Slashdot Mirror


Forty Percent of All Email is Spam

PCOL writes "There's an interesting article on spam in today's Washington Post which includes an inside look at AOL's spam control center in Northern Virginia. The story reports that roughly 40 percent of all e-mail traffic in the US is now spam, up from 8 percent in late 2001 and nearly doubling in the past six months; that AOL's spam filters now block 1 billion messages a day; and that spam will cost U.S. organizations more than $10 billion this year from lost productivity and the equipment, software and manpower needed to combat the problem."

623 comments

  1. Good percentage by Anonymous Coward · · Score: 2, Funny

    Compared to Slashdot posts!

    1. Re:Good percentage by badfinch · · Score: 2, Informative

      According to a site that keeps stats live for their filter for all mail proccessed 50.7% are detected spam from bulk senders. The site is http://www.herbivore.us

    2. Re:Good percentage by MikeDX · · Score: 2, Funny

      AOL's spam filters now block 1 billion messages a day

      Is this per user?

    3. Re:Good percentage by Carnivorous+Carrot · · Score: 1

      > that AOL's spam filters now block 1 billion
      > messages a day

      One wonders. I've an AOL account left over from the dark ages of Pre-Internet (It was old and decrepit long before the September that never ended.)

      I still get 5-10 a day, but it has gotten better.

      Yesterday and Today's lot (which isn't over yet):

      1. Buy Phentermine, Viagra & more with NO PRESCRIPTION! US doctors and pharmacies! Overnight Shipping!

      2. kindly read this and get back to me

      (From: I am Godwin Emefiele, Deputy Managing Director of Union Bank of Nigeria, Lagos. regarding a will problem, no less! Evidently together we'll scam up a fake will for someone who died [and their lawyer died, too] and divide 60/40 the $10.5 million decedent's account)

      3. see what the hype is about. pay off old bills now. lowest interest rates ever.

      (Don't these people even waste enuf time for proper spelling and grammar?)

      4. new job options with a flourishing potential!

      ...after you get your mail-in university degree.

      5. New! CNN NewsPass, Oscar Exclusives & Much More!

      Ok, not spam. This from AOL Broadband Satellite, which hasn't worked on my computer for 2 months. (Anyone know how to solve the installation issue for Win 98 where the installer attempts to install 2 copies of the USB Satellite Modem device, and neither works and the satellite modem USB light keeps blinking? It detects it on the USB, but chokes on a double-install of the device driver for it.)

      6. Northwest Airlines Weekly Deals & News

      Prolly not spam, I thought I didn't check "don't send me email", or maybe I was supposed to not not check the "I don't not wish to not receive email unless I didn't not check this box."

      7. CLONE YOUR DVD MOVIES TO CDs jej

      Note the "jej" appendage in an attempt to block spam blockers that do simple string compares to known subject lines. Note that it worked.

      8. Why not try

      ...debt consolidation.

      --
      "Has [being a kidnapped teenage girl, raped repeatedly for months] changed you?" - Katie Couric to Elizabeth Smart
    4. Re:Good percentage by Anonymous Coward · · Score: 0

      7. CLONE YOUR DVD MOVIES TO CDs jej

      Note the "jej" appendage in an attempt to block spam blockers that do simple string compares to known subject lines. Note that it worked


      SO, throw out the last 'word' or two before doing the compare. Duh.

  2. sure, sure. by irc.goatse.cx+troll · · Score: 4, Funny

    And 90% of all statistics are made up on the spot.

    --
    Pain lasts, kid. Its how you know you're alive. Sometimes I think this growing up thing is just pain management-TheMaxx
    1. Re:sure, sure. by oldmacdonald · · Score: 3, Funny

      Not true, your statistic was made up ages ago.

    2. Re:sure, sure. by NitroPye · · Score: 1

      I am pretty suer its 87.2 of all statistics are made of on the spot.

      You obviously did not take: hotair 101 or introduction to blowhards

    3. Re:sure, sure. by Anonymous Coward · · Score: 0

      No, it has gone up. Although, it's actually 90.4274578129% to be precise.

    4. Re:sure, sure. by Christianfreak · · Score: 1

      Actually its 37.4

      Okay sorry, shameless plug mode off.

    5. Re:sure, sure. by Anonymous Coward · · Score: 0
      Just got a spam from this website be sure to destroy it, or at least add this email: sales@swissworlds.com to your favorite spam list.

      Thanks, Slashdot!!

    6. Re:sure, sure. by Anonymous Coward · · Score: 0

      Add these guys to the list, if you please:

      http://www.see-thruwindows.com
      seethruwindo@earthlink.net
      (877) 733-8478

      These guys are real cocksucker telemarketers in the DC area that refuse to honor requests to be added to their do-not-call list. I'm pretty close to the point of recording my inbound calls so I have evidence against them, but it's nice to kick them in the nuts under the table too.

    7. Re:sure, sure. by felipeal · · Score: 1

      And 90% of all statistics are made up on the spot.

      Yes, but only 7.23% of the population knows that.

    8. Re:sure, sure. by Anonymous Coward · · Score: 0

      Yes, but 90 percent of that 7.23% are geeks.

    9. Re:sure, sure. by gidds · · Score: 1

      But that's okay, coz 83.7% of people don't believe them anyway...

      --

      Ceterum censeo subscriptionem esse delendam.

  3. Another stat by techstar25 · · Score: 5, Funny

    Ironic. Forty percent of spam is pork.

    1. Re:Another stat by TopShelf · · Score: 1

      Let's storm Congress, then - obviously they're the source...

      --
      Stop by my site where I write about ERP systems & more
    2. Re:Another stat by tm1rules · · Score: 2, Funny

      So, 16% of all email is pork? Tasty!

    3. Re:Another stat by Didion+Sprague · · Score: 0, Offtopic
      Do you mean 'pork shoulder' or 'ham?' As I understand it -- and I've written about real Spam here -- Spam is combination of pork shoulder and ham.

      Are you saying that Spam is 40% combined pork shoulder and ham? If so, then what's the other 60%? Water? Salt?

      Serious question. I'm curious.

      And actually -- back on-topic -- I'm surprised the percentage of spam email is so low. My email is most certainly 90% spam -- possibly 95%.

    4. Re:Another stat by Anonymous Coward · · Score: 0

      And easily 40% of my income income is confiscated via taxes. I don't give a fsck about spam...what can we do to rein in out-of-control government spending???

    5. Re:Another stat by billybob2001 · · Score: 2, Funny

      Forty percent of email is em

      Works in Ascii, Ebcdic and Unicode

      (no, there isn't a null at the end)

    6. Re:Another stat by G-funk · · Score: 0

      I believe you mean forfty per cent.

      --
      Send lawyers, guns, and money!
    7. Re:Another stat by cHiphead · · Score: 2, Funny

      then what's the other 60%?

      thats the secret ingredient you simply dont want to know about.

      soylent green is.... PEOPLE!?

      --

      This is my sig. There are many like it, but this one is mine.
    8. Re:Another stat by NotIrony · · Score: 1
      Ironic. Forty percent of spam is pork.

      Actually, there is no irony in that at all. Normally I would jump in by rearranging the situation to fit in some irony, but the statement is so lacking in irony that I don't think I can.

      --
      An expression or utterance marked by a deliberate contrast between apparent and intended meaning.
    9. Re:Another stat by coke_dite · · Score: 1
      > I believe you mean forfty per cent.

      and maybe you meant forty?

      --
      Visit us at http://www.iblist.com!
    10. Re:Another stat by Heywood+Yabuzof · · Score: 1

      It really reassures me to know there is a Slashdot user account dedicated to the sole purpose of exposing Alanis-irony. ;-)

    11. Re:Another stat by operagost · · Score: 1
      I can.

      Ironic. Sixty percent of SPAM is NOT pork.

      --

      Gamingmuseum.com: Give your 3D accelerator a rest.
    12. Re:Another stat by G-funk · · Score: 1

      no i meant forfty. Forfty per cent of people know that.

      Of course I am a tool and got my <b> and </b> mixed up.....

      --
      Send lawyers, guns, and money!
    13. Re:Another stat by shadowbearer · · Score: 1


      Speaking as someone who grew up in Hormel's "flagship" plant town....

      You DEFINITELY don't want to know ;=) I've been in the plant, remember...

      (I personally suspect the secret ingredient is missing ex-employees, but am unable to prove it ;-) /me pulls tongue out of cheek

      SB

      --
      It's old. The more humans I meet, the more I like my cats. At least they are honest.
  4. 40% ...? by DaneelGiskard · · Score: 4, Funny

    So who gets the 60% of the regular email I'm supposed to get?

    1. Re:40% ...? by scott1853 · · Score: 5, Funny

      It's deleted by the spam filters.

    2. Re:40% ...? by Blueice88 · · Score: 0

      Good question buddy but , who have the answer of it??best regards. Blueice88

    3. Re:40% ...? by ackthpt · · Score: 1
      Sure isn't coming to me.

      I found a mailbox I hadn't used in years, full of 1700 pieces of email. 2 were meaningful. I would have liked to keep header information to do some statistical analysis, but it was taking up significant diskspace.

      I'd consider most non-frivolous email is conducted within business or organizations. ISPs are most likely provide personal email accounts. How does AOL account for 60% good email? Or is it that there's millions of aol.com accounts the spammers have yet to harvest?

      --

      A feeling of having made the same mistake before: Deja Foobar
    4. Re:40% ...? by rppp01 · · Score: 1

      Exactly. 40% I get maybe 5 emails a day to my home inbox from family or friends, and the other 35 or so are spam. Who is getting all these non-spam emails?

      I guess they are excluding the 'penis enhancement' and 'breast enhancement' ads. Those make up most of my 'bulk mail' folder.

      --
      They stuck me in an institution, said it was the only solution, to...protect me from the enemy, myself
    5. Re:40% ...? by CyborgWarrior · · Score: 1

      Hmm, there must be some major govn't scheme to steal all my email. Mebe 10% of all my email is not SPAM...

      --
      If you can't say something nice, make sure you have something heavy to throw.
    6. Re:40% ...? by NewbieProgrammerMan · · Score: 1

      My POPFile statistics say that 63.02% of my email is spam, so it must be me. 15,777 spams so far this year!

      --
      [b.belong('us') for b in bases if b.owner() == 'you']
    7. Re:40% ...? by MousePotato · · Score: 2, Interesting

      ... I found a mailbox I hadn't used in years, full of 1700 pieces of email. 2 were meaningful...

      Hah! I got ya beat! I just got email from an account that I couldn't access for almost eight months and there were 7,018 messages in it! Of which 4 were keepers and the rest pure crap. What boggled me was that the account supposedly had a 2 meg limit that the admins never imposed and just let it grow and grow.

    8. Re:40% ...? by machine+of+god · · Score: 1

      popular people.

    9. Re:40% ...? by shadow303 · · Score: 1

      Well, if you get on a number of email lists, your non-spam mail can increase quite a bit. Granted, you might not be interested in a lot of these emails, but they aren't spam.

      --
      I've got a mind like a steel trap - it's got an animal's foot stuck in it.
    10. Re:40% ...? by EnlightenedDuck · · Score: 1

      Maybe me? By some miracle I still don't get any spam, despite having my e-mail address on several web pages....

      --
      Quack!Quack!.....QUACK!!
    11. Re:40% ...? by SoVi3t · · Score: 1

      Funniest. Comment. Ever!

      --
      Defender of Microsoft and Communism!!!
    12. Re:40% ...? by budgenator · · Score: 1

      I've got a default account where non-existant users get about 17MB a week. To cope I just upload a zero length file by ftp

      --
      Apocalypse Cancelled, Sorry, No Ticket Refunds
    13. Re:40% ...? by Anonymous Coward · · Score: 0

      can you link it to /dev/null?

    14. Re:40% ...? by letxa2000 · · Score: 1
      Yup. I'm putting the finishing touches on a spam filter that I've been writing. Among other things it is keeping statistics. I've found that 60% of my email is spam, too. And that's considering I have some hefty REAL mail traffic. A "typical" user that logs on to their email once a day to exchange mail with friends and family has GOT to be getting much more (percentage-wise).

      That said, I finished the Bayesian filter on Monday and now I'm catching 99.1% of spam with a corpus of just 200 good and 400 spam mails. The problem doesn't goes away but at least it doesn't bother me on a minute-to-minute basis.

  5. Time to by mattboston · · Score: 0, Flamebait

    call your congressperson and have them pass an anti-spam bill. that's the only way to solve this problem

    1. Re:Time to by Anonymous Coward · · Score: 0

      How about we sign up a few congressmen's email address for spam?

  6. now i get spam by stonebeat.org · · Score: 2, Interesting

    about spam stopping software.

    1. Re:now i get spam by Anonymous Coward · · Score: 0

      Sounds like that's a good way of reaching their target audience. After all, if you read their email, you most probably have a spam problem and may benefit from using their software.

    2. Re:now i get spam by Anonymous Coward · · Score: 0

      Another favorite of mine are the pop-up ads for pop-up elimination software.

    3. Re:now i get spam by You're+All+Wrong · · Score: 5, Insightful

      Nice innit?

      However did you notice in the article it said:
      "nearly doubling in the past six months, according to Brightmail Inc., a major vendor of anti-spam software."

      So I'm not 100% sure the stats can be believed - it's in their interest to tell you it's all doom and gloom. It's even in their interest to have you spammed, but that of course would be conspiracy theory central...

      YAW.

      --
      Your head of state is a corrupt weasel, I hope you're happy.
    4. Re:now i get spam by letxa2000 · · Score: 1
      Same here. The first time it was funny. But now I seem to get one every day or two. Seems to promote a site called "SecureDiscounts.com" which has long since been added to my blacklist.

      Thing is, I'm *guessing* that it isn't the anti-spam service that is spamming. I suspect they probably offer a "bounty" for every paying customer you signup and, as a result, there is an incentive for some idiot to spam everyone with his affiliate number.

      Either way, they're still blacklisted on my system.

  7. Only 40%? by mgs1000 · · Score: 1, Funny

    I seem to get a lot more spam than "legitimate" email. I guess I must have fewer friends. :(

    1. Re:Only 40%? by lunatick · · Score: 1

      Join the party, I know I get much more spam than real e-mail to the tune of 50-100 spams per day.
      *sigh* Unfortunately their isn't much you can do. My spam filters dlock out domains that are nothing but spam but they just get a different domain and I am back to square 1. so I am back to using the low tech alternative the Delete key :)

      --
      The Lunatick, Carpe Corpus!
    2. Re:Only 40%? by scott1853 · · Score: 4, Funny

      Maybe you have lots of friends and they're all filling out those "notify my friends" forms?

    3. Re:Only 40%? by usotsuki · · Score: 1

      Mu, hen ne.

      A full 95% of *my* mail - 19 of 20 messages, often literally - is spam.

      -uso.
      Mata BETONAMU na no?!

      --
      Dreams, dreams, don't doubt dreams, dreaming children's dreaming dreams. Sailor Moon SS
    4. Re:Only 40%? by Anonymous Coward · · Score: 0

      Actually, my boss gets more work related email than personal email and spam combined. Businesses account for quite a lot of legit email, so that probably accounts for the difference between the article's stats and your mailbox. (personally, going by how much spam filters into my bulk folder at yahoo, I'd say I get about 80% spam at that address. At my work address, I get 0% spam so far)

  8. My tests shows by brakk · · Score: 1, Insightful

    90% of my email is spam

    1. Re:My tests shows by Zaknafein500 · · Score: 4, Interesting

      On the server I administer, I have a nightly cronjob set to parse the spamassassin logs, and email me the stats.

      Since the logs were cycled on Sunday morning, there have been 8332 messages, 5824 of which were spam, for a percentage of 69.89%.

      This number has increased substantially over the last 3 weeks. This time last month we were below 50%.

      --

      "The guide is definitive, reality is frequently inaccurate."
    2. Re:My tests shows by word+munger · · Score: 1

      90% of my e-mail is not spam. I get about 15-20 spam a day, and 150-200 e-mails a day. No, I don't have that many friends; I'm just on a lot of listservs. A bunch of nerds isn't exactly a valid sample for testing the 40 percent number. It might seem low to you, but think of all the corporate suits e-mailing the latest marketing figures back and forth.

    3. Re:My tests shows by delcielo · · Score: 1

      Agreed. On my servers the percentage has jumped from about 60% to almost 70% in the last month.

      --
      Hot Damn! It's the Soggy Bottom Boys!
    4. Re:My tests shows by shadowbearer · · Score: 1


      I've noticed that too, on my home account. My ISP even has a spam filter, which seemed to be working for a while this last winter, but now isn't even keeping up. December I was getting 10-20 a day; now it's over 40 and climbing every day.

      Sigh.

      SB

      --
      It's old. The more humans I meet, the more I like my cats. At least they are honest.
  9. Accuracy by NitroPye · · Score: 3, Insightful

    I wondder how accurate the AOL spam filter is. If some people are accidentaly getting their emails blocked or others not getting emails delivered. Does anyone know on which principal the AOL filter works. Is it just a bunch of email addresses known to be spammers or is it some kind of guessing filter that has certain words and phrases coined as spam.

    1. Re:Accuracy by bheerssen · · Score: 4, Insightful

      A follow up question: how much spam gets past their filters and do they use a standard deviation accordingly to arrive at those numbers? It is conceivable that the actual figure is higher.

      --
      (Score: -1, Stupid)
    2. Re:Accuracy by Anonymous Coward · · Score: 2, Funny

      Even if its only 70% accurate, thats still 700,000,000 emails. At a cost of $10bn per year, its about time that its was illegal country wide, made a felony and a section of the FBI setup and funded by a $1 per quarter employee tax on companies. They should then track down, arrest, beat and torture these non-people, put them on a stinking shithole island, Australia well do and then let them rot in hell. Forcing them to listen to the Canadian screamer, Celine or even worst, Witney...

    3. Re:Accuracy by Analog · · Score: 2, Interesting
      I wondder how accurate the AOL spam filter is.

      Not terribly. Several years ago, after I first got broadband, I set up my own mail server because my ISP's was constantly going down. I've run it since then with no trouble.

      Several weeks ago, I started getting bounces on mail I sent to AOL addresses. Turns out AOL uses lists of IP addresses that are known to belong to ISPs but not be their mail servers and refuses connections from them.

      Their attitude is that I have no business running my own mail server, that I should use my ISP's instead (gee, maybe if my ISP's didn't suck I would). So, yes, I can say that at least a few of those 1 billion are legitimate mail.

    4. Re:Accuracy by Anonymous Coward · · Score: 0

      Tell your friends to get a non-AOL account. Face it, their network is crippled

    5. Re:Accuracy by HeelToe · · Score: 1

      I have been caught by this recently, too.

      Did you know sourceforge (!?!?) also blocks legitimate mail from hosts listed in the MAPS DUL? This situation is ridiculous. I've been feverishly trying to figure out how to get qmail-remote to rate monitor its sending to an outbound relay. Comcast currently throttles you if you send >48 messages in a 60 second period. So if you have a mailing list, forget it, you're hosed.

      What I've done temporarily is send to an alternate broadband connection that isn't yet listed in the DUL. Probably this option will disappear soon. My plan is to have qmail-remote support grepping the responses sent by a remote mail server in case of temporary or permanent failure, and then redirect to an outgoing relay mailserver when that happens. This way, it can detect DUL failures, and for the mostpart, deliver by itself, but when a message includes the DUL URL or some other regexp that indicates blacklisting, just bounce through Comcast's outgoing mailserver.

      Anyone else dealing with this problem and found a good solution?

      The real solution is to get a real isp that cares about its customers and fights to get their ips off these lists or provide real outgoing relay service. It seems that to participate in the internet in a publishing fashion, you need to fork out megabucks. So, the internet is becoming like all the other big media. Cheap to consume, but forget about publishing, it's not for you, Joe Public.

