done so - and thus:
    5. MS 'IS' THE SPAMMER. They are the ONLY ones who'd gain a cent by annoying me, and charging me for a spam-free service. They are the only ones who could store these messages on their servers and not need to pay any bandwidth charges.

    and now, the so-called spam:
    begin attachment

    Mr.Isaiah K.Muttai.
    Senior Manager,
    Operations
    Banking Services,
    Kenya commercial Bank.

    Dear Sir,
    I Isaiah K.Muttai the Senior Manager, Operations
    Banking Services, I want to include you in this God's given opportunity.
    On Saturday 30th January 2000, flight KQ 431 left Nairobi at 12.00 p.m. headed
    for Lagos, Nigeria on a scheduled flight. The thirteen-year old Airbus had on
    board a total of 179 passengers who included 11 crew members.

    This plane could not land at Lagos due to poor weather and the pilot decided to
    stop and refuel in Abidjan, Cote d'Ivoire. However, on leaving Abidjan, about
    two to three kilometres from the coast,the plane crashed in the ocean. This is
    the first time a crash involving a Kenya airways plane since it was established
    in 1977.

    So my friend, one of our customers happened to be involved in the plane crash,
    who deposited £11.3m.(eleveen million, three hundred thousands pounds) few
    months before the incedent.
    This fund has been dormant in his account with this Bank without any claim of
    the fund in our custody either from his family or relation before our discovery
    to this development.

    Although personally,I keep this information secret within myself and partners to
    enable the whole plans and idea be profitable and successful.

    Meanwhile all the whole arrangement to put claim over this fund as the bonafide
    next of kin to the deceased, get the required approval and transfer this money
    to a foreign account has been put in place
    and directives and needed information will be relayed to you as soon as you
    indicate your interest and willingness to assist us and also benefit your self
    to this great business opportunity.

    In fact I could have done this deal alone but because of my position in this
    country as a civil servant,we are not allowed to operate a foreign account and
    would eventually raise an eye brow on my side during the time of transfer
    because I work in this bank.
    This is the actual reason why it will require a second party or fellow who will
    forward claims as the next of kin with affidavit of trust of oath to the Bank
    and also present a foreign account where he
    will need the money to be re-transferred into on his request as it may be after
    due verification and larification by the correspondent branch of the bank,where
    the whole money will be remitted from to
    your own designation bank account.

    I will not fail to inform you that this transaction is 100% risk free. The
    sharing rate of this money will be discussed later upon your favourable response
    showing your zealous determination to assist
    us but the first priority is your total acceptance and commitment to assist.

    Please,you have been adviced to keep top secret as we are still in service and
    intend to retire from service after we conclude this deal with you. I will be
    monitoring the whole situation here in this bank
    until you confirm the money in your account and ask me to come down to your
    country for subsequent sharing of the fund according to percentages.

    Please my friend, i will like to hear from you whether you are interested or
    not.

    Best Regard,
    Mr Isaiah K Muttai. .end attachment
    The 'header' with the bogus details...

    From :
    "Isaiah Muttai"
    To :
    isaiahkm@myself.com
    Subject :
    Thanks for understanding
    Date :
    Tue, 05 Nov 2002 07:50:37 -0500

    end header..

    --
    If you keep throwing chairs, one day you'll break windows....
    1. Re:MS **IS** THE SPAMMER.. by Anonymous Coward · · Score: 1, Interesting

      you are kidding, surely. Have you not seen this type of spam/fraud before? I get loads of them from the b*st*rds.

      What happens in this fraud is.. stupid, greedy and/or gullible people read it and think its true, they contact the fraudsters who then talk them into coughng up a few grand in legal fees/bribes/etc with the promise of the big payout. Once they've done that, the fraudsters keep asking for a bit more and more and more, evetually they inform the sucker they're coming to a hotel in the US to give them their share... and the sucker never hears from them again.

      It has nothing to do with MS. Why would anyone think it is - except that it gets delivered to your hotmail account?

      MS does not charge for a spam-free service. They filter some spam mails for free. The ones that get through will get though a premium service too.
      Second, MS does pay bandwidth charges - which telco provides them with their internet access? They don't give it away for free.

      MS cannot find the spammers easily - they forge the email headers, and email does not contain the IP address the stuff was sent from.

      The problem with spam is pervasive to everyone on the internet. New laws may help if they can find and prosecute the spammers, if so, I'm all for it. Good on MS for having a go at the spammers.