      I'm currently looking into colocation/dedicated hosting or maybe just smtp relaying. What is everyone else doing?

    6. Re:Accuracy by wawannem · · Score: 3, Informative

      You know... You could fix this kind of situation yourself. If you set up a real DNS zone, AOL would have no way of knowing you aren't running a legitimate mailserver. Shell out a few bucks to get a name, then spend a day or two figuring out BIND (or worse WinNT DNS), then viola! You will be doing it correctly!! And who would have thought, when you do it right, ISPs will honor it!

    7. Re:Accuracy by corbettw · · Score: 5, Insightful

      Umm, what AOL is doing is right and proper. Is your host the MX record for a domain? No? Then noone should be accepting mail from it. Can your host be authenticated with reverse IP look-ups, crosschecked with MX? No? Then, again, noone should be getting your mail. (All except your own ISP, that is.)

      This might be inconvient for you, but this system exists as a deterent to spammers. Don't like it? Get your own IP addresses for home use or host your own domain somewhere (that's what I do).

      --
      God invented whiskey so the Irish would not rule the world.
    8. Re:Accuracy by Anonymous Coward · · Score: 0

      how do you know he doesnt have an MX record or an ip? he just says that AOL blocks the email because it doesnt come from his isp's mail servers.

    9. Re:Accuracy by jbolden · · Score: 1

      Why not just send through your ISP's email and connect there?

    10. Re:Accuracy by Tackhead · · Score: 3, Funny
      > Even if its only 70% accurate, thats still 700,000,000 emails. At a cost of $10bn per year, its about time that its was illegal country wide, made a felony and a section of the FBI setup and funded by a $1 per quarter employee tax on companies. They should then track down, arrest, beat and torture these non-people, put them on a stinking shithole island,

      Hey, hey, hey.

      What did a pit full of decaying fecal matter do to deserve being filled with spammer?

      Have some respect for shit, man.

    11. Re:Accuracy by Anonymous Coward · · Score: 0

      The AOL filter isn't accurate at all. Whenever I send e-mail to my friends about the opportunity to ferry some money I've found stashed in Nigeria or about some great products in penis enlargement, they never seem to get through.

    12. Re:Accuracy by HeelToe · · Score: 1

      Mailing list posts generate enough traffic to tickle it's "you're a spammer" rate limiting features.

    13. Re:Accuracy by operagost · · Score: 1

      I'd recommend setting your mail server to use your ISP's as a relay. This will allow you to at least queue up your messages locally until that craptastic server decides to start accepting them. I'm forced to do this with Earthlink since they block port 25 out.

      --

      Gamingmuseum.com: Give your 3D accelerator a rest.
    14. Re:Accuracy by operagost · · Score: 1

      But your ISP should have authority for the RR zone (i.e., 0.168.192.in-addr.arpa) which is the problem. When they try to do a RR on your SMTP server's IP, it'll still show up as being owned by them.

      --

      Gamingmuseum.com: Give your 3D accelerator a rest.
    15. Re:Accuracy by 1u3hr · · Score: 1
      . Can your host be authenticated with reverse IP look-ups, crosschecked with MX? No? Then, again, noone should be getting your mail.

      Unfortunately, foe those like myself who live in the APNIC zone (Hong Kong specifically), apparently reverse-IP lookups don't work for many in other zones, so I can find myself locked out. Doesn't help the number of smug isolationist sysadmins who actually boast that "I got spam from Korea (China/Japan/... etc) so I blocked the whole country.

    16. Re:Accuracy by Anonymous Coward · · Score: 0

      Mailing list posts generate enough traffic to tickle it's "you're a spammer" rate limiting features

      So email them and explain the situation: you run a mailing list, you AREN'T spamming, and can they please adjust/remove the limit for you. Any GOOD isp will be glad to accomodate you.

    17. Re:Accuracy by dheltzel · · Score: 1

      I have this same problem with a Comcast IP, I host my own domain (actually about a dozen of them) on my home Linux server. The MX records point to my box and everything authenticates back correctly, and it's most definately *not* an open relay. Not that it matters when a blacklist decides to put Comcast's entire class B on the list. Now I can't send email directly from my system.

      Of course, Spammers being stupid and all will never figure out how to change their sendmail config to relay all the Spam through the Comcast SPAM^H^H^HMTP server. AOL cannot block Comcast's SMTP gateway (professional curtesy and all).

      Nah, they won't figure it out like I did !

      I can understand blocking any specific IP's that are open relays, but blocking an entire class B because some *might* be OR's or actual Spammers seems like it's seriously diluting the power of the blacklist.

      Not that I really care now, it's just aggrevating to be blacklisted as a spammer when I'm not, and by AOL, of all things!!
      That's like MS accusing me of being a monopoly.

  10. Optimistic by Rosonowski · · Score: 5, Insightful

    I think this is a bit optimistic. I get 300 peices of email a day, and I'm lucky if more then 50 are legitimate mail.

    --
    01101001 01100001 01101101 01101110 01101111 01110100 01100001 01101100 01100001 01110111 01111001 01100101 01110010
    1. Re:Optimistic by grylnsmn · · Score: 5, Funny

      Oh yeah? Well I send over a million emails a day, and I'm lucky if 10 of them are legitimate!

    2. Re:Optimistic by cjpez · · Score: 1

      Ha! *snicker* My kingdom for some modpoints . . .

    3. Re:Optimistic by kring · · Score: 5, Informative

      I run a small site (~100 users) and our spam filter, which is designed to be relatively forgiving, catches about 35% of the total messages that are handled by our mail server. 40% seems pretty low to me.

    4. Re:Optimistic by intermodal · · Score: 1

      could have somethign to do with your yahoo address... a lot of spiders seek only large providers such as yahoo and hotmail for spam addresses to avoid getting stuck in a fake address pool (a site designed to trap and waste the time of such spiders)

      --
      In SOVIET RUSSIA... erm...NSA AMERICA, the Internet logs onto YOU!
  11. AOL by Anonymous Coward · · Score: 0


    The front line in the war against spam is inside an unmarked building in Northern Virginia, where a bank of computer screens tracks the volume of e-mail pouring into the system used by America Online's 35 million subscribers.

    AOL is a spam fighter? Sometimes I think that spam was born because of AOL and its users.
    LOL!

    1. Re:AOL by Anonymous Coward · · Score: 0

      Aw, it's easy to stop spam at the source! No big story here...

    2. Re:AOL by Carnivorous+Carrot · · Score: 1

      Oh ye ignorant children.

      Long before e-mail spam and AOL-on-the-net, there was Usenet group spam that destroyed newsgroups.

      A handful of "moderated" groups survived, but I'd hate to be a moderator on one of them.

      --
      "Has [being a kidnapped teenage girl, raped repeatedly for months] changed you?" - Katie Couric to Elizabeth Smart
  12. Cost/Benefit by rcs2 · · Score: 2, Funny

    Are there any estimates to the total revenue generated by spam for spammers? If it were less than $10 billion, we should be able to simply bribe them to stop spamming.

    --
    This is not a signature.
    1. Re:Cost/Benefit by GlamdringLFO · · Score: 1

      Sounds like a protection racket to me.

      --
      Skal! AMS
    2. Re:Cost/Benefit by Rev.LoveJoy · · Score: 1
      Great, so go after the ones in the US under the RICO statues (organized crime). This will allow the Feds to sieze Alan Ralsky's big house (we all remember where he lives, right?) and his nice cars and trade them for a nice orange suit while Mr. Ralsky awaits trial.

      Cheers,
      -- RLJ

  13. Does not surprise me by nenolod · · Score: 2, Insightful

    I'd say more like 60% though. However, i'd also say that 40% of idiots make up statistics to prove their point, and 90% of people know that.

    Anyway, I get about 1800 messages a day, total. Messages are ran through procmail and a complex spam filtering perl script that I wrote for myself. about 600-700 messages are blocked per day, therefore being more than 40%.

    I'd also state that most SMB popups are SPAM.

    1. Re:Does not surprise me by Anonymous Coward · · Score: 0

      "I'd also state that most SMB popups are SPAM."
      Ever heard of a firewall?

      Failing that, disable the Messenger service.

  14. in my inbox today: by greenalbatros · · Score: 3, Funny

    Did you know 40% of all email is spam?!! to find out mo...

    --
    this sig steers like a cow. and i can prove it
    1. Re:in my inbox today: by cjpez · · Score: 1

      I think that's my favorite bit of spam. A few times I've gotten spam advertising supposedly wonderful products which will help me eliminate my "spam problem." Classic.

    2. Re:in my inbox today: by machine+of+god · · Score: 1

      ...to find out more, visit www.slashdot.org.

    3. Re:in my inbox today: by Sgs-Cruz · · Score: 1
      I just love it when the sig collides with the message. 40% OF EMAIL IS SPAM! and then: It was me. I did it, and I'll do it again. Should we read something into that?

      My favourite so far though, a message endorsing the masturbate for Peace campaign with the sig 'I like monkeys' right after. Yikes.

      --

      Karma: pi (Mostly due to circular reasoning in posts).

  15. Maybe that's the way to go... by irving47 · · Score: 2, Interesting
    Continued statistics like that, with economical impacts in the billions might attract enough federal attention to get some standardized laws across the board.

    Sure, we'll still have to worry about foreign sources, but I'm sure the U.N. will be happy to help with this issue.

    --
    I had a sucky sig.
    1. Re:Maybe that's the way to go... by dpille · · Score: 2, Insightful

      ...with economical impacts in the billions might attract enough federal attention to get some standardized laws...

      Maybe I'm too cynical, but I'd expect to see a tax cut to benefit the wealthiest spammers instead of anything that would help the common email recipient.

  16. Sounds about right to me by utmslave · · Score: 5, Interesting

    I administer a Spam filter for a state University in Tennessee. Since I began filtering, I have trapped about 42% of all email bound for faculty and staff. Some spam still gets through, but the impact on our pop and imap servers has been greatly reduced.

    550 Spammer Go Away!

    1. Re:Sounds about right to me by destiney · · Score: 3, Interesting


      A friend of mine is a sysadmin at Vanderbilt University in TN. He said they can only place spam filters on client machines, and that no filtering is allowed on the receiving server whatsoever. I asked him why, and he said they believed it was unjust to assume that any message was unwanted by the users, that it was their choice alone to decide what was spam and what was not.. Pretty insane if you asked me.

    2. Re:Sounds about right to me by ergo98 · · Score: 2, Interesting

      That doesn't sound insane: It sounds right on the money. At the very least any server-side filtering should include a user ability to opt out, or to actually configure the spam filtration settings for their own account (rather than some sysadmin in a cube somewhere deciding that the word "penis" equals spam, destroying the communications of the medical staff, etc). I'd rather have the ability to audit the tool on occasion to ensure that it isn't blacklisting friends or family, etc.

    3. Re:Sounds about right to me by Chanc_Gorkon · · Score: 4, Insightful

      With one exception......viruses. Filter these suckers out at the server. This will cut your opps I clicked on something I should not have syndrome.

      --

      Gorkman

    4. Re:Sounds about right to me by Mr+Guy · · Score: 4, Funny

      Sysadmin for the comp sci department my college set up scripts to change any .vbs file sent as an attachment to, .vbs.ifyouclickonthisanditsreallyavirusIwillholdyo upersonallyresponsiblefordamagetotheschoolscompute rs The IT department for the school, running exchange servers, had to wait for microsoft to issue a patch. While the IT department got pounded with help requests, the comp sci had 0 virus reports. Wonder why...

    5. Re:Sounds about right to me by utmslave · · Score: 1

      If I were blindly blocking things based on my own opinions, that would be a problem. I instead incorporated a system where users forward alleged spam mail to a special account that I monitor. If several users decide that this is spam, it usually is. I don't block everything with "penis" in it, but you better believe that "Biggee your penis is in 10 days" doesn't get through. In addition, I compare similar spam messages while paying attention to the domains they come from. Combining this information with WhoIs information and the Clueless Mailers page (http://www.cluelessmailers.org/), I can get a good feel for which domains are sending spam only.

      I also give any user the option of having no filter on their mail. I haven't had anyone take me up on that option.

      550 Spammer Go Away!

    6. Re:Sounds about right to me by leviramsey · · Score: 1

      That's because CMPSCI sysadmins actually know what they're doing. Big surprise, that.

    7. Re:Sounds about right to me by Gordonjcp · · Score: 1

      Hehehe... Yep. Consider someone who is a sales rep for a medical company, dealing with erectile dysfunction clinics. Much of their email will really, genuinely be talking about viagra substitutes and penis size.

    8. Re:Sounds about right to me by Anonymous Coward · · Score: 0

      That might be because COMP SCI department people are generally a little more educated on what they should and shouldn't click on, too...

      I work in a tech company (big surprise) as a developer, and no developers have every unleashed a virus... it is always a sales person, an exec. member, or a project manager...

      go figure...

    9. Re:Sounds about right to me by volve · · Score: 1

      You wonder why? Honestly?

      Because Comp-Sci people know about spam, and e-mail viruses and such.

      I guarantee that if the IT department had changed the .vbs files to that giant threat, they would have gotten a hell of a lot more calls than by just leaving the .vbs files alone.

      Come on, think about it...

      -VolVE

    10. Re:Sounds about right to me by ssstraub · · Score: 1

      I agree 100%!

      My girlfriend works for a big, nation-wide company. We use email to communicate. I've recently discovered that if I send her an email witht the words "fuck", "shit", "ass", (based on testing just those words) and who knows what else, it will never be seen by her. Now the REALLY irritating part of this is that the employees have ABSOLUTELY NO WAY OF KNOWING THAT THEIR INCOMING MAIL HAS BEEN DELETED! So this leads to about ever third message being "Hey, did you get my last email?" Having worked in IT, I can't believe that they filter messages, with no notice, based on SINGLE WORDS. What happens when an exec gets a little excited and sends someone an email like:

      "You bet your ass we're gonna break the profit record for Q3!"

      and that message never gets delivered, without any notice whatsoever to either party...

    11. Re:Sounds about right to me by DunbarTheInept · · Score: 1

      That sounds right to me. Maybe I'm a user that signed on to a mailing list because I actually wanted those weekly product listings from them. How does the ISP (which is what the university is in this case) know whether or not the e-mail is wanted or not? I'll filter it myself. *

      * - exception - if the ISP (university) wants to charge users for how much e-mail they recieve, then spam blocking does have to be done before the user sees the mail, otherwise he gets charged for everything, solicited or not.

      --

      Don't label something "offtopic" unless you know the topic well enough to tell what's on topic.

    12. Re:Sounds about right to me by DunbarTheInept · · Score: 1

      No. It's because CompSci *users* know what they're doing, thus freeing the admins to not have to be so nasty about it.

      --

      Don't label something "offtopic" unless you know the topic well enough to tell what's on topic.

    13. Re:Sounds about right to me by shadowbearer · · Score: 1

      "(based on testing just those words)"

      Suuuurrreeee it was. ;-)

      SB

      --
      It's old. The more humans I meet, the more I like my cats. At least they are honest.
    14. Re:Sounds about right to me by ssstraub · · Score: 1

      Well, after a few didn't go through and it began to piss me off, I began sending SINGLE WORD emails as a test. Then it became pretty obvious what the problem was.

    15. Re:Sounds about right to me by ergo98 · · Score: 1

      Hehe, excellent point. One has to wonder what exactly he was writing to include that particular subsection of words. I wonder if, like the Simpsons on the beach, his girlfriend replied "Count me out!". :-)

    16. Re:Sounds about right to me by Anonymous Coward · · Score: 0

      Actually, just this morning, we had a developer bring in his personal laptop from home, and unleash the always popular SQL Slammer worm. Luckily, it didn't infect any other machines (hopefully they were patched, but you never know), but the effect of 10,000 packets per second at about 400 bytes per packet, makes for a lot of network congestion.

  17. What is spam? by lseltzer · · Score: 2, Interesting

    I don't want to quibble about the specific number, but how do they decide what is spam? Much of the decision is somewhat ambiguous.

    1. Re:What is spam? by phunhippy · · Score: 0

      I don't want to quibble about the specific number, but how do they decide what is spam? Much of the decision is somewhat ambiguous.

      whats ambiguous about this below??

      -----Original Message-----
      From: Justin [mailto:suannewilcox@jovem.com]
      Sent: Thu 3/13/2003 7:59 AM
      To: me me me me
      Cc:
      Subject: SPAMWARNING:218.239.114.146:No painful penis enlargement stretching required

      Hello, 5q7w4ho 5q7w4h2

      Would you like a larger penis...? or for your spouse to have a larger one. 5q7w4hd 5q7w4hl
      Our product is 100% guaranteed to add permanent length and girth to a 5q7w4hq 5q7w4hi
      males erection. At least 2.5 and up to 4 inches have been recorded throughout
      all of our extensive testing. You cant go wrong with this wonderful 5q7w4h4 5q7w4hj
      life changing product. Get the confidence and size you've always wanted 5q7w4hx 5q7w4h3
      today. And remember, its guaranteed! 5q7w4ht 5q7w4h7

      Check it out right here 5q7w4hy 5q7w4or

      *Your satisfaction is 100% guaranteed. Just call is for a return authorization, send in the unused portion 5q7w4o6 5q7w4ok5q7w4o1 5q7w4og

      and we will refund your money (less shipping and handling) immediately.5q7w4oe 5q7w4oz5q7w4o5 5q7w4oo

      5q7w4ow 5q7w4od5q7w4on 5q7w4oq5q7w4of 5q7w4o45q7w4ob 5q7w4ox5q7w4om 5q7w4ot5q7w4ov 5q7w4oy5q7w4wc 5q7w4w65q7w4wa 5q7w4w15q7w4wp 5q7w4we

      5q7w4ws 5q7w4w55q7w4wh 5q7w4ww

      originator SMTP host is listed

    2. Re:What is spam? by walt-sjc · · Score: 1

      Well, it's really quite simple. They do a Bayesian filter based on Your posts. :-) :-)

    3. Re:What is spam? by ShinmaWa · · Score: 1

      I think a better question is, "how do they decide what is email?".

      In order to be "counted" as legitimate email, does it have to travel between domains? I get literally hundreds of non-spam messages every day on my work account - sent by other people where I work. Would those be counted in the 60%? Somehow, I don't think they would -- even though I consider those emails as "real" as those coming from outside my place of employment.

      I would be VERY curious as to how they defined "email" for the sampling. Is it ISP-centric, or does it take the workplace into account as well?

      --
      The /. Effect: Thousands of users simultaneously accessing a site to not read its content.
    4. Re:What is spam? by Anonymous Coward · · Score: 0

      Well, if it's an ad and I didn't ask for it, it's spam.
      If the reply to address or anything else was faked, 99.999% of the time it is spam.
      If the subject or body ends in a random string (intended to mess with spam filters) like KDF3466ee9s or something, it's probably spam.
      If 100,000 other identical emails were sent from a known open relay, you can assume they're all spam.