    2. Re:MS **IS** THE SPAMMER.. by milkman_matt · · Score: 1
      Damnit! You mean that was a scam!? And here I thought I was going to be rich :(

      -matt

    3. Re:MS **IS** THE SPAMMER.. by Anonymous Coward · · Score: 0

      Did you not read the post? He said he tried to contact the spammer and was unable to do so. The reply to address was bogus and there was no other information provided that would allow you to contact the person if you were dumb enough to fall for the scam.

    4. Re:MS **IS** THE SPAMMER.. by Anonymous Coward · · Score: 0

      uh... ok.. and your point was...?

    5. Re:MS **IS** THE SPAMMER.. by Gooba42 · · Score: 1

      The weirdest thing has been happening to me in ICQ lately, I get the typical "I'm hot for you" spam, but they don't follow up with an URL, email addy, snail mail addy or anything else that would normally be advertised, just this random message. Is there some angle I'm not seeing as to how they're advertising? So far it's just entertaining to get these funky one-liners from nobody in particular with no ad attached.

      --
      I just found out there's no such thing as the real world. It's just a lie you've got to rise above. - John Mayer
    6. Re:MS **IS** THE SPAMMER.. by Anonymous Coward · · Score: 0

      Has to be someone you know.

  66. thank you lord by steak · · Score: 1

    i get ~200 spams a week in my hotmail account its good to see that not everything m$ does is evil

  67. Hypocrites by moc.tfosorcimgllib · · Score: 1

    For the number of people who enjoy bashing microsoft on this website, a large number of you hold hotmail accounts.

    This is not meant to be flamebait (I access my hotmail account through mozilla), but rather to point out that while many of you hate microsoft, you like the products they produce. Even if you're cursing MS Word while using it, you're using it instead of OpenOffice (or any number of alternatives), giving credibility to MS that they produce the best products.

    If you have to make a funny statement that MS Sucks AND did a good thing, or whatever, try to be less of a hypocrite about it.

    P.S. I'm not new here, I'm also a hypocrite, that's my angle in about all my posts (sarcastic jerk), but when everyone else treads that ground cluelessly, it gets old fast.

    1. Re:Hypocrites by Whammy666 · · Score: 1

      Many people had hotmail accounts prior to the M$ takeover of the company and simply don't want to loose their longtime email address.

      --
      When all else fails, run.
    2. Re:Hypocrites by Anonymous Coward · · Score: 0

      We don't give credit with MS Word, Microsoft has mearly created a monopoly on document processing with their proprietary formats. Thus OpenOffice reads their formats which are almost unescapable in officing. They don't make the 'best' products, mearly hold a monopoly on markets.

    3. Re:Hypocrites by HeathenWolf · · Score: 1

      While I agree with you regarding hypocrisy among some MS-haters, you're forgetting something kinda relevant here: many of us signed up for Hotmail LONG before MS took over. I personally have an active account from back in at least '96 (MS announced the buy-out in January '98). It might not make a huge difference, but it does shave a hair from the head of the hypocrisy ogre.

      That account that I've had for all these years, by the way, is almost completely useless due to the volume of spam it receives. I can't remember the last time I logged in and DIDN'T find a junkmail folder with a triple digit quantity of messages. This, despite my best (read: futile) efforts to unsubscribe from the various lists that I stupidly signed onto back when I was a total n00b. I guess the best lessons are hard learned, eh?

    4. Re:Hypocrites by Anonymous Coward · · Score: 0

      Hotmail hasn't always been owned by MS. They bought it after it was fairly popular and in widespread use.

      Jesus.

      Haven't been on the web that long, have you?

  68. Re:So what....is this insightful?? by jkrise · · Score: 0

    "Why would MS sell your e-mail address so they can turn around and pay for the bandwith it takes to receive thousands of spam e-mails?"

    The OBVIOUS solution to this would be that MS DOES NOT pay for the bandwidth. How is that possible?? The only possibility is that: MS IS THE SPAMMER. I'd even imagine they store only a SINGLE copy of a 'type' of spam - and then link it to all their own users.

    Similar to the way in Exchange - a mail to a 'group' is stored once, and refernced from there. Thus - no need to pay bandwidth for millions of spam; and 2: no need to STORE the millions of spam either.

    Most Moderators are Morons; Sensible Moderators are Oxymorons.

    --
    If you keep throwing chairs, one day you'll break windows....
  69. more! by spazoid12 · · Score: 3, Funny

    The original news.com.com story is slightly more informative.

    It's also slightly more .com.