    5. Re:What is spam? by Anonymous Coward · · Score: 0

      Perhaps you don't know the correct word to use. Are you trying to say, "What about this message makes it spam?" (instead of "what's ambiguous?") Any more, it's not business-only. The best description is UBE (Unsolicited Bulk Email). It may be commercial, religious, political[1], charitable, etc. First, determine if the email message is unsolicited. Is it sent in bulk? That can be checked by communication with others. Is it email? A good rule of thumb is if it is essentially the same message sent to a large body of email addresses without any customization for each recipient (other than mangling their name), you are likely dealing with a moron. Things such as "5q7w4ht 5q7w4h7" are included as an attempt to foil all but the best filters. Software looks for relatively straightforward English and those tags don't parse very well. What's funny is to read all of the press (the Wash Post article) talking about how hard it is to track these morons down or the fact they're overseas. They aren't that hard to track. It's just a matter of having legislation accessible to give the spammer (AND the client who hired them - this is something EVERYONE forgets to include for fines) a good, financial wedgie. The spammer is merely controlling overseas servers from the US. How to track these folks? Take one of the "Low, low mortgage" spam messages. Enter a name & phone #. It's not much longer that you get a call from someone local - that's how the original people make their $$$ - they sell leads to people geographically close to you - and you tell them they've just been busted for providing financial support to a spammer. Now, they can pay the fine for the spammer, the spammer's customer, and their own fine or they can rat the spammer out. Then you present the spammer with the same deal, just a bit simpler: rat out their customer or pay their fine as well. Then you've made the day a bit brighter for all three parties. All it takes is educating the state legislators when they are drafting bills when they're in session. In fact, take some time and write it for them along with a second copy which explains the ins & outs along with what the opposition (e.g., DMA) will lobby against (in terms of changes) and point out what "they" will say, and what the response should be and why. Finally, the newspaper stories (again, look at the cited story for this forum) say, "little is known about them." Ha. What a load of dirty diapers. There are plenty of online spam-specific resources which even go so far as to present photographs, arrest records, etc. for the people who think they have found the Holy Grail for easy money at everyone else's expense. Finally, [1] Political spam. If anything serious is drafted, politicians will be exempt - it's like everything else. That aside, last fall, several candidates used spam to promote their race. One, in California, hired a spammer to boost the polls, and hopefully, win the governor's race. Before the spam, he had 9%-10% of the market. After the spam and after the election, he had 9%-10% of the market. When confronted about the spam, a staff member proclaimed it to be a "unique method of getting the word of a candidate out to those who needed to hear it." It also turns out that when the spammer was contacted, they (the staff) wanted only California email addresses to receive the email messages. What did the spammer say? "Sure, no problem." You can guess the rest. Cheers.

  18. This is exactly what we need... by gillbates · · Score: 1
    to stop spam permanently.

    Once spam makes a substantial dent in corporate america's profits, you can bet there will be a federal law passed banning the practice. Granted, we slashdotters might not like the fact that Corporate America(tm) controls Congress, but in this case, it can actually do us some good...

    --
    The society for a thought-free internet welcomes you.
    1. Re:This is exactly what we need... by Anonymous Coward · · Score: 0

      Good point, but one small comment...

      This would not stop spammers from sending the spam from outside the US. The spam would still arrive in US mailboxes, but be outside the jurisdiction of the US government.

      Someone else who replied to your comment said that the government could punish the companies that hire the spammers rather than the spammers themselves (easier too since the emails tell you who these companies are), but again not all of these companies will be in the US.

  19. Mod parent as FUNNY by Anonymous Coward · · Score: 1, Insightful
    "call your congressperson and have them pass an anti-spam bill. that's the only way to solve this problem"


    Yeah right. Just like the new telemarketing bill that has loopholes for some of the worst telemarketers.

  20. Spam Control by cheezus_es_lard · · Score: 4, Interesting

    So, we all agree that Spam is a problem. We all agree that legislating Spam out of existance isn't going to work, due to the international design of the Internet. So what needs to be developed is a backwards-compatible mail transfer protocol that authenticates the user to the sending server and forwards the message to the recieving server, who contacts the sending server back and verifies the user's identity.

    I'm no software designer, but surely we could find some concept for migrating off of SMTP and POP and to a better, more secure protocol.

    Other thoughts?

    -cheezus_es_lard

    1. Re:Spam Control by Anonymous Coward · · Score: 0

      http://www.cypherspace.org/~adam/hashcash/
      Anonym ity can still be preserved.

    2. Re:Spam Control by JimDabell · · Score: 4, Interesting

      I'm no software designer, but surely we could find some concept for migrating off of SMTP and POP and to a better, more secure protocol.

      It's not a technical issue (ignoring open relays, which can already be fixed without changing any protocols).

      The fundamental issue is that one of the most important uses of email is to let anybody, anywhere email you, with no hassle. Of course, spammers take advantage of that.

      What's needed is accountability. Give someone internet or smtp access? Make sure you have a way of billing them for any spam they send, and put it in big letters when they sign up.

    3. Re:Spam Control by Anonymous Coward · · Score: 0

      I'm no software designer, but surely we could find some concept for migrating off of SMTP and POP

      That is obvious. POP won't stop the e-mail from being delivered or held at the ISP.

    4. Re:Spam Control by Qzukk · · Score: 2, Insightful

      I'm no software designer, but surely we could find some concept for migrating off of SMTP and POP and to a better, more secure protocol

      Sure. Just like we convinced everyone to close off their open relays. Not going to work.

      --
      If I have been able to see further than others, it is because I bought a pair of binoculars.
    5. Re:Spam Control by Ravensign · · Score: 4, Insightful

      I agree with this principle.

      At what % do we look around and say, its time for a new protocol with spam avoidance built in?

      50, 60, 75?

      --
      "Sig free in '03!"
    6. Re:Spam Control by walt-sjc · · Score: 1

      ... And exactly how do you handle spam while you invent this new protocol? Consider that it will take at LEAST 5 years to design, develop, and adopt a new technology. Shit, the amount of legacy systems is HUGE! Even my freaking PRINTER supports it.

    7. Re:Spam Control by anthony_dipierro · · Score: 1

      What's needed is accountability. Give someone internet or smtp access? Make sure you have a way of billing them for any spam they send, and put it in big letters when they sign up.

      Amen. This will never be done, of course, because all the major ISPs profit off spam.

    8. Re:Spam Control by gorilla · · Score: 1
      Instead of migrating off of SMTP, what's needed is a way to extend SMTP to handle spam. SMTP has the facility to add features, for example many servers support the SIZE extension to avoid problems with a large message not being able to be accepted for delivery. This would mean that we could slowly upgrade the installations.

      If we had a working system of micropayments then a system that's been suggested where you are charged if the sender isn't on the reciever's white list. The reciever adjusts the amount to how much receving one peice of spam is worth to her, and the sender sets the limit that he's prepared to accept. Of course, we don't have a working system of micropayements, so that's off the list.

      Another system would be a web of trust, similar t o PGP. If the reciver has personally signed the sender's key, then it's not going to be spam. This would probably require a new protocol for distributing & revoking trusts.

    9. Re:Spam Control by Macka · · Score: 1

      We all agree that legislating Spam out of existance isn't going to work, due to the international design of the Internet
      Correct. But it should still happen anyway. The wall that eventually stops spam will not come from one big fix-all solution, it will be made of many smaller bricks. And legislation will be one important piece of that. Reduce the area where these people can operate from, and you have one less place to look to track them down or block them out. Legislation IS important, and can't happen soon enough for me.
    10. Re:Spam Control by bill_mcgonigle · · Score: 1

      I once argued that in order to combat Spam, we need to first address contract law.

      --
      My God, it's Full of Source!
      OUTSIDE_IP=$(dig +short my.ip @outsideip.net)
    11. Re:Spam Control by carpe_noctem · · Score: 1

      Write the RFC then we'll tell you the percentage.

      --
      "Quoting famous computer scientists out of context is the root of all evil (or at least most of it) in programming." - K
    12. Re:Spam Control by Anonymous Coward · · Score: 0

      The fundamental issue is that one of the most important uses of email is to let anybody, anywhere email you, with no hassle.

      On the contrary, the spam problem has changed the use of email to the point where I now use a strict white-list filter. Once upon a time, anybody could email me with no hassle, but that just doesn't work anymore.

    13. Re:Spam Control by SillySlashdotName · · Score: 1

      ...because all the major ISPs profit off spam.

      I hope you are trying to be funny, but I can't tell - you might be serious.

      ISPs sell bandwidth. They price access based on assumed or average usage, not on actual usage - which is one reason they are putting stuff like "no servers" in their TOC. Spammers don't fit in the average user profile; they way exceed the bandwith usage an average user would use at almost any level of service. This screws the ISP because their calculations of how many users they can service with their upstream connection is off when one of the users is sending spam.

      I don't know that they LOSE money (I would guess they do, as they would probably have to ante up anything over X (M/G/T)bytes per month upstream), but their service degrades for the number of users they have, and pissed off users are not pleasant to work with.

      If ISPs had a service level of "SPAMMER" and charged accordingly (or had metered access, where the spammers paid for the actual bandwidth they used), then possibly they could make a profit off spam. Otherwise, no, they don't profit off spam.

      As the parent post says "Make sure you have a way of billing them for any spam they send, and put it in big letters when they sign up. "

      --
      Acts of massive stupidity are almost never covered by warranty. --me.
    14. Re:Spam Control by anthony_dipierro · · Score: 1

      They price access based on assumed or average usage, not on actual usage - which is one reason they are putting stuff like "no servers" in their TOC. Spammers don't fit in the average user profile; they way exceed the bandwith usage an average user would use at almost any level of service.

      And that's one of the reasons why spammers pay way more than the average user for service.

      If ISPs had a service level of "SPAMMER" and charged accordingly (or had metered access, where the spammers paid for the actual bandwidth they used), then possibly they could make a profit off spam.

      All the major ISPs are happy to look the other way whenever a high paying customer sends a little spam. If you're a dialup user, you can be sure your account is going to be suspended, on the other hand.

      If this wasn't the case, we wouldn't have any spam. The major ISPs would force the smaller ISPs downstream to police their users. Yes, smaller ISPs might lose out, if they're not smart enough to charge their users properly, but major ISPs charge by bandwidth, and my comment was about major ISPs.

    15. Re:Spam Control by Shdwdrgn · · Score: 1

      Something that occurs to me... Consider IRC's DCC protocol. If you want to establish a private connection to someone, you send them your IP address over the normal channels, and the receiving end then opens a port to you at the IP address you provided.

      Now carry that over to email. If someone wants to send you a message, their mail server sends a request to you, and you open a channel to the IP address they provided. This method could completely eliminate spoofed IP addresses, and make blacklists a bit more accurate.

      Obvoiusly it again requires a change away from the existing protocols, but I think a lot of people are ready and willing to add anything that could help with this battle.

    16. Re:Spam Control by cellocgw · · Score: 1
      I agree with this principle.

      At what % do we look around and say, its time for a new protocol with spam avoidance built in?


      I think the problem is this: Anyone (more or less) can set up his own ISP and generate his own mailserver. Once his spam mail has hit an Internet router, we've already lost the battle, in the sense that he's using other people's resources. I'm not a software or network guy, but I don't see how the Internet in its current (essentially multipath) conception can block spam at the source. The USPS can because all mail goes "in" to them before going "out" to recipients. It's hub&spoke. The Internet isn't.
      Solutions, anyone?

      --
      https://app.box.com/WitthoftResume Code: https://github.com/cellocgw
    17. Re:Spam Control by SillySlashdotName · · Score: 1

      They price access based on assumed or average usage, not on actual usage - which is one reason they are putting stuff like "no servers" in their TOC. Spammers don't fit in the average user profile; they way exceed the bandwith usage an average user would use at almost any level of service.

      And that's one of the reasons why spammers pay way more than the average user for service.


      Sorry, but you lost me. Most ISPs I am aware of charge based on the speed of access, not the bandwidth used. Spammers would seem to be using fairly high speed access, but trying to max out the upstream side with as many emails as possible at the speed allowed. Therefore they are paying for the same access speed as others in their service level, but using more BANDWIDTH than their peers at that service level.

      ...but major ISPs charge by bandwidth, and my comment was about major ISPs.

      Gotcha. You are right. I am arguing that the smaller IPSs should also charge by bandwidth (which is how their upstream provider is charging them), which would shift the cost of spam back to the spammer, thus making it unprofitable to send the stuff.

      All the major ISPs are happy to look the other way whenever a high paying customer sends a little spam.

      I think you meant 'All the major ISPs are happy to look the other way whenever a high paying customer uses more bandwith - and pays for that bandwidth"

      --
      Acts of massive stupidity are almost never covered by warranty. --me.
    18. Re:Spam Control by anthony_dipierro · · Score: 1

      Sorry, but you lost me. Most ISPs I am aware of charge based on the speed of access, not the bandwidth used.

      You've clearly never priced colocation or a T1 line.

      Gotcha. You are right. I am arguing that the smaller IPSs should also charge by bandwidth (which is how their upstream provider is charging them), which would shift the cost of spam back to the spammer, thus making it unprofitable to send the stuff.

      Umm, whatever. Those smaller ISPs who don't stop spammers or charge them extra will just go out of business.

      I think you meant 'All the major ISPs are happy to look the other way whenever a high paying customer uses more bandwith - and pays for that bandwidth"

      I fail to see the difference.

    19. Re:Spam Control by glesga_kiss · · Score: 1

      Why not simply extend the Open Relay Database (or similar) to have an opt-in system for tracking domains notorius for spam?

      Then, if a domain is sending lot's of spam, they get blacklisted and suddenly disappear from the SMTP network. I'd like to see how many ISPs cope with not being able to send e-mail at all because they have a reputation for turning a blind eye to spammers.

      By making the system opt-in at the client end, ISPs can decide if they want to accept mail from these sources, in the exact same way we do it for open relays.

      Problem solved.

    20. Re:Spam Control by goon+america · · Score: 1
      You're right. Throw spammers out of the country, and you've got another peg for your Bayesian filter.

      Message is...
      From US => 2% likelihood
      Outside => 65% likelihood

    21. Re:Spam Control by Baron_Yam · · Score: 1

      It'd be nice if the process was something like:

      Sending Server: Here, Receiver, this is my IP, call me back!

      Receiving Server: Hey, Sender, I called back and you gave me your real IP. Can I pick up that email now?

      That would prevent forged headers wouldn't it?

    22. Re:Spam Control by lucabrasi999 · · Score: 1
      We all agree that legislating Spam out of existance isn't going to work, due to the international design of the Internet

      International problem? That's easily solved. We'll just present the spam problem to the UN Security Council! The problem will be solved before you can say "Chief Weapons Inspector"


    23. Re:Spam Control by Anonymous Coward · · Score: 0

      We have a flat-rate data T1 from a major vendor (two actually). Cost of the line + I believe $23/month to keep them capped... continuously.

      No traffic fees... etc. Which are all just artifacts of phone service anyway. And it's not like it costs THAT much to route a bit of electricity, last I checked copper wasn't exceptionally expensive, and 1 mile of copper wiring certainly doesn't justify 1000/month for the privaledge of having that line run to your home/work/business.

      Oh well..

    24. Re:Spam Control by Anonymous Coward · · Score: 0

      How about for each outgoing email sent, an email gets delivered from the server back to the originator. If the message can't be delivered, then the original message doesn't get delivered. This way, spam from anonymous mailers won't get through, and spammers will have their servers bogged down with their original spam.

    25. Re:Spam Control by letxa2000 · · Score: 2, Informative
      I haven't seen forged headers used extensively for some time. The only thing I really see being forced is the "From" address and the Reply-To address, along with the "HELO" command in the SMTP exchange. But forging "Received" headers seems to have become less frequent.

      I think that's because spam is, by nature, evolutionary. What works for now is quickly picked up on and then they have to move on to something else. The only people really interested in "Received" headers are syadmin type people that are going to be able to recognize forgeries anyway so they don't gain anything by doing it.

      What blows me away is how many are spamming directly from their DSL connections these days. They just don't care and apparently the DSL providers just don't do anything about it. I can see throw-away dial-ups being used to spam, but I find it amazing that someone would risk a DSL connection to spam. The fact that they DO risk their DSL connection suggests to me that it isn't really much of a risk. :(

      I also think the anti-spam approach has come down more to filtering and looking for a new protocol than reporting spammers. While some spam reports actually result in action, most don't--and those that do you are seldom informed of that so it seems that you are making spam reports that go into a blackhole. I gave up on reporting spammers two years ago--except for extreme cases that border on DOS attacks.

    26. Re:Spam Control by budgenator · · Score: 1

      How about the guys overseas that have a big-assed list of email addresses real and imagined, I buy an account get a email address to send one email to the address and the scripts on the server strips off the original Email address add some forged headers and starts spewing out the same Email to every name of the list rotating between known open-relays?

      these guys get busted and it off to an other country, get a co-located server and do it again.

      --
      Apocalypse Cancelled, Sorry, No Ticket Refunds
    27. Re:Spam Control by Anonymous Coward · · Score: 0

      >That would prevent forged headers wouldn't it?

      Only for single-hop relays between IP-based systems. Maybe that's a goot portion of the current e-mail situation, but it's hardly the whole story.

    28. Re:Spam Control by budgenator · · Score: 1

      Just bought the wife a new 'puter with WinXP, nice machine too,now I get IM SPAM. Neither of us have ever used MSN IM client. but it gets IM SPAM. that means that the machine is automaticaly logging in to a MSN server that I didn't give it permission to login to and opening a port from the machine to MICROSOFT and MICROSOFT is alowing SPAMMERS to IM us. They have sold my name to spammers, the spammers know my name. This is not my Email address but myname god only knows what else they've sold. That's probably the last time that I'll ever get a MICROSOFT product and that means that I'm telling Gateway and Dell and all of those other clueless loser companies, "lie with dogs, wake up with fleas". If I can't get it without Windows, I'll build my own!

      --
      Apocalypse Cancelled, Sorry, No Ticket Refunds
    29. Re:Spam Control by IIH · · Score: 1
      So what needs to be developed is a backwards-compatible mail transfer protocol that authenticates the user to the sending server and forwards the message to the receiving server, who contacts the sending server back and verifies the user's identity.

      I've proposed this idea before, not on the user level, but on the domain level. Every email that gets sent from say, example.com also has a hash key. When a enabled server receives this, it can check whether the key is correct, and if not reject it. This would be backwardly compatible, as the only case it would matter is if two enabled servers were talking to each other (all other cases are unchanged). It would also have the benefit of example.com's rep going up, as there would be no forged emails from that domain, and any spams that were received from that domain could be dealt with (I wonder how much ISP time is wasted by people complaining to the wrong ISP?)

      There would be an enticement to hosters to upgrade, as their domain would then become "100% spam unforgable" and clients would see it as a plus as they could now trust those domains and not need to filter that domain.

      If it became a situation where spammers couldn't use yahoo.com as a return addres, they'd change to a new one, and pressure would be on the new forged-from victim to upgrade.

      A a previous poster said, this would also transfer the spam problem from a type 1 (forged headers) to all type 2 (relible headers), making it easier to track.

      For those that say this would ruin smtp, and you need to set different from headers - that's what sender and reply to fields are for. Leave the envelope from header as a "postmark" and put whatever return address in the email itself you like.

      --
      Exigo spamos et dona ferentes
    30. Re:Spam Control by operagost · · Score: 1
      Install a firewall and deny all to incoming. That will stop the Messenger (not MSN IM) spam.

      Yes, I realize you were just trolling.

      --

      Gamingmuseum.com: Give your 3D accelerator a rest.
    31. Re:Spam Control by anthony_dipierro · · Score: 1

      Are you allowed to send spam?

    32. Re:Spam Control by anthony_dipierro · · Score: 1

      How about the guys overseas that have a big-assed list of email addresses real and imagined, I buy an account get a email address to send one email to the address and the scripts on the server strips off the original Email address add some forged headers and starts spewing out the same Email to every name of the list rotating between known open-relays?

      How does that change my assertions? They're still at some point up the stream going through a major ISP who is being paid (at least indirectly) by them.

    33. Re:Spam Control by cyril3 · · Score: 1
      and verifies the user's identity and then ... What? We all go round their place and blow up their letter box?

      No the next step must be painful. And permanent. If a few spammers need to die to make the world a nicer place, it's a price I'm prepared to pay.

  21. Take this with a grain of salt by mrhandstand · · Score: 5, Insightful

    The srticle states that 40% of Internet traffic is Spam. And where does this statistic comec from? From Brightmail...a vendor of anti-spam software. Remember...liars, damn liars, and statisticians

    --
    Always value the individual over the system. --Bruce Lee "I don't need a Sig - I have a custom 191" - me
    1. Re:Take this with a grain of salt by Zathrus · · Score: 4, Informative

      The srticle states that 40% of Internet traffic is Spam

      No, the article states that 40% of email is spam.

      Which, frankly, seems low. But perhaps they're including corporate email, which often sees a much lower spam level.

      I'm still trying to find estimates on how much of all Internet traffic is from SMTP -- I've seen estimates of anything from 5% to 30%.

    2. Re:Take this with a grain of salt by mbyte · · Score: 1

      I can second this statistics at least somehow. about 50-60% of our inbound email is spam (that is, what spamassassin did filter)

    3. Re:Take this with a grain of salt by leviramsey · · Score: 1

      I subscribe to several open-source development lists. I get about 500 emails a day (more because Mandrake is due to release Monday if all goes well... did I let that cat out of the bag?) and maybe 40 spams a day, tops.

    4. Re:Take this with a grain of salt by ebh · · Score: 1

      True, but even if they're exaggerating, and spam is only 30% of all email, or even 20%, that's still what's commonly referred to as a "shitload".

    5. Re:Take this with a grain of salt by Captain+Beefheart · · Score: 2, Informative

      "But perhaps they're including corporate email, which often sees a much lower spam level." ...Except that drumming up a corporate e-mail address is usually as simple as adding the first letter of the first name to the last name, as in bgates@microsoft.com or sjobs@apple.com. I've gotten several spams to a relatively high-profile domain, the specific address of which had not been used externally, had not been in someone else's CC field externally, and had only existed for a few days before the spam started trickling in.

    6. Re:Take this with a grain of salt by MacAndrew · · Score: 1

      To be picky, and give the statisticians a break (most are well-meaning) I think, the last term was originally politicians. And here it should be recycled as:

      Liars, damned liars, and conflict-of-interest-product-vendors-and-the-repor ters-who-uncritically-lap-up-their-disinformation

      The worst IMHO are Forrester and Jupiter, research/consulting groups that make up statistics if they haven't already invented them. One name or the other seems to pop up in every general media article on the Internet, as they're in every reporter's rolodex. Nice hard quote for the reporter, nice ad for the firm -- who cares if it's true. So ... beware.

    7. Re:Take this with a grain of salt by nathanh · · Score: 1
      Remember...liars, damn liars, and statisticians

      The saying is "lies, damn lies, and statistics". Statisticians are mathematicians and statistics is as rigorous as any other field of mathematics. The problem with statistics stems from non-statisticians who *think* they understand statistics, but really they don't. Don't denigrate the statisticians. They've got enough on their plate trying to defend their work from misinterpretation. They shouldn't have to defend themselves as well.

    8. Re:Take this with a grain of salt by Anonymous Coward · · Score: 0

      "did I let that cat out of the bag?"

      Yes, you fucktard.

    9. Re:Take this with a grain of salt by Anonymous Coward · · Score: 0

      Not saying you don't have a point, but a lot of virus statistics come from anti-virus vendors.

      This is mainly due to two facts:

      1) They really are in a position to know about the situation in more than one subnet
      2) It is in their best interest to keep the public aware of the problem

  22. I believe it. by SunCrushr · · Score: 1

    Over 80% of the emails I receive into my main email box are spam. If I get one more "buy this pasta pot" or "enlarge a body part" email I'm gonna go crazy.
    Seriously, I'd like anyone'e opinion/ideas on what may be done about the spam issue besides filters.
    Any ideas? Post!

    1. Re:I believe it. by chef_raekwon · · Score: 2, Informative

      like anyone'e opinion/ideas on what may be done about the spam issue besides filters.

      all i did was register a new domain, run smtp/sendmail/squirrelmail from home (dsl connection). this really is a $40 solution, provided you already have the hardware (you have to pay for the domain).

      Make sure you don't give out your address too much, and spam becomes non-existent. if, and when you start receiving spam, turn on spam filters (they come with squirrelmail). if this fails, just change your email address, cause damn, you're running the server!

      --
      We're like rats, in some experiment! -- George Costanza
    2. Re:I believe it. by usotsuki · · Score: 1

      >Over 80% of the emails I receive into my main
      >email box are spam.
      You're lucky. Over 90% of my e-mails are spam. Some days it's 100%.

      >If I get one more "buy this pasta pot" or
      >"enlarge a body part" email I'm gonna go crazy.
      Hmm, have they ever thought that an e-mail address might be used by both a man and a woman? It happens.

      >Seriously, I'd like anyone'e opinion/ideas on
      >what may be done about the spam issue besides
      >filters. Any ideas? Post!
      OK, I've bitten the bullet.

      Filters are inaccurate, vgrep is NP-annoying and legislation does jack.

      I think filtering *at the outgoing level* might be a solution...but still, not a very valuable one. And Internet Death Penalty to all spammers !!!

      -uso.
      Mata BETONAMU na no?!

      --
      Dreams, dreams, don't doubt dreams, dreaming children's dreaming dreams. Sailor Moon SS
  23. Losing a figurative war on spam by Nonac · · Score: 5, Insightful

    Aside from the AOL spam control center, most of the spam prevention discussed in this email is aimed at trying to stop the sender through legislation and black lists. Legislation will never work, and black lists are marginal.

    The answer to this shortcoming in the current email infrastructure is redesigning email protocols to allow spam to be stopped as it is sent.

    I don't have the answer, but something that forces the sender to verify that the recipient will accept the message before it is relayed will be a start. I also like the idea that came from Microsoft recently of forcing the sender to pay the recipient a small amount of money.

    The problem with bayesian filters is that they filter too much spam. The more people that use bayesian filters, the more messages the spammers will have to send to get through. Because it is almost free to send messages, they will continue to increase the number of messages they send until it gets to a point that email infrastructure can't handle it anymore.

    1. Re:Losing a figurative war on spam by Gunfighter · · Score: 1
      Nonac,

      I have the answer. Does that mean I get a portion of the supposed $10,000,000,000 people are going to spend on Spam control?

      Anyone who wants to eliminate 99.99% of the spam from their inbox, just let me know. Stipulations are that you must either a) own your own domain and have control over the DNS and email administration of said domain or b) not mind switching to a new email address. I'll zap your spam in a jiffy.

      --
      -- Stu

      /. ID under 2,000. I feel old now.
    2. Re:Losing a figurative war on spam by Mr2cents · · Score: 1

      I also like the idea that came from Microsoft recently of forcing the sender to pay the recipient a small amount of money.

      That has been the problem of the internet all along: it has no currency. No way to pay. Unless you use something like visa, but that's as secure as saying "here is my root password, you may download /tmp/iamsonaive.gif".

      --
      "It's too bad that stupidity isn't painful." - Anton LaVey
    3. Re:Losing a figurative war on spam by Nonac · · Score: 1

      If a trusted third party accepted the payments, it would work. I can send you money through paypal without risk of you charging more to my credit card because paypal works as a sort of escrow agent.

    4. Re:Losing a figurative war on spam by NamShubCMX · · Score: 1

      Not only that, but should all open source developers PAY for posting developments news/info/bugs/etc... to their mailing lists?? Obviously no... So who pays and who doesnt?

      --
      We've always been at war with Eurasia.
    5. Re:Losing a figurative war on spam by Anonymous Coward · · Score: 1, Informative
      You'd probably set up a negotiation for with the assurance of a refund if it is not spam. So, my mail server may say, e.g. ``I haven't seen you before, your message wasn't signed by someone that I trust or your message doesn't come from a mailserver that I trust, so if you want this email to go through you must give me $5 which I shall return to you if I determine the email is not spam.''

      Interesting points here:

      1. the amount is larger than most proposals that I've seen. This is necessary since I get quite a bit of spam in my US mailbox and that costs $0.10. The amount should be enough that people will think about it quite a bit. The amount should also reflect how much my annoyance at receiving the spam is worth.
      2. The assurance the the deposit will be returned if the email is deemed legit. You'd want MUA support for this one.
      3. The lack of charge to mail that you are expecting in some way.
      4. The other person gets a chance to deny the negotiation. So the developer simply won't pay and if you require it you won't get the email.
      All that said, I don't really like the idea. Decent filtering is good enough.

      Of course, think of the money making opportunity when a spammer writes software that screws up the negotiation! A simple mistake like:

      if (amount < 100)
      rather than
      if (amount < 1.00)
      could make you a hundred bucks. Or something like that. Then we could have the reverse wars where the anti-spam people try to write software that negotiates in such a way that it confuses spamware into giving them lots of money! woohoo!
    6. Re:Losing a figurative war on spam by kcbrown · · Score: 1
      The answer to this shortcoming in the current email infrastructure is redesigning email protocols to allow spam to be stopped as it is sent.

      No need to redesign any protocols. We already have what we need.

      All we need to do is enforce a rule that says that any email sender for a domain must be listed as an MX for the domain (if you don't want that system to receive email for the domain, list it as a low priority MX and block incoming SMTP traffic to it. You're already doing the latter anyway, right?). You get information about which domain to look up from the SMTP "MAIL FROM" command (not to be confused with the "From:" line in the message headers).

      So, imagine for a moment that someone sends a piece of email to a mail relay. Right now, if it's an open relay, the relay just forwards the email to all the recipients specified.

      But under the scheme I'm thinking of, the relay will look up the MXes for the domain listed in the "MAIL FROM" command and compare them with the IP address of the sender. If there's a match, it delivers the mail. If there isn't a match, it drops the connection right then and there.

      But even if the open relay doesn't do this, the system it tries to deliver email to will -- and the open relay will not be listed as an MX for the domain associated with the spam message, so the mail will be dropped on the floor by the receiving system.

      And even if it is listed as an MX for the spammer's domain, you now have an entire domain you can blacklist.

      And that means that spammers are now forced to set up their own domain. And that costs money. And worse, they now also have to list their sending system as an MX, which means that it becomes obvious where the bogus email is coming from -- so blacklists will be much more effective, because they can reference domains directly instead of IP addresses (the reason this is much better is that IP addresses change frequently because most of them are dynamically allocated, but domains are much more permanent). The more quickly you blacklist domains, the more money spammers have to put into buying new domain names.

      Now, the real beauty of this scheme is that email gets through only if all of the relaying systems pass the email through. If only one of them decides that the system they're receiving the mail message from isn't an MX for the sender's domain, the email gets dropped on the floor (and never even hits the spool). Only if there's a DNS failure will the email get queued up, but it'll stay in the queue until the MX status is known. The SMTP server can be configured to bounce messages that have been queued up in that state for too long.

      So there can be lots of open relays, and as long as your mail server enforces the above provision, you'll only get email from sources that are truly legitimate: sources that have control over their own domains.

      That'll eliminate most of the spam originating from broadband addresses and almost all spam passed through open relays, among other things. It's real simple: if you want to be able to successfully send email directly from your machine, you have to operate a domain that lists your IP address as an MX for your domain. Otherwise you have to go through your ISP's email server. This isn't a big deal, since a number of dynamic DNS services exist these days, and setting up an MX for your domain through DDNS is commonplace and well understood.

      --
      Use 'slashdot stuff' in the subject line in any email you send me if you want to get past the spam filter.
    7. Re:Losing a figurative war on spam by Anonymous Coward · · Score: 0

      This won't work for someone like me who has his own domain and has broadband at home. I send mail through my broadband carrier because I don't have access to mail on the server that hosts my domain. With your method, all SMTP servers will reject my email. This situation is similar to colocated servers that send out mail using the isp's MX because their domain doesn't have one of their own.

    8. Re:Losing a figurative war on spam by winnetou · · Score: 1
      But even if the open relay doesn't do this, the system it tries to deliver email to will -- and the open relay will not be listed as an MX for the domain associated with the spam message, so the mail will be dropped on the floor by the receiving system.

      I am afraid it won't work. Imagine I am a spammer who just found an open relay at (say) 10.11.12.13 and an open proxy at (say) 192.168.1.2. I change the MX-es for example.com to those IP addresses and start pumping spam through those machines.

    9. Re:Losing a figurative war on spam by kcbrown · · Score: 1
      I am afraid it won't work. Imagine I am a spammer who just found an open relay at (say) 10.11.12.13 and an open proxy at (say) 192.168.1.2. I change the MX-es for example.com to those IP addresses and start pumping spam through those machines.

      You can't change the MXes for example.com to those IP addresses unless you are the owner of example.com (otherwise you'd have to hack into someone's DNS server).

      So: that means that you're the owner of example.com.

      But if you list an open relay as an MX for your domain and start sending spam from it, your domain suddenly gets put on a blacklist and people start dropping all your email from that domain on the floor, legitimate or not.

      And as a spammer, that means that you're either out of business or you have to shell out another $10-$15 for a new domain. This eats into your profits because it costs you both time and money.

      --
      Use 'slashdot stuff' in the subject line in any email you send me if you want to get past the spam filter.
    10. Re:Losing a figurative war on spam by kcbrown · · Score: 1
      This won't work for someone like me who has his own domain and has broadband at home. I send mail through my broadband carrier because I don't have access to mail on the server that hosts my domain. With your method, all SMTP servers will reject my email. This situation is similar to colocated servers that send out mail using the isp's MX because their domain doesn't have one of their own.

      What you'd need to do is set up your domain on a dynamic DNS service and then use a ddns client on your home broadband system to update it. They'll let you do MXes through this as well. If you don't want to be receiving email at your home system, then you set your home system up as a low priority MX (so that email gets delivered to your other email server first) and set up a firewall to block incoming port 25 connections (which you do already ... right?).

      If a colocated server wants to send out email using an ISP's MX then the owner of the colocated server needs to make arrangements with the ISP so that the ISP will do the right thing, and set itself up as the domain that appears in the "MAIL FROM" exchange.

      All the system I'm promoting does is make people prove that they're being honest.

      --
      Use 'slashdot stuff' in the subject line in any email you send me if you want to get past the spam filter.
    11. Re:Losing a figurative war on spam by winnetou · · Score: 1
      You can't change the MXes for example.com to those IP addresses unless you are the owner of example.com (otherwise you'd have to hack into someone's DNS server).

      So: that means that you're the owner of example.com.

      The costs to register a domain are less than $10.

      But if you list an open relay as an MX for your domain and start sending spam from it, your domain suddenly gets put on a blacklist and people start dropping all your email from that domain on the floor, legitimate or not.

      Unfortunately, that doesn't happen suddenly. Otherwise, we could just list the open relays and open proxies and be done with it.
      In fact, the number of possible IP addresses (just over 4 billion) is far less than the number of possible domain names.

      And as a spammer, that means that you're either out of business or you have to shell out another $10-$15 for a new domain. This eats into your profits because it costs you both time and money.

      It is easier to automate the registration of domain names than to find machines with the latest proxy exploit.
      Yes, $10 is money, but not much. Spammer pay more to find bullet proof web hosting.
      More importantly, we would lose the ability to forward email.

  24. Speaking from Experience by DLG · · Score: 3, Informative

    In the past 2 months, using a combination of tools including SpamAssassin, I have managed to block approximately 32000 spam mail a week. This is more than 50% of our incoming mail.

    I will note that in general this is only coming to around 20% of our users. It is approximately 100 messages per user per day. This actually seems reasonable compared to one of my email accounts that is on a webpage.

    So I would say the only reason the amount of spam is so low is that enough people in our firm don't give out their firm email addresses on the internet to strangers.

    Although they do miss out on alot of great offers for Hovercraft Toys.

    1. Re:Speaking from Experience by Anonymous Coward · · Score: 0

      I would have to agree. The filter here at my organization catches a lot of spam, but it's mainly directed at about 10-15 users. As long as they're careful with how they use their email address, users shouldn't be inundated with a ton of spam.

  25. surprise? by Anonymous Coward · · Score: 0

    I think not- too much spam

    I hate spiced ham. That fucking mailman leaves me way too much- way can't he just run off with my wife?

  26. Cutting through the myths. by Anonymous Coward · · Score: 0

    "Granted, we slashdotters might not like the fact that Corporate America(tm) controls Congress"

    Enough with the wacky left-wing conspiracy theories.

    Funny way Congress has of serving those who "control" it: they tax the hell out of the vast majority of corporations and are always adding on more regulations and hindrances.

  27. Well... by borgdows · · Score: 1, Funny

    I have no friends, 100% of my emails are Spam!

  28. What say you "just hit delete" crowd? by walt-sjc · · Score: 4, Insightful

    Citing "Freedom of speach", the first ammendment, etc, there still seems to be an ignorant crowd that thinks that we shouldn't have any legal means to curb spam. They still think technology can solve a social problem. As ISPs put increasingly invasive filters on email servers, legit email gets lost. When 99% of all email is spam, will you STILL think it's ok? When ISP's raise your internet fees due to spam, will you still defend its legality? When you are on the road paying $.50 / minute downloading spam for half an hour, even though your local filter blocks it from your view will you still be happy?

    There are people who want to re-invent the email protocol to solve the problem. Yeah, doing something technological can help the FUTURE, but what are we going to do for the 5 years it takes to develop, implement, and deploy this new technology?

    Think about it.

    1. Re:What say you "just hit delete" crowd? by ErikZ · · Score: 3, Insightful

      "Yeah, doing something technological can help the FUTURE, but what are we going to do for the 5 years it takes to develop, implement, and deploy this new technology?"

      Probably the same thing we would do if we didn't develop the tech. Just sit there and delete spam.

      --
      Democrats or Republicans. They are both taking us to the same place and they are not afraid of us anymore.
    2. Re:What say you "just hit delete" crowd? by walt-sjc · · Score: 1

      So you wouldn't support legislation to limit it KNOWING that it's only going to get worse? At the rate it's increasing, we don't have 5 years. We probably only have ONE before email is completely useless. With legislation, we can at least bankrupt spammers, and possibly even get them put in jail.

    3. Re:What say you "just hit delete" crowd? by anthony_dipierro · · Score: 1

      Citing "Freedom of speach", the first ammendment, etc, there still seems to be an ignorant crowd that thinks that we shouldn't have any legal means to curb spam.

      There are legal means to curb spam. But I haven't seen any laws which don't also block free speech. There needs to be a "Do Not Email" list, which allows people to voluntarily opt-out of all spam (sent in or affecting interstate commerce). Only then is the constitutional right to receive spam preserved.

      They still think technology can solve a social problem.

      It could. I don't get any spam on instant messenger, for instance.

      When 99% of all email is spam, will you STILL think it's ok?

      Sure, I'll just stop using email.

      When ISP's raise your internet fees due to spam, will you still defend its legality?

      Definately. I'll just switch to an ISP which doesn't waste money fighting spam, and makes money selling service to spammers.

      When you are on the road paying $.50 / minute downloading spam for half an hour, even though your local filter blocks it from your view will you still be happy?

      There are people who want to re-invent the email protocol to solve the problem. Yeah, doing something technological can help the FUTURE, but what are we going to do for the 5 years it takes to develop, implement, and deploy this new technology?

      Delete spam?

    4. Re:What say you "just hit delete" crowd? by Azghoul · · Score: 2, Informative

      I wouldn't support legislation. Ever.

      Of course, the hue and cry of the masses will eventually bury any other viewpoint.

      I currently have four email accounts.

      1 is my work email, only messages to and from people I work with. I have never received a spam to that account.

      1 is an old work account that I still occasionally use. No Spam received for 2 years. Then I accidentally put it in when I registered a domain with those fucks at Verisign (sorry for the french). Now I get about 20 spam per day.