  70. Whoah... by Anonvmous+Coward · · Score: 1

    Is this the first time an MS story made it to Slashdot without a conspiracy about how they're evil in some way? Next, are we going to get a story about how Linux needs improvements here and there?

  71. "aegean stables"? by mwood · · Score: 2, Insightful

    Cleaning undersea stables would indeed be a Herculean task, but I think you meant "Augean".

  72. Re:Mail Washer by fleener · · Score: 1

    MailWasher for Windows does exactly that. You begin compiling a "friends" and "foes" list that help sort incoming mail. You can toggle whether to use blackhole lists to automatically mark mail as spam or probable spam. Then you can delete and/or bounce messages in bulk. It's simply delightful.

  73. Drat! Not what I thought. by mwood · · Score: 1

    I thought the headline meant they were going to crack down on all the spammers who *use* Hotmail (or at least claim to). I can't recall ever receiving a legitimate message from a Hotmail account, but I have piles of porn offers, Viagra-by-mail, etc. with Hotmail return addresses. One of these days I may go ahead and add that procmail recipe: :0
    * ^From:.*@hotmail /dev/null

  74. Microsoft SELLS email addresses!! wtf! by evil_pb · · Score: 1
    Ok, so maybe their "acceptable use policy" or whatever concoction they have this week, prevents them from using the hotmail accounts themselves as spam addresses they can profit from. Guess what, the rest of us on the Internet are screwed!

    Microsoft gathers the email addresses of anyone who *sends to* a hotmail account, and distributes them. It has been documented, and proven. This is just a PR move to pull that from the spotlight, because people are figuring it out now. Don't buy into the hype - if MS can find a loophole to profit from you, THEY WILL.

  75. So now we know the real reason by xant · · Score: 1

    MS sells addresses to spammers. MS observes spammers getting to spam their service for free by harvesting or dictionary-attacking hotmail. MS is not making money off of this.

    Solution: Sue the spammers who are spamming for free! If you want to spam our users, you have to pay us!

    --
    It's rare that you're presented with a knob whose only two positions are Make History and Flee Your Glorious Destiny.
  76. If I ran an unethical ISP by ZZHead · · Score: 1

    . . . I would promise to NOT sell or share my customers email addresses. And hew to it.
    But, I could harvest all email addresses that they (customers) send-to and all email addresses that send to them. And the "CC"s. That ISP would have a big pile of live addresses to sell.
    Jeez though. That does seem pretty rotten. Maybe I would only sell them to advertisers that "promise" to get OPT-in type permission before using.

  77. I got an email from MS the other day by Anonymous Coward · · Score: 0

    The subject was "Fight spam with MSN 8!" Think about it for a moment.

  78. Re:Microsoft SELLS email addresses!! wtf! by cdn-programmer · · Score: 1

    Please elaborate.

    Distributes addresses to whom? FOr what purpose?

  79. Not a good solution by Anonymous Coward · · Score: 0

    Whoever sent you the email gets an automated reply from hushmail

    So, this scheme will work as long as the sender isn't also using a similar scheme. Further, this strategy implicitly says that your time is more valueable than the sender's time; which is somewhat arrogant.

    1. Re:Not a good solution by dark_panda · · Score: 1

      It might seem arrogant, but I'd like to think my time and bandwidth is more valuable than the spam I receive, which makes up probably 90% of the mail that account receives. The people I want to receive email from aren't affected, and new people who aren't on my unfiltered list just need to make a one-time click to get by for future emails.

      J

    2. Re:Not a good solution by Monkeyman334 · · Score: 1

      One problem I had, and maybe you have a solution for. When you register for an account on my site, we send an automated email that has you click a link to verify that the email account you provided is accurate. The other day I got an autoreply from a system you described. I didn't really want to click on it, because they advertised a brand name and try to sell it on their autoreply, but I clicked it anyway for a user. But what if I hadn't put my email address as the reply? Is there a consistent way for automated systems like this to get past the filter?

    3. Re:Not a good solution by dark_panda · · Score: 1

      All email that doesn't pass the filter goes into a folder called "pending", which is basically a temporary folder. Email that sits in it for more than a few days are deleted. So if you're expecting an email from a service that you signed up for, you just look in your Pending folder. From there you can unblock the domain or address and move the email to your Inbox.

      I still receive tons of spam on my account, but it all goes into Pending where I can ignore it. If I'm expecting something, like an "I forgot my password" email, I just check to see if it's burried amongst the spam in Pending and add the domain to my unfiltered list.

      For this sort of system to work, it relies not only on the sender, but the owner of the account as well.