      1 is a throwaway Netscape.net free account: Sign up for all web forms, stupid shit with this one. Gets mostly spam, but I don't care.

      1 is a private family account that only a few people know. No spam there.

      There's a solution, it's in using email intelligently. But like I say, the great unwashed AOL users will whine until their gov't wastes more of my tax money.

    5. Re:What say you "just hit delete" crowd? by Ed+Avis · · Score: 4, Insightful

      'Using email intelligently' consists of having multiple email addresses and trying to keep them secret? WTF?

      --
      -- Ed Avis ed@membled.com
    6. Re:What say you "just hit delete" crowd? by Synn · · Score: 1

      5 years for the new technology? We could do it in 1.

      Create the new protocol.
      Covert existing MTA's to use the new protocol but also support the old one.
      After a 6 months to a 1 year grace period switch off the old SMTP protocols from the MTA's.

      Considering how much spam is a problem for people that run MTA's, I doubt you'd see much resistance to coverting over to a new system ASAP.

    7. Re:What say you "just hit delete" crowd? by Christianfreak · · Score: 2, Insightful

      Your rant doesn't make a whole lot of sense. I don't think the problem is that people think that SPAM shouldn't be regulated, (okay maybe a tiny minority), its not regulated because there is no way to do so. I see very little SPAM that doesn't have forged headers or that didn't come through an open relay.

      We don't need new laws. The SPAM is already illegal. You can't enforce a NO SPAM list because a) spammers are difficult to track anyway and b) even if they weren't there is nothing finacially or otherwise preventing them from re-routing their SPAM through international servers.

      That said I think a lot of the filtering software misses the point. Its not as difficult to find the owners of open relays. I really think that we should go after ISPs that knowingly or not have open relays. Easier to track than the spammer himself and if you get the open relays you stop a whole lot of spam right away.

      As for overseas sites, maybe thats where we need treaties and insentives for foriegn governments to crack down on said open relays (I know it will never happen). In the meantime that's where filtering is a good idea.

    8. Re:What say you "just hit delete" crowd? by _Eric · · Score: 1

      Using IMAP, with a decent email reader without preview allows you to download only the headers of the SPAMs, killing them at first sight, and proceeding through your legitimate emails.

      If you're using a shitty and expensive internet connection in some remote place, you can make the effort not to download you whole mailbox.

    9. Re:What say you "just hit delete" crowd? by Anonymous Coward · · Score: 1, Insightful

      "the great unwashed AOL users will whine until their gov't wastes more of my tax money."

      As oppose to the spammers wasting your money?

      The money it takes to move that spam around comes out of your pocket and out of your employer's pocket. Free speech is "free;" it doesn't cost the person or the listener anything. Spam is NOT free speech because it is costing YOU resources, even indirectly.

      And though you are keen to point out that you don't get very much spam (I don't either, by the same methods you employ), my dept has to support the infrastructure that is impacted the most by spam. Money to cover this comes out of my employers pocket. I work for a medical center which means that it's money (albeit small in the grand scheme of things) that is taken _away_ from healthcare.

      Holding ideals such as freedom of speech is noble enough, but you've got to be careful about applying your views to the real world, lest you bind yourself into a situation (like this) that ends up screwing you over.

    10. Re:What say you "just hit delete" crowd? by amcguinn · · Score: 2, Interesting

      Fair questions.

      Let's look at the future: Currently, people are willing to accept email from unknown senders. If the volume of spam continues to increase as you plausibly predict, that is where the system will break. I assume that well-known people already read emails only from whitelisted senders, and that if I send email to, say, Tony Blair or Linus Torvalds it will not get read. As unwanted mail increases, the number of people doing whitelist-only filtering will increase too. Note that this can be done almost perfectly with existing protocols & software, and the only changes that will become necessary will be to prevent forged From: lines, which would not be too big a hole for spammers in any case.

      That is what is at stake, therefore: our ability to communcate by email with people we have not established a relationship with. That would be an actual loss, but is it worth legislating for?

      Bear in mind that it is not 'given' that there must be a legislative solution, any more than that there must be a technical solution. Both technical and legal solutions run into choppy waters when attempting to separate spam from non-spam.

      It is possible that email will slowly die, and be replaced by something else - you can imagine instant messaging expanding into non-instant messaging too, but with authenticated senders and enforced whitelists. SMTP email would become like Usenet, swamped in useless messages, its functions of old taken over by different media.

    11. Re:What say you "just hit delete" crowd? by Steve+B · · Score: 1
      Only then is the constitutional right to receive spam preserved.

      There is no such right. If there were, then everyone who did not send you spam would be violating your rights, which is absurd on its face.

      --
      /. If the government wants us to respect the law, it should set a better example.
    12. Re:What say you "just hit delete" crowd? by walt-sjc · · Score: 1

      If spam is already illegal, then why isn't the government going after these criminals? The number of cases where the government hsa actually prosecuted a spammer can probably be counted on one hand, and it's usually because of FRAUD, not the fact that it was SPAM. We only have ONE federal law that can POSSIBLY be used against spam, and that's the junk-fax law. Unfortunatly, it has not held up in court when used in exactly this way. So please, point me to the FEDERAL law that bans spam....

      Most of the abused open proxies and relays that are being abused are in other countries, while the spammer and the company / person that hired the spammer is right here in the good-ole USA. SO how are you going to go after these ISP's that have TIME AFTER TIME refused to do anything about it (assuming that they even speak english in the first place...) Anti-spammers have gone after providers of open relays for YEARS yet the problem is increasing, not decreasing.

      It's like you are going after the government that provides the roads that the drunk driver drives on when he kills your kid rather than the drunk driver himself. This makes no sense.

      The bottom line (and you have not addressed this) is that filtering MASKS the problem. It does NOTHING to solve it. I use filters myself - it's not that filters are bad, it's that they don't solve the problem.

    13. Re:What say you "just hit delete" crowd? by walt-sjc · · Score: 1

      You really don't understand the scope of the problem. Hell, just the political shit alone will take a couple years. EVERYONE has to have their input, they will haggle over the details, etc. For existing standards, even minor changes take years to agree on and implement, and you need Many years of backwards compatability. This is the REALITY of business and government.

      What you and I wish for and would like are very different from the real world. I share your desire for a new system that would eliminate spam, but the realities of the world tell me that it's not gonna happen anytime soon. Email is EVERYWHERE, and it's embedded all over the place in PDA's, phones, custom business software, etc, even my PRINTER supports it. Desire to do a new standard has nothing to do with the ABILITY to actually develop and deploy it everywhere and THAT's what will determine the time line.

      Then there is the question of what happens when (not "if") spammers figure out a way around the new system....

    14. Re:What say you "just hit delete" crowd? by walt-sjc · · Score: 1

      FYI, most filtering needs the body too. You still have not addressed the expense that the ISP has already incurred that WILL be passed down to you.

    15. Re:What say you "just hit delete" crowd? by Carmody · · Score: 1

      Covert existing MTA's to use the new protocol but also support the old one.

      Let me tell you bout a man named Charley who got on the MTA. He wanted to get off but the protocol changed charley couldn't get off that bus.

      DID HE EVER RETURN? No, he never returned, and his fate is still unlearned. Doomed to ride forever 'neath the spam and relays he's the man who never returned!

      --
      God is real unless declared integer
    16. Re:What say you "just hit delete" crowd? by pjrc · · Score: 1
      I wouldn't support legislation. Ever.

      What is wrong with last year's bill that would have outlawed forged headers and intentionally deceptive subject lines on bulk email?

    17. Re:What say you "just hit delete" crowd? by anthony_dipierro · · Score: 1

      Only then is the constitutional right to receive spam preserved.

      There is no such right. If there were, then everyone who did not send you spam would be violating your rights, which is absurd on its face.

      I have a right to a lawyer, but that doesn't mean that anyone who is not my lawyer is violating my rights.

      The right to free speech means that a willing sender should be allowed to send spam to a willing recipient. Most anti-spam laws I have seen deny people that right, or make it difficult to exercise (by forcing solicitation).

      A "Do Not Email" list is the only constitutional solution, in my opinion.

    18. Re:What say you "just hit delete" crowd? by Carmody · · Score: 1

      That is what is at stake, therefore: our ability to communcate by email with people we have not established a relationship with. That would be an actual loss, but is it worth legislating for?

      If the legislation will work, then I say, "Yes, it is worth it."

      I have a small website, and part of it is book reviews and essays that I've written. I treasure the emails I've gotten from strangers about them. I am a talented amateur writer, but not talented enough to be published. So, for a hobbiest like me, it is wonderful to be able to put my thoughts up on the web, and to get into interesting discussions with strangers about them. I've made many virtual friendships this way, and it would be very sad if future hacks like me were denied this special experience.

      --
      God is real unless declared integer
    19. Re:What say you "just hit delete" crowd? by fmaxwell · · Score: 2, Informative

      I know I'm going to regret this, but my beliefs are as strongly held as yours are...

      But I haven't seen any laws which don't also block free speech.

      The Constitution and the courts have not held that freedom of speech is absolute. For instance, it is not legal to yell "fire!" in a crowded theater (unless there is a fire). You do not, for example, have a Constitutionally protected right to slander someone. Your freedom of speech does not mean that you can go up to a minor and tell them about your sexual fantasies. You have no right to clip into the phone wires outside my house to make long-distance calls in order to exercise your freedom of speech. You do not have a legal right to call 911 to tell them about your great new multi-level marketing site.

      Laws limiting freedom of speech must simply pass the Central Hudson Test. I, and many advocates of anti-spam legislation, believe that such legislation would survive a court challenge based on this test.

      It could. I don't get any spam on instant messenger, for instance.

      I have.

    20. Re:What say you "just hit delete" crowd? by Anonymous Coward · · Score: 0

      Most of the people responding to this are flames, trolls, etc. But the real solution would be similar to the "junk fax" laws that are out there. Make it legal to sue the advertiser (client) for $500.00 per incident.

      Next, we need a medial blitz similar to what the the "just say no" reaganistas invented. "Don't respond to SPAM!!"

    21. Re:What say you "just hit delete" crowd? by Tim+C · · Score: 1

      What does legislation solve?

      Okay, fine, you make it illegal (with heavy penalties) for Americans to send spam. So, all the spam outfits move overseas, and you still get tons of it. You'll see a drop, of course, but hey, I'm in the UK and 99% of the spam I get is US in origin. The fact that I'm in a different country doesn't bother them now, why should it in the future?

      Technology can't solve a social problem, but legislation can't slove a *global* social problem either.

    22. Re:What say you "just hit delete" crowd? by mr.nicholas · · Score: 2, Interesting
      here's a solution, it's in using email intelligently.

      It's not that easy (or simple), friend. It's not just about giving your email address away to trusted folks, nor is it about placing your email in places that can be trolled from the web.

      About 99.9% of my mail I get is spam. I receive about 2000 emails a day to my personal account and if I'm lucky, 3 of them are legit (I now mostly communicate with my family and friends via IM).

      I run my own email server (and have since '93). The problem is that my system is constantly being dictionary-attacked for addresses. No matter where you hide (or don't hide) your account names, having some fucker scan every known name in the universe against your system WILL get it. And once one spammer gets it, they all do. (You do know they trade lists, right?).

      As it stands now there is no good way of preventing dictionary scanning. Yes you can make it hard (and I do by catching more than 2 User Unknowns, IP firewalling off the address that started the scan and sending back 1MB of /dev/random data from sendmail as a response message), but when someone wants to scan you, they will; even if they have to do it one address-per-envelope at a time.

      My son (who is 11) receives close to 300 spams a day (because he has his first name as his account name [as my entire family does on my system*]), 200 of which would make Solomon blush [hey! click here to see girls get fucked by turtles]. I, of course, filter HIS mail by hand (he pops from an account that I forward mail to).

      I *want* legislation; badly. I want it to be illegal to forge headers. Since my state (North Carolina) *HAS* anti-spam laws already, it would be really nice to be able to enact them. But because of the forging, it's next to impossible to do unless I quit my day-job just to parse headers and track down companies so that I can take them to small claims court.

      I can't do that. And I don't have the time. And nor should I be required to. So what's the answer: unfortunately, legislation.

      SPAM is a plague of locust for the 'net. I equate it to kids who crack/cheat on multiplayer games and make them unplayable by everyone else. SPAM has absolutely ruined the usefulness of email.

      * By using full first names as accounts (nicholas@blah.com) it's easy to guess my accounts. I should NOT however, be forced to use anything else because of the abuse of the system by lowlifes who are too lazy to get a real job to make money.

      Yeah, I'm vehement about this. Check out other posts by me here to see.

    23. Re:What say you "just hit delete" crowd? by anthony_dipierro · · Score: 1

      I know I'm going to regret this, but my beliefs are as strongly held as yours are...

      And I'm quite aware of them, as we've argued over and over again.

      The Constitution and the courts have not held that freedom of speech is absolute.

      Agreed (except of course that the Constitution can't "hold" anything.

      Laws limiting freedom of speech must simply pass the Central Hudson Test [bodi.com]. I, and many advocates of anti-spam legislation, believe that such legislation would survive a court challenge based on this test.

      And I, and many advocates of free speech, believe that such legislation shouldn't survive a court challenge based on that test. By affecting everyone, regardless of whether or not they are offended by spam, it is not narrowly tailored to serve the government purpose of stopping those who don't want spam from getting it.

    24. Re:What say you "just hit delete" crowd? by Azghoul · · Score: 2, Insightful

      Apparently you're vehement, but I do not agree that it requires legislation. When you drive into a downtown at night to see a show, and you park your car, do you leave it unlocked? You do things ALL the time to prevent abuse against you, why should using better/different email processes be any different??

      It /is/ easy and simple, "friend". I've had many accounts over the years and i DON'T get spam unless i make a mistake (like I noted in my first post) or I have a separate account just for junk.

      Explain to me how, "friend", that I can get away with not having anywhere near the spam problem you do, even though I've been online for about as long as it's possible to have been.

      Sorry you're so vehement against it. It's a techical problem, there are technical solutions.

    25. Re:What say you "just hit delete" crowd? by Azghoul · · Score: 1

      That's my method. Perhaps you have a better one you'd like to share with the rest of us?

      Just like I don't go shouting my credit card numbers to anyone, I keep my personal information to myself. Why don't you?

    26. Re:What say you "just hit delete" crowd? by amcguinn · · Score: 1

      The reason that no technical solutions have been implemented is because no-one really cares enough.

      Even at 40%, spam isn't that much of a nuisance. My inbox receives about 50% unwanted crap after filtering (and about 50% of the unwanted crap is actually viruses rather than commercial spam), but I still feel it's less of a problem than 3 or 4 unwanted phone calls a week.

      A few people are severely inconvenienced by spam, and a few more get worked up about it as a matter of principle (which is OK), but "Just delete" is the majority view.

      As it continues to get worse, the opportunity for technical solutions will open up. At that stage, a "parallel" spam-proofed mail infrastructure will grow alongside the current one. That won't happen today because most people don't care

      There are many possible approaches, once there is a need. Here is one off the top of my head

      A group of major ISPs agree to the following:

      • Email originated on my network by a reliably identified customer gets a "nonspam" header flag
      • Email received from anything other than a mailserver run by another ISP in the group gets the nonspam header stripped (if it exists)
      • Abuse is disallowed by ISPs in the group, either reactively, or by quota-ing numbers of emails per user, depending on what becomes necessary
      • Customers have an option to receive only "nonspam" emails

      That would do it, and it could be implemented in 5 weeks, not 5 years, and wouldn't affect anyone who didn't want to be affected. It would have unfortunate side-effects (elimination of legitimate bulk commercial email, difficulties for people outside areas/countries covered by "major" ISPs, possible abuse of the system by the ISPs for market power), but if it became necessary it, or something like it, would inevitably happen (I'm sure my suggestion could be improved; it was just an example).

    27. Re:What say you "just hit delete" crowd? by mr.nicholas · · Score: 1
      Hm. I can't really answer for your lack of spam, but I will ask a few things:

      Do you believe it should be legal to send an 11-year-old explicit pornographic spam?

      Do you believe that people have the legal right to lie about their company's name, address, phone number and everything related?

      Do you believe that scams should be legal?

      Do you believe there should be no way to OPT-OUT of a mailing?

      Do you believe that someone has the right to use my bandwidth to accomplish any of the above items?

      If you answered "No" to any of the above questions, then you too should want forged headers and the like to be illegal. If you don't, then please explain to me how I can prevent any of the above without knowing who the email came from.

      "Unenforceable laws make a mockery of justice."

    28. Re:What say you "just hit delete" crowd? by Ed+Avis · · Score: 1

      But you seemed to be saying that fixes for the spam problem were not necessary because people could just keep addresses secret instead, and that would fix it.

      'There's a solution, it's in using email intelligently.' Well that is a solution for you personally but I'm sure you agree it is not a decent answer to the spam problem for the Internet as a whole. The fact that some people get by, managing with some effort to keep addresses secret and avoiding spam, is not a reason to stop looking for a more robust and permanent answer to spam.

      --
      -- Ed Avis ed@membled.com
    29. Re:What say you "just hit delete" crowd? by Ed+Avis · · Score: 1

      It's not practical to keep my email address secret because I want people to be able to contact me, and I cannot decide in advance what this set of people will be.

      However, at the moment some senders take advantage of this to send spam messages which are of no interest to me. So I would like to have some limited 'barrier' such as a small postage charge (in cash or, more practically, in CPU cycles) for each message. Keeping my address secret is much too high a barrier because then not even real people would be able to contact me.

      We want a system that allows worthwhile, useful messages to get through, even if they are from previously unknown senders, while blocking junk mail. Keeping your address secret errs on the side of blocking too much; the current system errs on the side of blocking too little. A good solution IMHO is to make the sender assert that his message is useful and not junk and put his money where his mouth is by making a small payment for each message.

      Surely you are not suggesting that every email address should be kept secret?

      --
      -- Ed Avis ed@membled.com
    30. Re:What say you "just hit delete" crowd? by Anonymous Coward · · Score: 0

      But email is *supposed* to be an easy way of global communication. What good is it if I can only give my adress to people I already know?

    31. Re:What say you "just hit delete" crowd? by amcguinn · · Score: 2, Insightful

      If we go the way I described, you have two options

      1. Just carry on. Your emails from strangers will be buried in ever-larger piles of spam, but they mean a lot to you so it's worth receiving them.
      2. Use a web-based "comment submission" system on your web site instead of listing an email address.

      Number 2 might not be available to you today if you use a basic static-content-only web hosting service, but it is likely to become more widely available as the need for it grows. In theory it is also capable of being spammed, but it is easier to protect than an email address.

      As to whether legislation will work; I'm leaving that question to others. I have my doubts, though.

    32. Re:What say you "just hit delete" crowd? by Steve+B · · Score: 1
      I have a right to a lawyer, but that doesn't mean that anyone who is not my lawyer is violating my rights.... Most anti-spam laws I have seen deny people that right, or make it difficult to exercise (by forcing solicitation).

      Sillier and sillier. If you want a lawyer, you have to ask for one (either call your private attorney or tell the authorities you need a court-appointed defender). This does not deny your right or make it unreasonably "difficult to excersize".

      No, the correct solution is strict opt-in -- you get to blast bulk mail only to people who have requested it. You may not assume that anyone who has not specifically told you "no" is "willing", any more than you can assume that anyone who has specifically told you not to pick their pockets is fair game for your prestidigitory skill.

      --
      /. If the government wants us to respect the law, it should set a better example.
    33. Re:What say you "just hit delete" crowd? by anthony_dipierro · · Score: 1

      Sillier and sillier. If you want a lawyer, you have to ask for one (either call your private attorney or tell the authorities you need a court-appointed defender).