      It's not the perfect email filter, but I haven't received a single spam in my inbox since I turned it on. My Pending folder is getting pretty ridiculous, though.

      J

  80. I use my Hotmail to harvest spam by CanadaDave · · Score: 2, Interesting

    I use my hotmail account to harvest spam for use with Mozilla's Bayesian filters. Without Hotmail, my spam folder wouldn't have over 1000 messages in it right now (and I just started a few months ago, when mozilla 1.3a came out)

    1. Re:I use my Hotmail to harvest spam by burns210 · · Score: 1

      1000 spam messages? sheesh. While not perfect, Hotmail does provide it's own filters, while not cool and adaptive, with its free service. Things like hightened security settings, only allowing addressbook emails to send you mail(all else is deleted), trashing anything with keywords(10 filters), blocked email list, and a few other options to get rid of spam.

  81. How about a "select all" button? by FuzzyBad-Mofo · · Score: 1

    I never use Hotmail anymore, mainly because I can't be bothered to check the 'delete' box for 200 spam messages every time I log in. It's not a cure for spam by any means, but it would make it much easier to clean out an Inbox. Yahoo mail has had this feature for ages, and it makes web based email much more useful.

  82. Microsoft? by tader · · Score: 1

    With my hotmail mailfilter... The only junkmail I get in my hotmail is from Microsoft itself!

  83. Elementary by dnoyeb · · Score: 1

    If the domain from the email server does not match the given IP address of the given server BLOCK IT.

    forgetaboutit.

  84. Come on Guys by guibaby · · Score: 0

    This is rediculous. Microsoft is looking for a cut. How much would you like to bet they settle for a % of future earnings.

    --
    Historically, the claim of consensus has been the first refuge of scoundrels.
  85. West Nazi Germany by Anonymous Coward · · Score: 0

    "West] Germany has behaved itself since WW2, and that's what the US is complaining about!"

    Not really. Remember Willie Brandt, with his "realpolitik" approval of Soviet imperialism. Remember when West Germany supported Libya in its efforts to exterminate Jewish people when it funded its chemical warfare program. Accounts keep leaking out of West Germany's support for anti-semitic Middle Eastern regimes.

    "Nah, you just fund them (IRA*, Osama bin Laden, Taliban, Saddam Hussein, Contras) and train them (as before minus IRA). *=privately."

    The U.S. never funded Bin Laden and the Taliban. These two groups were not on the scene when the U.S. helped Afghanistan nationalists kick out the Soviets. Saddam Hussein? Primarily a creation of France and the USSR, with little U.S. involvement. The Contras? More revisionist history. It was a great thing that the U.S. helped them and kept the dream of Nicaraguan self-determination alive in the dark years of Soviet domination.

    1. Re:West Nazi Germany by pommiekiwifruit · · Score: 1
      The U.S. never funded Bin Laden and the Taliban.

      I thought they did give the Taliban money after they took power (specific sums of money were quoted in the papers before the war, no doubt intended for useful activities rather than making war). Bin Laden is "well-known" as being a CIA creation, but I don't have references for that.

      Remember when West Germany supported Libya

      That one I'll need to look up. My instincts would have been that the Italians and French would have been more involved with Libya than the Germans, but I am completely unfamiliar with the story. I know Libya is no friend of the UK (the IRA sourced Semtex from Libya) but more recently Gadaffi denounced the bombings of US embassies in Africa (he wants to be seen as an African leader; blowing up lots of black guys would not suit this aim).

      As for the contras I remember there being protests at the time, so whatever the pros and cons of the argument it shouldn't be called revisionist.

  86. SPAM *TO* Hotmail? by Anonymous Coward · · Score: 0

    So, they're going after people spamming TO hotmail, but not people spamming FROM hotmail?

  87. Here's the rub.. by ins0m · · Score: 2, Insightful

    If you actually read the grandparent, you'd see that the email address is fake and that there is no return mailer. Either this is one dumb spammer who is being purely annoying, or there's something underhanded here.

    As far as MS paying bandwidth charges... if it's locally-hosted spam, they don't pay on it. Fire up the spam daemon and bombard the email service internally. Why? Perhaps just to generate more clicks, I would guess.

    I'm sort of disappointed the parent didn't give the extended headers; I know that hotmail would show the mail server routing... in such a case they could block the spammer if he/she was doing it directly from the home machine, or if not, to contact someone down on the anon-mail host to shut the crap off. In any case, there's a simple solution (and yes, you can tell in access logs who has been sending a ton of spam at once from the same IP, it's not that hard). Now, if these really are the headers as completely as given.... then what's left to think but perhaps they might have a hand in it? I seriously hope you weren't convinced of your statement that "email does not contain the IP address the stuff was sent from". Even a spoofed or bogus IP would show up on a robust service monitor's detection when a crapflood of spam comes in.

    This could all just be MS/Big Brother FUD and this is just an isolated case of an uberignorant spammer who goofed up his mail, but I'd be interested to see what's up. I don't think MS is as innocent as they portend, given how easy it is to set up access control by IP to services. Yes, good on MS for going after spammers... but after how long that Hotmail has been spam-riddled? It reeks of opportunism to me.

    --
    Never attribute to Hanlon that which can be adequately attributed to Heinlein.
    1. Re:Here's the rub.. by flonker · · Score: 1

      In playing with the Nigerian fraudsters, I found that unless you reply within less than an hour of first receiving the email, chances are that the account was cancelled. BUT, if you reply *right away*, you can get through to a real person, (and then take them on a wild goose chase as they try to call you at the white house, and then at FBI headquarters...)

  88. An offer they can't refuse by mariox19 · · Score: 1

    Microsoft will just offer spammers a subscription service implemented in .Net to e-mail Hotmail users for them ;-)

    --

    quiquid id est, timeo puellas et oscula dantes.

  89. Why is MS suing itself? SImple by kaltkalt · · Score: 1

    Of course MS sells hotmail addy's to spammers. So why are they suing themselves (or rather, their customers)? To create the illusion of being your anti-spam friend. Free good press. Yay now MS is on the good side! Hardly. This will be the last you ever hear of this "suing the spammers" case. MS wins both ways. They make money selling the hotmail addresses, and they look good "suing" the spammers.

    --

    Stupid people make stupid things profitable.
  90. Making spam expensive by Space · · Score: 2, Interesting

    Can the slashdot effect make spam expensive?
    If we posted any URL from a spam message, minus any identifying information, to slashdot and enough people visit that url will the spammer lose money paying for that bandwidth? What if several broadband slashdotters run a recursive wget several hundred times simultaneously? Can we make spam a less viable matketing technique if the bandwidth costs alone are more than snail mail and any of the idiots that actually buy stuff from spammers can't even connect to the site in question?

    --
    I Don't Work Here
  91. Here's a spammer by Anonymous Coward · · Score: 0

    Besides selling drugs to kiddies, this guy has also used spam to make his multi-million$ fortune

    David William Miller
    res:
    81 Attfield St. Fremantle
    Western Australia
    ph. (61)(08)93351607
    ph. (61)(08)93358709
    mobile: 0414956410

    bus:
    4/10 Rees St O'Connor
    Western Australia
    ph. (61)(08)93141062
    http://www.amusementauction.iine t.net.au/
    http://www.kingcarnival.com

    email: dmiller@iinet.net.au, gra@iinet.net.au, gra102@hotmail.com

  92. Re:"bigger targets attract more arrows". by Technician · · Score: 1

    I wonder if part of the answer will be to split up hotmail into a bunch of smaller domains, each containing no more than 10,000 users just to make dictionary attacks much less productive. I would love to see that and have each domain contain a honeypot. The honeypot would be the spam filter. Anything sent to any users and the honeypot would deleted. Of course stuff in the honeypots would generate the usual abuse follow-ups.

    --
    The truth shall set you free!
  93. microsoft needs to go after itself first... by Anonymous Coward · · Score: 0

    bcentral isn't exactly clean y'know...

  94. hooray for links! mod the boy up by Anonymous Coward · · Score: 0

    word.

  95. Kudos from a competitor by Eric+Savage · · Score: 1

    While we obviously aren't anywhere in the ball park of MSFT financially, we do offer similar service (email). These big companies making beneficial use of the hordes of idle lawyers they likely have is to be commended, even by competitors.

    --

    This is not the greatest sig in the world, this is just a tribute.
  96. ummm by MERVERNATOR · · Score: 1

    wasnt it Microsoft themselves that switch on every singles users "share my personal information" without telling them? Didnt this act pretty much start most of those users getting all the spam?

    1. Re:ummm by MERVERNATOR · · Score: 1
  97. Monopoly... by Iscariot_ · · Score: 1

    Speaking of Monopoly, I can't believe there isn't a version of Monopoly centered around the man Microsoft.

    Who wouldn't want to play a game that has locations such as 'Internet Explorer Place', or 'OfficeWalk'.

    Laugh!