      Actually if you are charged with a crime and say absolutely nothing, a lawyer will be provided for you.

      You may not assume that anyone who has not specifically told you "no" is "willing", any more than you can assume that anyone who has specifically told you not to pick their pockets is fair game for your prestidigitory skill.

      I think this type of trespassing is more like physical trespassing. If you don't have a "No Trespassing" sign (or pink paint on trees, or whatever the accepted signal is in your state), you can only sue for actual damages.

    34. Re:What say you "just hit delete" crowd? by usotsuki · · Score: 1

      Yeah. Keep one address for posting, and one address for private correspondence, and one address for mailing lists. Works for me. I have one address NOBODY has spammed and it's gonna stay that fscking way!!! *g*

      -uso.
      Mata BETONAMU na no?!

      --
      Dreams, dreams, don't doubt dreams, dreaming children's dreaming dreams. Sailor Moon SS
    35. Re:What say you "just hit delete" crowd? by gbjbaanb · · Score: 1

      I doubt that it'll take 5 years to get a new protocol out - all it takes is MS Outlook Express v7 to appear with 'great new anti-spam features', AOL to do the same, free software chaps to upgrade their mail programs (which, of course, they'll do instantly) and the world will be running the all-new SMTPv2 protocol in a matter of weeks.

      Who wouldn't upgrade their software for free if it stopped spam.. mind you, if MS offered OEv7 almost everybody would upgrade it immediately anyway.

    36. Re:What say you "just hit delete" crowd? by fmaxwell · · Score: 1

      Agreed (except of course that the Constitution can't "hold" anything.

      Check the dictionary: To assert or affirm, especially formally: This doctrine holds that people are inherently good.

      And I, and many advocates of free speech, believe that such legislation shouldn't survive a court challenge based on that test.

      I, too, am an advocate of free speech, so please don't portray me as being opposed to free speech simply because we disagree on this point.

      By affecting everyone, regardless of whether or not they are offended by spam, it is not narrowly tailored to serve the government purpose of stopping those who don't want spam from getting it.

      The purpose of such legislation would be to prevent marketers from cost-shifting to recipients and ISPs without the permission of those parties. The Central Hudson test requires that the legislation not be more extensive than is necessary. For it to fail the test, you would need to show that there is a less extensive legislative option that would accomplish the same goals.

      As to your comments about those who wish to receive spam: Some small percentage of people would like to receive anonymous, obscene phone calls, but the laws prohibiting obscene phone calls do, and should, exist to protect the interests of the vast majority.

    37. Re:What say you "just hit delete" crowd? by Atlantix · · Score: 1

      Well, you're right, I can't say "no" to any of your questions but I would like to pose one for you.

      Do you believe that making these things illegal will actually reduce their occurence?

      I would argue they won't unless every country in the world adopts the same laws AND can effectively enforce them. I just don't see that happening anytime soon. While the idea of legislating spam is good in principle, I'm depressed by my belief that it won't help much.

      --Atlantix

    38. Re:What say you "just hit delete" crowd? by Dimensio · · Score: 1

      Typical. Blame the spammed and not the spammers.

      Spammers are scum. They will use any means to add e-mail addresses to their lists, and that includes dictionary attacks and scouring any website that they can find for e-mail addresses. I should not have to take complicated measures to prevent these crooks from stealing my ISP's resources.

      I personally support capital punishment for spammers. I don't consider them worthy of life. Kill them, and you do the world a favour.

    39. Re:What say you "just hit delete" crowd? by Azghoul · · Score: 1

      I certainly agree with your last point. But I also certainly wouldn't try to legislate it away. :)

    40. Re:What say you "just hit delete" crowd? by Azghoul · · Score: 1

      To you and the other anonymous poster... I am, actually, thinking that keeping your email address to yourself is a great idea.

      Yes, the net is a global medium of course, but I choose forums such as this one to expose myself (heheh that sounds dirty) to new/different ideas rather than receiving such things in my email.

      I use email to communicate with people I know, just as I do with the telephone. I want people to be able to contact me... just those people I know. If I had to have a "public presence" that required me to display an address to the world, I'd give it a different name than my 'private' one, which would allow me to quickly scan messages from people I didn't know -- If I decide I want to communicate with them through my "private" channel, it's easy enough to send them my private address.

      I understand your concerns, for sure. I just look at it a little differently. Interesting discussion, though (for a change, around here :)).

    41. Re:What say you "just hit delete" crowd? by NetSettler · · Score: 1

      Citing "Freedom of speach", the first ammendment, etc, there still seems to be an ignorant crowd that thinks that we shouldn't have any legal means to curb spam. [...]

      I think the reason for this is that the US Founding Fathers blew it when they talked about freedom of speech in the First Amendment. Speech is communication between speaker and listener, and in case of a dispute, this appears to say that the speaker gets the tie broken in their favor.

      I think of it a different way--as the freedom to hear [pointer to my personal web site where I expand on this in more detail]. That gives the final say on appropriateness back to the listener, where it belongs. When you view it in that mode, it's easy to see that spam has nothing to do with free speech.

      Free speech is just a way of guaranteeing that we in a democracy have access to a free flow of ideas. It isn't supposed to be a way of forcing us to endure a free flow of anything. That's not freedom, it's slavery.

      --

      Kent M Pitman
      Philosopher, Technologist, Writer

    42. Re:What say you "just hit delete" crowd? by anthony_dipierro · · Score: 1

      Check the dictionary: To assert or affirm, especially formally: This doctrine holds that people are inherently good.

      Well then, in that case I guess I disagree. In my opinion the Constitution does hold that freedom of speech is absolute.

      And I, and many advocates of free speech, believe that such legislation shouldn't survive a court challenge based on that test.

      I, too, am an advocate of free speech, so please don't portray me as being opposed to free speech simply because we disagree on this point.

      I didn't. I, too, am an advocate of anti-spam legislation, so please don't portray me as being opposed to all laws against spam simply because we disagree on which particular laws should be enacted.

      The purpose of such legislation would be to prevent marketers from cost-shifting to recipients and ISPs without the permission of those parties. For it to fail the test, you would need to show that there is a less extensive legislative option that would accomplish the same goals.

      There is a less extensive legislative option. It's called a "Do Not Email" list.

      As to your comments about those who wish to receive spam: Some small percentage of people would like to receive anonymous, obscene phone calls, but the laws prohibiting obscene phone calls do, and should, exist to protect the interests of the vast majority.

      I certainly disagree that they should exist. Obscenity is an exception to the First Amendment that I strongly disagree with. But spam isn't (necessarily) obscene.

    43. Re:What say you "just hit delete" crowd? by daffmeister · · Score: 1

      You may not shout out your credit card but I imagine you still support credit card fraud as being illegal.

      Just because you minimise your risk of exposure doesn't mean that the underlying act you are protecting yourself against can't be made illegal.

    44. Re:What say you "just hit delete" crowd? by fmaxwell · · Score: 1

      There is a less extensive legislative option. It's called a "Do Not Email" list.

      What about people's rights to privacy? Such legislation would force people to choose between privacy and being included on the "Do Not E-mail" list.

      What happens when the "Do Not E-mail" list falls into the hands of overseas spammers (or even U.S. spammers who think that they can hide their identity)? I cannot imagine a more attractive target for a spammer; an immense list of e-mail addresses all in one place and all of the addresses on the list representing people who receive below average amounts of advertising. What's next? A public list of frail, elderly people who live alone and don't want people coming to their doors?

      You have this entire thing backwards. The legislation needs to mandate an "I Accept Spam" list and to prohibit sending spam to anyone not on that list. There would be no problem with the list leaking out to spammers. In fact, it could be given to them. The number of people who wish to receive spam is far smaller than the number who do not, so the list would be shorter, less expensive to maintain and transmit, and would inconvenience fewer people with the sign-up process. The privacy issue would be almost non-existent since these are people that wish their e-mail address to be distributed to anonymous third parties. And, finally, the law would reflect the wishes of the majority of people by default. If you are are part of the vast majority who does not wish to receive spam, you would need do nothing.

    45. Re:What say you "just hit delete" crowd? by Robert+The+Coward · · Score: 1

      When ISP's raise your internet fees due to spam, will you still defend its legality?

      Definately. I'll just switch to an ISP which doesn't waste money fighting spam, and makes money selling service to spammers.


      No what will happen is ISP will just stop offering Email or will cost alot more. There is no such thing as "makes money selling service to spammers" unless you are talking about selling bandwidth.

      Also Spam is growing at such a rate that it may require more cost to not fight spam then to fight it. Bigger servers with more processing power just to keep up with processing something that user will call and coplain about and go to the other guy who does better at blocking it.

    46. Re:What say you "just hit delete" crowd? by anthony_dipierro · · Score: 1

      There is no such thing as "makes money selling service to spammers" unless you are talking about selling bandwidth.

      Duh, that's what I'm talking about.

      Also Spam is growing at such a rate that it may require more cost to not fight spam then to fight it.

      Makes sense to me.

    47. Re:What say you "just hit delete" crowd? by AME · · Score: 1
      When you drive into a downtown at night to see a show, and you park your car, do you leave it unlocked?

      Your comparison still breaks down, unless you think it should be legal to enter into an unlocked car and do damage or take things that aren't yours. You do think it should be illegal to break into others' cars, don't you?

      All the parent is saying is that it should be similarly illegal to misrepresent yourself or your intentions in email.

      And by the way, the fact that spam is legal, or at least possibly legal depending on jurisdiction or whatever, in some ways legitimize the act, and so worsen the problem.

      --
      "I have a good idea why it's hard to verify programs. They're usually wrong." --Manuel Blum, FOCS 94
  29. Technological solutions will be easiest by Ed+Avis · · Score: 5, Interesting

    The real problem with spam is the economics: it costs next to nothing to send a message, the only real cost (time) is borne by the recipient. Fix that problem and spam will go away. It doesn't need legislation, which in any case could apply in just one jurisdiction.

    A system like Hash Cash could solve the problem. The most popular free mail clients could start including hash-cash postage with each sent message, and then in a couple of years' time start to drop incoming messages that don't have postage paid. AOL could include hash cash in their mail client easily. *Easily*. That spam-detection centre they run is not cheap. Even Microsoft would add hash cash to Outlook, Outlook Express and Hotmail, since it's another encouragement to upgrade to a new Outlook release (which of course requires a new Windows version).

    Getting the whole world to upgrade its mail clients is a hard task, but getting every government in the world to pass anti-spam laws and enforce them is much harder. Goodness knows it's bad enough trying to get _one_ legislature to take a sane view on anything technology-related.

    --
    -- Ed Avis ed@membled.com
    1. Re:Technological solutions will be easiest by GigsVT · · Score: 1

      It took AOL this long to add such advanced features as "sorting email by an order other than it was recieved". Do you really think they are competant to do anything that requires thinking?

      --
      I've had enough abrasive sigs. Kittens are cute and fuzzy.
    2. Re:Technological solutions will be easiest by Anonymous Coward · · Score: 1, Insightful

      The easiest way to transfer the cost to the sender is to change the protocol so that mail is stored on the sending server, and that only a message header with a link to the message body is stored on the receiving server.

      This way, spammers will either a) need their own server (which can unambiguously identified and blocked), or b) the spammer's ISP will have to store the millions of message bodies and handle all the generated traffic. This will give a good incentive to the spammer's ISP for getting rid of the spammer.

      Also, this would get rid of fake originating server identification in headers, as a fake header would lead to no message body :-) .

      For this to work, it is important that the message subject be considered a part of the message body, not its header. Otherwise, spammers will try to put their message in the subject!

      This would be a simple yet very effective solution.

    3. Re:Technological solutions will be easiest by walt-sjc · · Score: 1

      ... And let me show you how this will fail.

      There are bazillions of email clients, some legacy with no source. People still will use these clients for various reasons. Since "hash cash" or something like it is used, they will gateway through another server that adds the "hash cash". Just like there are hundreds of thousands of open relays and proxies now, there will be hundreds of thousands of "hash cash" proxies for spammers to exploit.

      Just as there is no real incentive to close todays open relays and proxies (and for every one closed it seems like 3 new ones pop up) many apathetic admins will not care that their CPU cycles are used by a spammer.

      So there you go, Billions spent on a new system that spammers find a way around anyway. Back to square one.

      In order to really make a dent in the problem, you need to remove the benefit of spam. Right now, it's increased sales. If instead it turns into jail time....

    4. Re:Technological solutions will be easiest by Ed+Avis · · Score: 1

      Your solution is simple, but it requires changes to the Internet's mail infrastructure. SMTP would have to be replaced.

      Enforcing postage on the client side is much easier to roll out: people can gradually switch to hashcash-enabled mail readers and only a few years down the line start dropping mail without postage (or putting it into a special low-priority mailbox, or sending an automatic reply asking for manual confirmation, etc).

      --
      -- Ed Avis ed@membled.com
    5. Re:Technological solutions will be easiest by Ed+Avis · · Score: 2, Interesting

      On the contrary, it will not be possible for a spammer to use a proxy or other system to add hashcash postage to large numbers of messages, simply because the amount of postage is chosen to limit the number of messages that can be processed in one second.

      For example suppose the standard postage amount is a problem which typically requires five seconds of CPU time on modern systems. Then no proxy even if it were taken over by crackers could send out more than one spam every five seconds. This is a greatly reduced rate of spam and probably low enough to make spamming not worth the effort.

      --
      -- Ed Avis ed@membled.com
    6. Re:Technological solutions will be easiest by Ed+Avis · · Score: 1

      Like I said, that 'spam zapping headquarters' AOL runs costs money. Corporations tend to avoid things that cost them money. If AOL knew that adding antispam measures to their mail client would (in the long run) let them avoid the expense of filtering spam manually, they would add this feature very quickly (no matter how incompetent they may be in other areas that don't have a direct financial impact).

      --
      -- Ed Avis ed@membled.com
    7. Re:Technological solutions will be easiest by LHN · · Score: 1

      What are you a communist? We all have to pay because of a bunch of spammers? Not likely.

    8. Re:Technological solutions will be easiest by walt-sjc · · Score: 1

      Spammers ALREADY spread the load over thousands of open relays. Perhaps you were unware of this (this is why filtering based on open relays is not very effective.) New proxies and relays pop up every day. History is telling me that the same thing will happen with any new system. Can you say with 100% certainty that it will not?

      Hash cash (and things like it) would also put a Major dent into perfectly valid things like mailing lists and customer notifications (the non-spam kind.) The "solution" is for everyone to be 100% on the ball, white listing everyone they communicate with, etc. The Reality is that most people using the internet are really fucking stupid when it comes to technology and won't be able to grasp the concepts of how the system works. Hence it will put an undue burden on legitimate uses, and caused much grief for the majority of users on the internet. The backlash would be amazing.

      In a perfect world, hash cash would be a great solution, but we do not live in a perfect world. Bottom line is that I share your desire for a new system that would solve the spam problem, but from a business, technical, and social standpoint I know that would fail.

    9. Re:Technological solutions will be easiest by Ed+Avis · · Score: 2, Interesting

      Even if there are thousands of open, postage-adding relays, this will be an order of magnitude less spam than the current situation of thousands of open relays that don't need to add postage. Really, which is worse: spammers abusing a host to send hundreds of messages a second, or spammers abusing a host to send one message every five seconds? Whichever way you look at it, open relays or no open relays, requring computationally expensive postage will greatly limit the number of spams that can be sent.

      You are right that mailing lists would be a problem, but most non-technical users don't subscribe to mailing lists surely? They use web discussion forums or whatever. I don't see customer notifications as a problem, surely each customer doesn't get more than three or four notifications each month and that is certainly manageable. Sending out huge numbers of messages to _all_ your customers isn't feasible, and that is the point.

      In a perfect world we would have real cash payments for mail (IMHO); one cent per message or something like that, with the possibility to waive payment for known senders. But that is hard to implement so hash cash is a compromise solution. In any case you have to compare the disadvantages of a hashcash-based system with the current spam-ridden Internet mail system, unless you have an alternative to propose.

      --
      -- Ed Avis ed@membled.com
    10. Re:Technological solutions will be easiest by Electrum · · Score: 1

      For example suppose the standard postage amount is a problem which typically requires five seconds of CPU time on modern systems.

      What is a ``modern system''? Is it a 400mhz P2 or a 2.4ghz P4? The speed difference there is a factor of at least six. Either one could reasonably be used for a mail server. So now the range is between one and thirty seconds for each piece of email.

      What if I run a large mailing list? Do I need to buy more machines simply because I send a lot of messages? What about systems like AOL that send millions or billions of messages a day?

    11. Re:Technological solutions will be easiest by Ed+Avis · · Score: 2, Interesting

      Yes, a faster relay server can send more messages than a slower one. Spammers with access to fast machines can send more messages. But even if you have a very fast machine the number of messages you can send per second is far, far less than currently possible.

      All this depends on the existence of open relay servers which take messages and compute the postage for them, presumably to support legacy email clients which don't add postage for themselves, and moreover are misconfigured to accept incoming messages from anywhere. Presumably these servers would not be any more numerous than open SMTP relays are now.

      You're right that mailing lists are a problem. Such addresses would have to be explicitly whitelisted by their subscribers - or maybe if you tell your mail program 'I am subscribed to misc-discuss@goatse.cx' then it would accept messages which had valid postage for that mailing list address as well as those with valid postage for your own address.

      For systems like AOL there is no extra load on the server because the postage can be added at client machines - you see the hourglass for a few seconds after pressing 'send', or more likely, the postage is computed in the background while the message is in the outbox. At least, this is how I think it is intended to work: the Hash Cash site doesn't say specifically whether postage should be computed at the client or on the mail server. But IMHO doing it end-to-end is better.

      --
      -- Ed Avis ed@membled.com
    12. Re:Technological solutions will be easiest by jbolden · · Score: 1

      SMTP would have to be replaced.

      I don't actually like the hashing system so much. But what is so bad about replacing SMTP? If everyone agreed that effective July 1, 2003 SMTP would no longer be used it wouldn't be hard to switch. Eudora, Outlook... relase a patch; the new server for Solaris, windows, etc... gets put on the net within a month...

    13. Re:Technological solutions will be easiest by Anonymous Coward · · Score: 0
      The tree of liberty must be refreshed from time to time, with the blood of patriots and tyrants. -Jefferson

      So basically Jefferson was a freedomloving slaveowner. The irony of it all!

    14. Re:Technological solutions will be easiest by Ed+Avis · · Score: 1

      I'm not suggesting paying real money for sending messages, only 'payment' of a few seconds of CPU time using Hash Cash or a similar system. This will not be a problem for anyone except spammers, who will no longer be able to send millions of messages. If each message requires about five seconds of computing time to generate the postage, a spammer couldn't manage more than 20k messages per day from a single machine, which is not enough to make it profitable.

      (Although I don't see how wanting payment for use of a resource belonging to me - my time and my network bandwidth - is particularly communist.)

      --
      -- Ed Avis ed@membled.com
    15. Re:Technological solutions will be easiest by letxa2000 · · Score: 1
      Actually, the solution is pretty cool. It doesn't necessarily even require the SMTP infrastructure change.

      Consider emails are still sent as they are now. But we add a new "MIME Type" with something such as:

      MIME-Content-Link: (address/port/ID information)
      MINE-Content-Checksum: ABF41325123B13

      All the message is is a standard message header with no body but the above information. If a mail client sees the above it would have the option of retrieving it based on the address/port/ID information given. The checksum would be a self-declared checksum for the message that could be used to (optionally) check a central database to see if that message is blocked. Sure, the sender could lie about the checksum but if the mail client went out and got the message and the checksum didn't match it would be discarded immediately--hence there would be no reason for a spammer to even bother sending a faked CRC.