  98. My mistake by moc.tfosorcimgllib · · Score: 1

    Thank you for pointing out MS bought out Hotmail. It brightened my day in a dark way.

  99. Re:Obtain ID's from banner ad server referal? by bboombotz · · Score: 1

    Think about how many people receive emails with links inside them... and click them and get a frameset with the top from MSN saying "You are visiting a site outside of hotmail...." yadda yadda.... good way to capture your email addresses and all. Anyways, everyone I know who has a hotmail account has had a ton of spam.. one guy I know stopped using it because of that. I personally like Yahoo! Mail... more space and less spam... though I still get some there as well, but you will always see some amount of spam.

    --

    Rob
    -----
    Got something on your mind?
    Post it.. we want to hear it!
    www.bboombotz.com
  100. Yahoo Mail using SPAM problem as revenue source by adzoox · · Score: 1
    Yahoo will tell you that they have a "Bulk Mail folder" to stop SPAM. However, the storage of "bulk mail" goes against your storage total.

    I beleive Yahoo is selling "descreetly and indirectly" to spam companies. You have to watch when you sign up or pay for Yahoo services how you are agreeing to sign your information over.

    I was forced to get a Premium Yahoo account because of the "bulk mail" filling up every 48 hours - If I didn't empty it, it would bounce my eMail.

    Yahoo uses this questionable way of gaining revenue in the same way they allow OBVIOUS porn solicitors to post personal ads, and allow OBVIOUS scammers to sell "Presale Auctions"

    --
    Yell & scream & rant & rave... it's no use... you need a shaaaave ~ Bugs Bunny
  101. hotmail vs. yahoo by GOD_KHAOS · · Score: 1

    Why doesn't mail.yahoo.com have this problem? I have hotmail and yahoo accounts just like several of my friends do and our yahoo accounts don't see 1/10 of the spam that our hotmail accounts do. I don't even bother reading my hotmail anymore because every account I have there gets literally hundreds of junk e-mails per week. It's such a waste really.... but maybe this is just code-bloat karma coming back to bite Microsoft :P

  102. Use a better mechansims to control mail abuse by aelfakih · · Score: 1
    I do not think that legal action will stop any kind of spam. There are other ways including "charging" people for recieved mail.

    It is an old concept, as old as mail itself. So instead of paying lawyers, to sue people who could be outside the US, why not invest in a new technology.

    There are many out there.. To mention one (plug coming..) check out the proposal I submitted to IETF. http://www.ietf.org/internet-drafts/draft-fakih-am dp-00.txt

    it is simple, and it works..

    Adonis

  103. Whats good for the goose... by frovingslosh · · Score: 1
    but it's nice to see America's favorite monopoly putting its power to good use."

    It would even be nicer to see the unwanted spam I get from Microsoft to stop. I don't even have a hotmail account, but I get plenty of spam from M$ in another of my accounts. And I'm not talking about all of the spam that uses hotmail return addresses and the like, I'm talking about spam that I never signed up for that claims to come from Microsoft and is outright selling a Microsoft product. Unless you belive in a conspiracy theory that someone else is going to a lot of trouble to forge these things to make poor old Bill Gates look even more evil, then Microsoft is also a spammer.

    --
    I'm an American. I love this country and the freedoms that we used to have.
  104. It depends a lot on the username by jesterzog · · Score: 1

    I think it depends a lot on what your username is. A possibility that you didn't mention is that the account you created has a username that was previously owned by someone else. (Microsoft did a sweep of old, unused hotmail addresses some time ago.) If this is the case, it's probable that it's been being spammed for the entire time that it's been inactive.

    Also random username guessing is fairly normal for hotmail. If you have a relatively short name then it's almost certain it'll be on a spam list. I have two particular hotmail accounts -- one with an 18 character user name and another with a 37 character username (that's four words joined by underscores), and neither of them have ever attracted any spam. A year ago I created an account with a 5 character username that wasn't even a dictionary word, and it was being spammed within a month.

    If you want to avoid spam on hotmail, you need to do more than keep your address secret and make sure that you uncheck or check all of the appropriate boxes on signing up. You also have to have a long enough username to make it infeasible for spammers to randomly guess it.

  105. major spammer: sfimarketing.com by Anonymous Coward · · Score: 0

    I hope that Microsoft nails them. They also own and operate some other web sites: www.sixfigureincome.com and www.carsonsi.com. These bastards mail millions of people a day and are getting rich doing it, essentially selling their primarily email marketing services and get-rich-quick schemes. Nasty bastards.

  106. My Hotmail would be empty, if not for SPAM by Vinnie_333 · · Score: 1

    But ... isn't that what your Hotmail account is for? To give to companies you know are going to SPAM you. I log on to my Hotmail once a week to delete 200 SPAMs. I don't use this account for any real pursose, only as an address to give when e-mail is required to download software, etc.

    --

    "We shall party like the Greeks of old! You know the ones I mean." - HedonismBot
  107. what about spam from hotmail? by Anonymous Coward · · Score: 0

    What about all the spam mail everybody gets for Hotmail subscribers! that is where 80% of my spam comes from.

  108. Ill stop bashing windows... by alexborges · · Score: 1

    if it will get those fsking spammers off my back.ç

    I swear to god ill be the first to applaud them.

    --
    NO SIG
  109. Microsoft is a Hotmail spammer. by blair1q · · Score: 1

    I still don't use the hotmail account I got five years ago, because there is no way to stop advertising emails from "staff". They can't be filtered, and have no reply buttons. MS, as usual, are hypocrites about their criminal activity.

    1. Re:Microsoft is a Hotmail spammer. by thebigmacd · · Score: 2, Insightful

      I know it is spam in principle, but Hotmail "staff" sends out an average of one email per month per user. Hardly enough to choke their servers or your account. As well, mail from "Hotmail Staff" is most likely just a pointer to a central file, reducing diskspace and bandwidth as well since savvy users delete the pointer (?) without loading the actual message. I personally don't find those messages all that hypocritical since they are advertising their own services. After all, why look the gift horse in the mouth? It's FREE as in beer.
      As well, the reason spam is illegal is because it is unsolicited by the email provider or user. Although not solicited by the user, *who* owns the darn servers? Microsoft shouldn't be barred from sending internal messages. I'll bet the messages don't even take up allocated account space (back to that pointer issue again).

  110. You don't have to view Hotmail via the web.... by Ride-My-Rocket · · Score: 2, Informative

    Just set up Outlook Express to connect to it in typical client/server fashion. Granted, it's in beta (and has been for quite some time... dare I say, indefinitely?), so it has some issues. But it's definitely helpful in avoiding banner ads altogether...............

  111. That's funny... by i64X · · Score: 0

    As a test about 4 months ago I created a Hotmail account, and never gave the address to ANYONE. I didn't so much as log into the account, except once to activate it. I unchecked all of the subscription services when joining up, and didn't check the box that said MS could sell the address name. 2 months later I logged into it, and it was full of spam. How'd that happen?! The only one besides me that knew the address existed was MS... Hmm...

  112. Re:fp by YOU+LIKEWISE+FAIL+IT · · Score: 0, Offtopic
    This is not the first post. You have not bought home the bacon for Stef... only failure. If only you had looked before you lamed!

    YOU LIKEWISE FAIL IT!

    --
    One god, one market, one truth, one consumer.
  113. Re: Not just M$ by giaguara · · Score: 1

    Not only M$ does that. I get up to 20 spams a day from iol.it and libero.it - their pornographic announcements that luckily mail.app filters.

    But - back to hotmail and M$ - I don't believe the rumor before I see it. I use hotmail only for registering use and throw web services, or for the things I think I can get spammed from. And - I filter my mails. If the incoming mail contains hotmail and is NOT in my address book > trash.

  114. heh by mattACK · · Score: 1

    >>Unless I want to grandstand with my important indignation.

    >Ummm, you're in the right place for that.


    Technically, in matters concerning us versus Microsoft it is not so much important indignation as impotent rage. ;)

    --


    "My God, this must be a truly remarkable corn chip, to be so widely and confidently touted."
  115. dictionary attacks suck by Acheron · · Score: 1

    These dictionary attacks are pretty commonplace actually, and people run them against *much* smaller domains than hotmail.com... I have logs of 15000+ connects attempting delivery to domains I host with all the attempted usernames in alphabetical order... adm@mydomain, admin@mydomain, adel@mydomain etc etc...

    If I see that level of aggressive mail farming on my wee domains, imagine what kind of resources spammers would put into hotmail farming... I bet people would have no trouble dedicating a couple weeks of heavy-duty computing time to build a dictionary to farm hotmail with with literally millions and millions of combinations of names, or even just random characters... aaaaaaaaaa, aaaaaaaaab...

    I bet the rewards would be worthwhile for them to put that sort of effort in.

  116. It destroys our credibility! by Khalidz0r · · Score: 1

    Well, it's more like 99999 more other guys blame Microsoft whether they deserve it or not.