      What would happen? Spammers wouldn't use it. Legitimate email would, slowly at first. At some point you just say (on a user by user basis) that you are only willing to accept the new type of email. As soon as that happens on a large scale the "call-back" approach will be the only approach to send email and spammers will be stuck because 1) They can't hit-and-run--their server has to be around long enough for users to retrieve the email. 2) They can be easily blacklisted. 3) If they use their provider's mail server, the provider will quickly be able to detect it and shut it down.

    16. Re:Technological solutions will be easiest by Copid · · Score: 1

      Not to mention that even now, years into the game with billions of dollars with which to develop software, they can't read half of the MIME attachments that come in correctly. I often have to have my mother forward her mail to me so I can use mutt to grab the attachments.

      --
      An interesting anagram of "BANACH TARSKI" is "BANACH TARSKI BANACH TARSKI"
  30. Antisemitic post by Anonymous Coward · · Score: 1, Insightful

    Kind of funny when a post that attacks someone for "fear" includes a bit of anti-semitism midway through it.

    "Propaganda's m'friend But I calls it "fact""

    Propaganda is in fact typically a meaningless term. Quite often what is labelled "propaganda" is factual, but it is labelled "propaganda" for the sole reason that the opponent does not agree with the facts presented and would rather see them censored or otherwise dismissed.

    1. Re:Antisemitic post by Anonymous Coward · · Score: 0
      I assume the bit you think is anti-semitic is:

      So we gotta prop up Israel
      That ol' sacred cow

      How is that antisemitic? Anti-Zionist, sure - but anti-Zionist isn't anti-semitic.

      +1 insightful?

      More like -1 israeli apologist.

  31. isn't it ironic??? by Botchka · · Score: 5, Insightful

    that the biggest purveyor of filling my postal mail box with crap that I haven't signed up for or asked for (ie: cd's and cd holders that are worthless), is now fighting spam. Give me a break! How about they stop mailing those stupid #@%@$%^& cd's and filling the landfills with garbage that doesn't degrade. They are hypocrites!

    --
    Money not found! A)bort, R)etry, D)eclare Bankruptcy
    1. Re:isn't it ironic??? by hkmwbz · · Score: 2, Insightful

      Except they paid to send you stuff through snail mail. Spammers basically use other people's bandwidth and disk space to send out their crap. Hypocrites? Not at all.

      --
      Clever signature text goes here.
    2. Re:isn't it ironic??? by Botchka · · Score: 1

      AOL is essentially using my bandwidth (I'm using bandwidth as a metaphor) and a lot of other peoples since the last time I checked, I wasn't being paid for throwing away their useless, unsolicited crap. To say that it's a nominal fee to throw away one of their cd's isn't the point either. Take this collectively across the nation and it adds up to one hell of a bill to throw this garbage out. Hell factor in the environmental impact and it rises even more.. I stand by my original assertion that they are HYPOCRITES!

      --
      Money not found! A)bort, R)etry, D)eclare Bankruptcy
    3. Re:isn't it ironic??? by hkmwbz · · Score: 1

      Actually, the postal office is using your "bandwidth". AOL pays them to do this. You can't even compare it to spam. You calling them hypocrites still shows a lack of understanding about the real issues at hand.

      --
      Clever signature text goes here.
    4. Re:isn't it ironic??? by Botchka · · Score: 1

      HUH? Who pays for the unsolicited cds to reach your mailbox? AOL! Who pays for unsolicited emails to reach your inbox? AOL! So they are willing to fight against spam because of the real costs to them to combat it but YET they are continuing their huge ad campaign and mailing everyone and their uncle a cd to join (if this isn't hypcritical, I don't know what is) So what I think I hear you saying is that it would be okay to get unsolicited emails as long as the company that was spamming paid for it? That's not alright with me. What it boils down to, is that it's still unsolicited email and postal mail, that I end up having to pay for, whether eventually(costs being passed along to me) or immediately(the cost of my garbage bill, etc) I'm very well aware of what the *real* issues at hand are. What the real issue of spam is to you, won't necessarily be the real issue to me. To me, at least right now, it's a global cost rather than a personal cost. Regardless of how you feel about spam, the bottom line is it's unsolicited and it going to have a real impact on the internet...JUST like their cd's are unsolicited and are going to have a real impact on the environment. Doesn't matter who paid for it to get to my house.

      --
      Money not found! A)bort, R)etry, D)eclare Bankruptcy
    5. Re:isn't it ironic??? by Anonymous Coward · · Score: 0

      It is ironic. The cost to the environment, though may not be a financial cost to you in terms of postage, is still a large cost. Frankly, as much as I absoultely despise spam, even though it may cost each recipient a few cents, I would still rather someone send out 1 million e-mails than 1 million CD's

  32. 4% of all users are Trolls by Hao+Wu · · Score: 1, Funny

    According to some study I read somewhere.

    --
    I suggest you read Slashdot
  33. Snail-Mail Spam? by rgf71 · · Score: 1

    I wonder how much it costs the USPS from lost productivity, equipment, software and manpower needed to combat the problem of THOSE DAMNED AOL CDs!?

    1. Re:Snail-Mail Spam? by Dionysus · · Score: 1

      USPS probably makes money on them, since AOL actually pays to get them delivered.

      --
      Je ne parle pas francais.
    2. Re:Snail-Mail Spam? by Anonymous Coward · · Score: 0

      This would only be equal to spam if AOL charged YOU for the CDs.

      Spam is theft of services.

  34. Spammunition by BlackjackGuy · · Score: 5, Informative
    My spam problems have almost entirely gone away since installing Spammunition. It's a bayesian filter for MS Outlook. Wish I didn't have to use MS Outlook but it's a requirement at work.

    Bayesian filters are definitely the way to go. They flat-out *work*. Other programs I've used just didn't perform, like Cloudmark Spamnet.

    1. Re:Spammunition by walt-sjc · · Score: 2, Insightful

      Is your spam problem GONE or is it simply hidden from view? You and your ISP have alreay paid the cost of that spam. The cost to you seems minimal, but to a large ISP it is HUGE. When your ISP raises it's rates due to the volume of spam that you do not see yet still receive, will you still be happy with your filter as "The Solution" to spam?

      Don't get me wrong, I have been filtering spam for years. Filters can minimize the impact of the spam problem, but they do nothing to solve it.

    2. Re:Spammunition by Jaycatt · · Score: 1

      It looks like Spammunition works with MS Outlook 2000 or higher. Anyone know of a good spam filter for Outlook 98 under WinXP Pro? Our mail is handled by MS Exchange Server.

      --
      "Shared pain is lessened; shared joy is increased. Thus we refute entropy" - Spider Robinson
    3. Re:Spammunition by Anonymous Coward · · Score: 0

      Deersoft Software used to make a version of Spam Assassin that would work for Outlook, but they have been aquired by Network Associates, who plan on releasing an Enterprise level spam killer program suite. First for the desktop, then integrated with there WebShield and GroupShield products. Perhaps this is what you want?

    4. Re:Spammunition by huntz0r · · Score: 1

      Check out POPFile. It runs as a local email proxy, and it modifies the headers and (optionally) the subject title of incoming mails so your client can categorize them easily. That way it works with any email program, just have the spam dropped into its own folder where you can scan and delete it.

      I recommend giving it a week to "learn" how to sort your mail (you [re]categorize mails in the POPFile interface as they come through) before actually using it to filter, otherwise you will get a lot of false positives as it starts out knowing nothing.. but for me, after a week it never got one wrong again, and I don't get much email at all on the work account it filters.

      --

      Karma: Chameleon (mostly affected when you come and go, you come and go)
    5. Re:Spammunition by Jaycatt · · Score: 1

      Thanks. I'm clueless when it comes to how MS Exchange directs mail to MS Outlook... I thought POP mail was used when I want to get mail from an ISP? How does this translate to a MS Exchange server/MS Outlook combination? I've never used POP addresses with this configuration.

      --
      "Shared pain is lessened; shared joy is increased. Thus we refute entropy" - Spider Robinson
    6. Re:Spammunition by Jaycatt · · Score: 1

      Sounds like this might work. As far as I know our IT department has no plans to do anything on the "server side", so whatever I want to implement will have to be on my client only. I'm really having trouble finding some client side software that works in conjunction with MS Outlook.

      --
      "Shared pain is lessened; shared joy is increased. Thus we refute entropy" - Spider Robinson
  35. Go after the businesses who pay spammers by kalislashdot · · Score: 5, Insightful

    You know it's a funny thing because businesses like and hate spam. They like it because it brings in money and they hate it because they have to spend money on spam filters and lost work time.

    Here is a possible solution. Spammers cover their tracks. Well instead of trying to go after spammers go after the business that use them. Those businesses MUST be traceable because they include ways to buy their product. If we must make a law, which would only work in the US, it should say "You can't hire a spammer to send your mail". Then when www.pacificmeds.com sends me a spam for "save money on prescription drugs" they can be fined.

    Go after the source, not the person who fills the need. Once the need is squashed by the law spam will reduce greatly.

    1. Re:Go after the businesses who pay spammers by clifyt · · Score: 4, Interesting

      And then what do we do what a company hires an untraceable spammer to send out a million messages with its competitors names?

      I know as a youth, one of my hometowns stores fliered the city with a competitors name and fake coupons for a rediclous amount off to give them a bad name when their competition was at its worst.

      It finally came out the other guys had done this, but the other store decided to make a promo out of it and honor the coupons anyways...backfiring on the others.

      In a smaller town, this sort of thing can be traced back to the source rather easily. On the internet, how are you going to police the fact that PacificMed's greatest competitor (would that be AtlanticMeds) by doing the same sort of thing? Find a spammer in Asia (or one that works for your local college that will simply use Asian relays) and pay them $1000 to send out a million spams either to get them in legal action or simply to give them a black eye in the public's mind.

      clif

    2. Re:Go after the businesses who pay spammers by adzoox · · Score: 1
      Only a few states allow people to do this. My state is one of them. For fun, and to relax boredom I call one (a product distributor) or two every now and then. I make them listen as I recite my state's law to them and then, without profanity, cuss them out, and threaten them with a lawsuit. I actually use it as a teaching tool for my girlfriend and to my employees on how to properly address problems and stand up for integrity.

      There are VERY few legit business's that benefit monetarily from SPAM. If you are getting SPAM from a legit biz, you signed up for it, or didn't uncheck, "send me mail from other parties that may have other items of importance to me" or you downloaded Stuffit Expander ;)

      I agree with a post above, it has to made into an offense to send mail from a fake SMTP.

      --
      Yell & scream & rant & rave... it's no use... you need a shaaaave ~ Bugs Bunny
    3. Re:Go after the businesses who pay spammers by raduf · · Score: 1


      This is the best ideea yet. But still, you'll probably have to verify that the company actually hired the spammers. And since the spamers are underground, it's not likely to be easy.
      Maybe you could force them not to take orders that come because of spam? Neh, that's too complicated... Any ideeas?

    4. Re:Go after the businesses who pay spammers by Anonymous Coward · · Score: 0

      i've been thinking the same thing for a while now. for those that REALLY want a law passed: make the law say no advertising by spam without paying the spam fee. spam fee is $0.50/address payable to the end network that hosts that address. spam received without that fee paid is subject to a $500 fine/email also payable to the address' hosting network.

      not sure what to do about international companies. guess ddos attacks is out of the question...

    5. Re:Go after the businesses who pay spammers by Anonymous Coward · · Score: 3, Interesting

      My life as a spammer (in brief):

      Started working for new company under contract. Help the bossman w/ his spam. Make him do it legitimately by unconfirming all lists and sending reconfirmation notices. Result: 60% reconfirm (including people who had reported us for spamming before). Now we have nice, clean lists and the reply-to/return-path headers are actually LEGIT! Imagine that... an honest bulk mailer. Too bad our rep is already soured. We even have people who are afraid to click on the unconfirm links for fear of being added to another list.

      I'm thinking of writing an (anonymous) article for /. on the subject. Anyone interested in reading about how I turned a malicious spammer into an honest netizen?

      -- S

    6. Re:Go after the businesses who pay spammers by dubl-u · · Score: 1

      And then what do we do what a company hires an untraceable spammer to send out a million messages with its competitors names?

      As you go on to point out, this problem can happen in other realms and with current laws. The unfortunate victim can seek redress through the courts. It's not perfect, but it's no worse than the rest of the legal system.

    7. Re:Go after the businesses who pay spammers by pjrc · · Score: 1
      Here is a possible solution .... Well instead of trying to go after spammers go after the business that use them.

      While you're dreaming, how about finding those idiots who actually BUY from spam. They are ultimately the incentive for sending spam. If only you could "educate" them not to buy.

    8. Re:Go after the businesses who pay spammers by clifyt · · Score: 1

      And as I also go on to say it works in smaller settings, but what do you do when it gets to the point of a global scale?

      Plese Provide Evidance That You Gave Money To These Spammers And If You Can't, You Are Guilty. Then again, we could get Bushie to approve this law by executive order noting his current bend.

      Its just not going to work...

    9. Re:Go after the businesses who pay spammers by dubl-u · · Score: 1

      Plese Provide Evidance That You Gave Money To These Spammers And If You Can't, You Are Guilty.

      Judges deal with this sort of ambiguity all the time. There's no reason they can't deal with this as well.

      Its just not going to work...

      Is this short for "I think it's just not going to work?" Or do you have some evidence that you'd like to share with us?

    10. Re:Go after the businesses who pay spammers by NamShubCMX · · Score: 1
      Well it *is* 30% bigger now

      (jk) :P

      --
      We've always been at war with Eurasia.
    11. Re:Go after the businesses who pay spammers by clifyt · · Score: 1

      Judges deal with some ambiguity...for the most part, if their case is entirely predicated on ambiguity, they will throw the shit out.

      As for "Is this short for "I think it's just not going to work?" " -- No this was short for "Its just not going to work..."

      It wasn't a hard sentence structure to follow, nor do I mean anything more than I said.

      As for evidence...yeah -- common sense and paying attention to the law for 30+ years. It something that /.'rs can't seem to do...they all seem to think the law was entirely put there to fuck with them and it was an invention of only 5 minutes ago with no precidence.

      I got the karma -- this one IS a troll -- I'm just sick of arguing with dumbasses :-)

      clif

    12. Re:Go after the businesses who pay spammers by Anonymous Coward · · Score: 0
      I'm thinking of writing an (anonymous) article for /. on the subject. Anyone interested in reading about how I turned a malicious spammer into an honest netizen?


      Me, Me!!
    13. Re:Go after the businesses who pay spammers by edstromp · · Score: 1

      That's all good and fine until the spammer decides to send *me* an advertisement for *your* products. Effectivly screwing you, not the spammer.

    14. Re:Go after the businesses who pay spammers by dubl-u · · Score: 1

      As for "Is this short for "I think it's just not going to work?" " -- No this was short for "Its just not going to work..."

      It wasn't a hard sentence structure to follow, nor do I mean anything more than I said.


      That was a gentle way of pointing out that you are stating your opinions as if they were facts. Sorry I wasn't more clear.

    15. Re:Go after the businesses who pay spammers by elemental23 · · Score: 1

      I'm thinking of writing an (anonymous) article for /. on the subject. Anyone interested in reading about how I turned a malicious spammer into an honest netizen?

      Definitely. Write it up and submit it.

      --
      I like my women like my coffee... pale and bitter.
    16. Re:Go after the businesses who pay spammers by Andy+Dodd · · Score: 1

      "We even have people who are afraid to click on the unconfirm links for fear of being added to another list."

      #1 rule of dealing with spam:

      NEVER do anything that could confirm that your address is real and read by a human.

      --
      retrorocket.o not found, launch anyway?
    17. Re:Go after the businesses who pay spammers by Devlyn_Syde · · Score: 1

      I recently read and article (which I cannot currently locate) about how some people had tried responding positively to all of the spam they received. They learned that most of the companies/products were not legitimate. They were actually just a cover for a way to harvest and confirm email addresses to sell to other spammers.

      So, for a significant portion of spam, it looks like there are no legitimate companies.

      Anecdotally: I have had an email address that has been in use since before spam was invented (yes, before "Make Money Fast!") I recall one bit from the first couple years of the spam blight that went to great length to sell me some golf balls. However, there was no valid return address, there was no web address, there was no phone number or street address, the headers were forged - in fact, there was no way to respond positively to the message, even if I wanted. What was the point?

      According to my mail filter, 70% of my email is now spam. If all it does is consume my resources and doesn't even constitute a legitimate solicitation, from a technical standpoint, I don't see how spam is distinguishable from a denial of service attack.

      Forgive me if this has been covered in elsewhere. Dealing with the incoming spam takes so much time I cannot read all of the comments ...

      Devlyn Syde

  36. I hate spam (Don't we all) by SirLantos · · Score: 3, Insightful

    {Complaint}It the past 6 months are so I have been recieving about 200% more spam. I get to work in the morning and delete 90% of my e-mail becasue its spam. Out of every 200-300 e-mails I recieve, I actual only care about 10-20 of them, the rest is spam.{/Complaint}

    The problem is that nobody can find a reasonable solution. Here are some examples of common solutions:
    1."Make spam illegal out right."
    Problem: OK, this is a bit extreme. Even if you did manage to do that, companies from outside the US or companies/people can hide where the e-mails are coming from, good luck catching them.

    2."Charge for e-mails."
    Problem: The people that want that are the post office folks. I seriously doubt anybody would sit back and allow this. Just thinking about pisses me off.

    3."Find the people that send spam and destroy them."
    Problem: OK, this is my personal favorite. But, the goverment already made that illegal. It's like the saying goes: "Some people are alive simply because it is illegal to kill them." BTW, all of you peeps out there that are going to yell at me for suggesting something like that: RELAX, IT WAS A JOKE!!! Have a sense of humor for goodness sake.

    That's just my opinion,
    SirLantos

    --
    The flying hamster of DOOM rains coconuts on your pitiful city.
    1. Re:I hate spam (Don't we all) by Xtifr · · Score: 1

      1."Make spam illegal out right."
      Problem: OK, this is a bit extreme.


      Why is it extreme? Junk faxes were made illegal, and the justification for that (cost to receiver, not sender) is just as valid for spam.

      Even if you did manage to do that, companies from outside the US

      Companies from outside the US are still subject to US laws and regulations if they do business in the US. And if they don't do business in the US, then it would be pretty silly of them to advertise to people in the US.

      or companies/people can hide where the e-mails are coming from

      Who cares where it's coming from? If a company sends you a junk fax, you can sue them. The location of the fax machine has no bearing on the matter. They can have the fax machine located in the Bahamas, but if they're a US company (or do business in the US), they will still be just as liable. Why should it be any different for spam?

      Or do you think companies will send you messages saying, "Hi, would you like to buy a penis enlarger? Well, I'd love to sell you one, but I can't, because if I told you where to send the money, then you'd know how to sue me, so I guess you'll just have to go on living with your small penis"? I'll grant you that it might be pretty hard to track down the sender of a message like that, but somehow, I doubt that very many people, no matter how evil, would feel motivated to send such a silly message. :)

  37. Reason for increase by Anonymous Coward · · Score: 0

    Most of the new "spam" are resumes being emailed out by out of work programmers.

  38. Not ambiguous. by Anonymous Coward · · Score: 1, Informative

    I don't have any problem determining what spam is and what it isn't. Why would there be any ambiguity?

  39. 40% spam by Anonymous Coward · · Score: 0

    This is a very interesting statistic.
    Long time slashdot readers will note that the posts for any given story usually settle down to about 33.3%-45% "-1" ratings.

    I'm just saying.