    I don't like Microsoft, I rather dislike them, but then, we have to be fair when judging them, if we keep on blaming Microsoft for stuff they don't deserve the blame for, they can, and would, use this against us in things they do deserve the blame for, it breaks our crediblity!

    --
    "What you 'seek' is what you get!"
  117. America's Favorite Monopoly by handy_vandal · · Score: 1

    The submitter refers to Microsoft as "America's favorite monopoly" ... but of course, America's favorite monopoly is the Government.

    (It is our favorite, right? I mean, we voted for it ... didn't we?)

    --
    -kgj
  118. Sweeeeet! by Cinematique · · Score: 1

    First Microsoft eliminated all of their security problems last February, and now they're cleaning up Hotmail!

    Wonders never cease! Microsoft is on a roll!

    Give me a break.

    Redmond, WA (AP) - Just when you thought Microsoft couldn't be any more consumer-friendly, the company which produces Windows, the de-facto standard in desktop computing, manages to surprise everyone by announcing the inclusion of RedHat with every copy of WindowsXP sold.

    Steve Ballmer, President and Chief Executive Officer for Microsoft Corporation, spoke to reporters this afternoon in a press conference at Microsoft's headquarters located in Redmond, Washington. Ballmer enthusiastically addressed the crowd, stating, "[N]ow, slashdotters can have the best of both worlds, all in one box, all at one price!"

    Ballmer then went on to dance around, screaming, "Yeah!" at the top of his lungs, clearly attempting to create a stir with those in attendance.

    CowboyNeil could not be reached for comment.

  119. Hotmail and ham by bcrowell · · Score: 1
    My own experience is that MS is getting overzealous and sloppy with their spam filtering. I teach at a college, and I send out announcements to my classes via e-mail. Turns out that the students who had Hotmail addresses weren't receiving the mails. Apparently Hotmail was spam-filtering any e-mail that was addressed to a lot of people. If I sent them mail as individuals, it worked fine.

    There was also a recent case where false-positives ("ham") became a problem for Bruce Schneier's Cryptogram newsletter -- certain versions of SpamAssassin thought it was spam because it was long and contained URLs.

    The whole thing is an arms race, and I don't see any signs that the spammers are losing the race. They apparently test their spams against all the filtering software they can find out about. For instance, they'll write vi*gra instead of viagra to keep from being filtered.

    The real solution is economic: we need a whole new e-mail protocol with a sender-risks-paying system.

  120. your sig by Anonymous Coward · · Score: 0
    A troll a day keeps the doctor away.
    Please change your sig. You are bringing disrepute to all trolls with it.
  121. Read the Original Post by Bilbo · · Score: 1

    If you go back to the original post that you were responding to, you would find that the author was not talking about receiving spam, but rather to a spammer forging the headers to use the victim's his email address in the Reply-to: header. This results in hundreds or possibly thousands of replies and bounces hitting the victim's email inbox. This is a case Identity Theft, and in my mind should be punishable by removing certain tender parts of their anatomy...

    --
    Your Servant, B. Baggins
    1. Re:Read the Original Post by mark_lybarger · · Score: 1

      ok, yes, I didn't realize that the OP was talking about forged headers from spammers.

      regarding the identy theft. i'm not sure the federal law would agree that there's identify theft here. the federal law states:
      In October 1998, Congress passed the Identity Theft and Assumption Deterrence Act of 1998 (Identity Theft Act) to address the problem of identity theft. Specifically, the Act amended 18 U.S.C. 1028 to make it a federal crime when anyone:

      knowingly transfers or uses, without lawful authority, a means of identification of another person with the intent to commit, or to aid or abet, any unlawful activity that constitutes a violation of Federal law, or that constitutes a felony under any applicable State or local law.


      there has to be a crime committed with the impresonation. merely offering to sell subscriptions to a web-cam doesn't meet the criminal requirements needed for this federal law.

      state laws differ much, and they're so filled with lawyer muck that i won't paste my state's here, but here's the link:
      http://ohioacts.avv.com/123/sb7/sec-2913.49 .htm

      it's basically the same thing. you can't pretend to be someone else to fsck up their credit or to clean yours up. you also can't pretend someone else to commit a crime or to help someone else play with credit or commit a crime.

      irregardless, forging spam reply-to headers can be arguably less damaging than stealing someone's wallet, pretending to be them and mucking up their credit. this type of offense would hopefully land the offender some time in the federal pen. i'm not sure i would agree that castration would be appropriate here. i certainly would favor castration for rape/child molestation crimes in most cases.