  40. in other news ... by borgdows · · Score: 5, Funny

    after renaming "french fries" Congress has just decided to rename "spam" as "french email" !

    1. Re:in other news ... by Anonymous Coward · · Score: 0

      That's not funny. It's sad.

    2. Re:in other news ... by wikthemighty · · Score: 1

      after renaming "french fries" Congress has just decided to rename "spam" as "french email" !

      Don't you mean "post electronique?"

      --
      "There are people who do not love their fellow human being, and I _hate_ people like that!" - Tom Lehrer
  41. Ratio is higher here by Lumpy · · Score: 2, Interesting

    3 legitimate Emails and 81 spams this morning. typically my spam filter catches between 60-120 a day on my work address and I have to add 3-4 more rules a week to keep it down.

    A simple solution is replacing the broken SMTP with something that requires authentication and doesnt give you the ability to modify the headers unless you run the server. If the spammers have to use real email addresses or had a real way of tracking them easily attached to every email, they would stop.

    Just like how cockroaches scatter when you turn on the lights.

    --
    Do not look at laser with remaining good eye.
    1. Re:Ratio is higher here by winnetou · · Score: 1
      A simple solution is replacing the broken SMTP with something that requires authentication and doesnt give you the ability to modify the headers unless you run the server.

      The hundred (or so) big time spammers who send 50% of all spam already run their own servers.

  42. Psychological profile of spammers by Anonymous Coward · · Score: 3, Interesting
    One thing about spam that stands out, is that so much of it is of a very explicit sexual nature. It is sent indiscriminately to individuals who are unlikely to have any use for these products and services.

    My theory: most spammers are the cyber equivalent of "flashers" - sexual deviants who derive thrill from shocking unsuspecting citizens. I believe that the products offered are largely irrelevant. It is the shock value which motivates the spammer. Perhaps they could be prosecuted under similar sex crimes laws that allow us to go after the "flasher".

    1. Re:Psychological profile of spammers by ender81b · · Score: 1

      My theory: most spammers are the cyber equivalent of "flashers" - sexual deviants who derive thrill from shocking unsuspecting citizens.

      Possibly. My theory, based on reading a number of spammer interviews, are spammers are clueless morons who spam indiscretely because they believe they have perverse right to do so. Factor in equal amounts of greed, stupidity, and ignorance and you have yourself a spammer.

    2. Re:Psychological profile of spammers by MsWillow · · Score: 1

      One thing about spam that stands out, is that so much of it is of a very explicit sexual nature. It is sent indiscriminately to individuals who are unlikely to have any use for these products and services.

      Goddess, you can say *that* again! I get, daily now, several ads for Viagra, Russian wives, penis enlargement, sexual stamina building, septic tank cleaning and home refinancing (I live in an apartment) and so on, often several copies of each ad daily.

      My favorite is the ad that tells me how they have "helped 700,000 men just like" me. Sure, men named Jeannette, with long hair, wearing silk blouses, makeup, lipstick, perfume, and carrying IDs that tell the world they're female. Yup yup yup, I'll bet they have! Most of them live in the Castro district of San Fran :)

      I bounce them all. It gets annoying, though, when I get some 30-50 emails daily, and *two* of them are legit. Grrrr.

      --

      Lemon curry?
  43. AOL is the Front Line? by cindik · · Score: 1

    The front line in the war against spam is inside an unmarked building in Northern Virginia, where a bank of computer screens tracks the volume of e-mail pouring into the system used by America Online's 35 million subscribers.

    If AOL is the front line, then it's "Springtime for Spammer and Pornography!"

    The 40% figure is interesting - I wonder how they calculated that number?

    At work, my email is about 80% spam, 15% inhouse email, and 5% legitimate internet email. My new slashdot@cindik.com address (started about two weeks ago and going away real soon now) is 100% spam (most of which is caught by SpamAssassin).

  44. 40 percent by number or by size ? by LMCBoy · · Score: 5, Interesting

    According to POPFile only 18% of my email messages are spam, but it's 46% when you take the file sizes into account. The total memory fraction would seem to be a more relevant measurement if you're an ISP concerned about spam's costs.

    So, when they say 40%, is that by number of messages or total size?

    --
    Liberal (adj.): Free from bigotry; open to progress; tolerant of others.
    1. Re:40 percent by number or by size ? by gmuslera · · Score: 1
      I use also popfile, but do a bit more classification of mail. Pure spam is around 17%, the same amount are spamcop reports, more than 60% is for several mailing lists, regular announcements and things like that, 1% virus reports (my isp do virus filtering) and 2% is the remaining mail specifically for me.

      I think mailing lists, announcements list and things like that could be a good percent of the remaining 60% of all internet email, and that is something that should be taken into account when fighting spam also (i.e. don't make pay mailing list administrators/servers with measures intended for spammers).

    2. Re:40 percent by number or by size ? by kryptkpr · · Score: 1

      Consider yourself lucky.

      Last Reset: Sun Mar 2 02:32:17 2003

      Bucket Classification Count
      cpec 9 (4.41%)
      ebay 1 (0.49%)
      mp3com 2 (0.98%)
      newsletters 2 (0.98%)
      personal 30 (14.7%)
      spam 160 (78.43%)

      --
      DJ kRYPT's Free MP3s!
    3. Re:40 percent by number or by size ? by Hoser+McMoose · · Score: 1

      It's 40% by the number of messages, and you're definitely right about spam messages being, on average, much larger than non-spam messages. At a rough guess, I'd say that by % of total size, spam would make up somewhere around 70-80% of all e-mail traffic.

      FWIW the 40% number is probably a reasonably good cross-section of ALL internet e-mail sent (it wouldn't count internal company e-mail). Presumably it takes into account all of Brightmail's customers. A lot of Brightmail's customer's are corporations blocking their company mail, which have much lower levels of spam than personal e-mail accounts. However Brightmail also has a LOT of major ISPs using their filtering software, eg MSN / Hotmail, AT&T WorldNet, Earthlink, etc. These customers see much higher percentages of spam.

    4. Re:40 percent by number or by size ? by Milican · · Score: 1

      Not too bad. By message 15.25% of my messages are spam. If we go by words then 29.35% of my messages are spam. And this is *after* USA.Net's Brightmail make a first pass at spam coming into my inbox.

      JOhn

  45. Sturgeon's Law by handy_vandal · · Score: 5, Funny

    Forty percent? That's nothing. Sturgeon's Law states that ninety percent of everything is crap.

    --
    -kgj
    1. Re:Sturgeon's Law by marktoml · · Score: 1

      Tsk..roughly 40% is spam. Another 50% of the non-spam is crap :)

    2. Re:Sturgeon's Law by spells · · Score: 1

      All that means is that 80% of my non-spam email is crap - sounds about right to me, well maybe a bit low.

    3. Re:Sturgeon's Law by Jester99 · · Score: 1

      By extension, 10% of your spam actually is valuable. :)

    4. Re:Sturgeon's Law by Anonymous Coward · · Score: 0

      what about crap?

  46. Lengthen your fingers today by nelsonal · · Score: 2, Funny

    Are you tired of not being able to play the piano or type as gracefully as you should be able to? Are your stubby fingers not as dexterious for those little jobs? You need our herbal finger lenghtener! When used over a five week period most test subjects lengthened their fingers by more than 20%.
    It's all natural and quite inexpensive compared to the productivity increase you will have with longer more graceful fingers.

    --
    Degaussing scares the bad magnetism out of the monitor and fills it with good karma.
  47. White list with pass code by Continental+Drift · · Score: 5, Informative
    My Eudora filters allow me to auto-reply to mail coming from someone not already in my address book. The auto-reply tells the writer to try again and put a code word in the subject line, which the filters will then bypass. This is very effective, and since I implemented it, I don't see spam. It is a bit of a pain for people writing to me the first time.

    Now, a white list like this can be bypassed by a spammer claiming to be a friend of mine. It can't claim to be me, because my filters automatically delete anything sent to my address claiming to come from me. I'm wondering if anyone else who has implemented a white list for themselves has seen any problems with it.

    1. Re:White list with pass code by fearlezz · · Score: 1

      99% of the spam does not have a valid return- or from-address. The spammers that use invalid addresses cannot validate the email they send. If that spam cannot reach you any more, it's 99% decrease of spam. I don't know any other solution that has such a good result.

      --
      .sig: No such file or directory
    2. Re:White list with pass code by Godeke · · Score: 1

      How have you dealt with things like newsletters and such which may not come from a identifiable e-mail address. For example, I subscribe to several notification lists that come from a domain other than that of the company that actually produces the product.

      I use a similiar solution, but I find I have to dig in the spam folder periodically to find e-mails from newsletters that changed source addresses and the like...

      --
      Sig under construction since 1998.
    3. Re:White list with pass code by q2k · · Score: 1

      I white list too - with Pocomail. Except that I don't bother with the reply code. All unapproved mail gets left on the server. Once a day or so, I look at the server, grab the one or two good mails that got caught, and CNTRL-A-Delete the rest. Takes about 20 seconds - its not a big deal.

    4. Re:White list with pass code by Continental+Drift · · Score: 1
      I'm on several mailing lists, and I either add their addresses to my address list, or I add a filter that will catch and accept them. When I take a discussion off-list, I add that person to my address book before I write to them.

      Sometimes I do dig in the spam folder for things, but only when I'm in a hurry.

      Of course, when I was job hunting, I could not afford to auto-reply to potential employeers. My filters were off then.

    5. Re:White list with pass code by CaptainStormfield · · Score: 1

      I see severeal difficulties with your setup:

      Some people may not want to communicate with you badly enough to jump through your whitelist filter. For example: if I were replying to someone's message on mailing list and I got a "whitelist confirm" message, I'd just delete it and move on.

      In other circumstances, I might bother with the whitelist, though even in these circumstances the whitelist may slow communication significantly. What happens if I send you a message right before I step out for a while, but don't get the "whitelist confirm" message before I leave?

      What happens if the person sending a message also employs a whilelist system? You send him a "whitelist confirm" message, he sends one back, and neither of you ever see confirm message. [On a related point: does anyone have a good method of automatically generating a whitelist for outgoing messages?]

      Finally, what about legitimate e-mail lists that change their "from" address? I assume that they won't re-whitelist themselves.

      Of course, if you get enough spam, these difficulties might be a small price to pay for spam free e-mail.

      --
      "The dinosaurs died because they didn't have a space program." - Niven
  48. more like 60-70% by Cheeze · · Score: 4, Interesting

    i run a small isp's mail server system (~30k accounts) and just our dnsbl blocks about 60% of all incoming e-mail. spamassassin and various other techniques pick out about 5-10% more of the overall.

    Blocking spam before it gets to our main mail server has extended the life of our mail server indefinately. The less we have to spend on hardware, the more time and energy we can spend on building quality of service for our customers. That keeps the customers happy, and keeps the business people doubly happy, since they don't lose customers and don't have to buy new hardware every year for a mail system.

    --
    Why read the article when I can just make up a snap judgement?
    1. Re:more like 60-70% by realdpk · · Score: 1

      ..and then you block much legitimate e-mail as well, from dnsbls that don't keep their database up to date. I've lost track of how long we've been in one, many many months since the spammer has left though.

    2. Re:more like 60-70% by Cheeze · · Score: 1

      i get about one complaint about blocked e-mail a week, which is not bad for delivering about 300k non-spam e-mails a day. one complaint a week about a blocked e-mail as opposed to about 20-30 complaints a day about spam with the dnsbl turned off.

      it's a no-brainer.

      if you get on a spam list, take the necessary steps to get yourself off of it. if you're on something like spamcop, you will automatically be removed from the list after a while when the spamming stops.

      even after you take the necessary steps to prevent spam, it is inevitable that your mail server will end up on "joe bob's spam list" that just so happens to be used on your mom's isp, therefore preventing your mail getting to your mom. Problems like that are inevitable, but should be easily corrected.

      it's much better to spend your time making sure you do not get on spam lists to begin with, than to spend your time dealing with your customers complaints about getting spam.

      --
      Why read the article when I can just make up a snap judgement?
    3. Re:more like 60-70% by realdpk · · Score: 1

      "if you get on a spam list, take the necessary steps to get yourself off of it."

      We have. Months and months ago. Yet we remain.

      I too equate "SPEWS" with "joe bob's spam list" - I'm glad someone else sees them the same way I do.

      "it's much better to spend your time making sure you do not get on spam lists to begin with, than to spend your time dealing with your customers complaints about getting spam."

      We get fewer complaints about spam than we do about SPEWS' irresponsible listing.

    4. Re:more like 60-70% by Anonymous Coward · · Score: 0

      Take the necessary steps to get off it?

      You are kidding right? Have you ever tried to deal with someone maintaining one of those lists? They don't post contact information, often the don't list why you are listed, etc.

      When someone tells me they didn't receive my mail I tell them to ask *their* ISP about it. It isn't the sender's fault that the recipient ISP has blocked the mail.

    5. Re:more like 60-70% by hysterik · · Score: 1

      The numbers from AOL are probably lower because their filtering methods are less superior to what you're using. They let more spam through, thus the percentage perceived is lower.

    6. Re:more like 60-70% by Cheeze · · Score: 1

      I would have to agree with the SPEWS comment. I used their list for a few weeks. It was a good list, but the steps to get your server off of that list is quite impossible. Posting to a news group is bad to begin with, but to have to post to it begging to be removed from their spam list just opens you up to fodder from the people that frequent that list. From what i gathered from my brief experience with the SPEWS list, they seem like a bunch of guys that host single domains and want the world to know about it. It would be a good system if they became more mature about it and thought up some way to give you bonus points if you actually used their list or made some better/easier way to get yourself removed from their unrealistic list. I took my mail servers off of it and havn't looked back. we are probably still listed, but no admin in their right mind would use a deny list like SPEWS if they plan on getting all of their e-mail.

      for the record, my mail server got listed because someone in a neighboring netblock sent out spam advertising their website. They didn't even send the spam from the netblock that was listed, they just advertised their website. Apparently, cancelling the customer isn't good enough for the SPEWS people to remove you from their list. SPEWS went ahead and listed a full /20 because their e-mails weren't responded to fast enough. They can list who they want on their own list, but i would not advise using that list.

      --
      Why read the article when I can just make up a snap judgement?
  49. Probably accurate by swb · · Score: 1

    I use RBLs here and we block about 35% of incoming as Spam. Given I still get a lot of spam anyway, I'm assuming 40% is probably real accurate.

  50. Interesting indeed... by gillbates · · Score: 1

    Okay, you caught me. Corporate America is our favorite scapegoat...

    But seriously, though, in the US, money is power. Since the current administration is rather business friendly (and this is NOT necessarily a bad thing - I have to eat, too...), the big corporations have a bit more lattitude to "suggest" laws than they did in previous administrations. My point was that someone with the power to change things is finally taking notice of the spam problem.

    --
    The society for a thought-free internet welcomes you.
  51. Corroboration by daves · · Score: 1

    To those who suspect the messenger, the numbers match my company's experience. The scary part is that spam traffic continues to double every six months.

    --
    People who disagree with you are not automatically evil, greedy, or stupid.
  52. I think we should be happy for spam by AssFace · · Score: 1

    it is creating jobs. it is increasing hardware sales.
    it is a revenue generating system.

    yay spam!

    seriously though, I *wish* spam was only 40% of my mail.
    I also wish I had a gold plated Bentley.
    In fact, I'll take the latter over the former any day.

    --

    There are some odd things afoot now, in the Villa Straylight.
  53. Not true by roman_mir · · Score: 2, Funny

    95% of all email is spam. The rest is my project manager sending out emails about TPS reports.

    1. Re:Not true by dentar · · Score: 1

      ...uh.. yeah.... if you could come in Saturday.. say about 9:00.. that'd be great... Oh yeah.. we'll also need you to come in on Sunday too.. yeah..

      --
      -- I am. Therefore, I think!
  54. Several Easy Solutions by $criptah · · Score: 3, Funny

    For every action there is a counter reaction, right? Fight back! You can do it passively by setting up filters (Mozilla does an excellent job in that department) or spam back the spammers. The trick is to find spam that originates from a legid address. Send an email to that address and see if it goes through. Then set up a script on every single computer on your home network (which in my case is several FreeBSD boxes) and mail random crap to spammers (a cron entry works beautifully). Believe it or not I actually got a reply from a person saying that they got the point and removed me from the list. The other guys were persistent. In order to get rid of them (they did have actual usernames in the email address) I had to go to every goddamn gay porn site and subscribe them to free porn and a newsletter. I know, some of you will say that I have a lot of free time on my hands and may be I do. But every person who gets spam does something about it, including calling a senator and pushing for laws, I think we can fight it.

    1. Re:Several Easy Solutions by 5lash · · Score: 1

      Didn't your mummy ever tell you that "two wrongs don't make a right"?

    2. Re:Several Easy Solutions by Anonymous Coward · · Score: 0

      Yes, but my 'mummy' isn't always right.

    3. Re:Several Easy Solutions by Anonymous Coward · · Score: 0

      There are a couple problems with this strategy. First, I know probably 95% of my spam comes without a legit address in the headers.. the spammers just make up something random. So most of the time, you don't have anyone to retaliate to.
      The bigger problem, however, is when spammers co-opt someone else's legit e-mail address and use it as a reply-to/from address when they send out spams. This has happened to several people I know (they find out when they get nasty e-mails back from spam recipients, or when they get dozens to hundreds of bounced e-mails they didn't send.
      In this case, retaliating with a load of spam would be worse than just ignoring it - the person you would be spamming is not the spammer himself, but another innocent victim - the spammer wouldn't even know you were trying to retaliate, and the poor guy whose e-mail was co-opted would have no control over stopping the flow of spam to you.
      Lastly - even IF the spam has a legit address that actually goes back to the spammer - they might get the picture, but they also know that they have an active address, and would sell that e-mail to other spammers.
      Any way you look at it, I don't see how spamming the spammers back accomplishes anything besides taking up even more bandwidth.

    4. Re:Several Easy Solutions by Anonymous Coward · · Score: 0

      So, what, gay porn is the worst thing in the world?

      What if they LIKED gay porn. I know *I* do.

    5. Re:Several Easy Solutions by Anonymous Coward · · Score: 0

      No. My mommy was an Objectivist who taught me to kick ass when others violated my rights.

    6. Re:Several Easy Solutions by Anonymous Coward · · Score: 0

      I dont know if everyone has a home network, but I do flood their inboxes. Got a little postfix server, my own domain name and a simply program, and viola! Just send a message stating you want e-mail address somedude@somedomain.com removed. Threaten more attacks if they dont remove you. Works nicely

  55. Legitimate Business by E-Tigger · · Score: 1

    I found it interesting that there were comments about `legitimate' business' that feel spam is ruining their message. I have never looked at email not sent to me by people I knew. Email advertising is even less effective in my opinion than flyers that are sent in the mail. Admittedly any percentage that would check out that kind of advertising is put off by spam. I find the difference between unsolicited email from `legitimate' companies compared to scams to be negligible. I didn't ask for either.

    1. Re:Legitimate Business by meringuoid · · Score: 1
      Email advertising is even less effective in my opinion than flyers that are sent in the mail.

      Spamming me is negatively effective. If I get a flyer in the mail, I'll read it and I might, if interested, buy what's advertised in it. If I get a spam, I'll read it and make damn certain I never in my life buy anything whatsoever from the spamming company - in fact if the product is something I actually want I'll go out and buy it from the spammer's chief competitor, and let both know why. Then I'll track down the ISP from which the mail was sent and the one at which the website (if any) is hosted, forward them a copy of the spam and request that they enforce their respective AUPs.

      --
      Real Daleks don't climb stairs - they level the building.
  56. yep, we're all doomed by gse · · Score: 5, Funny
    One billion spam email a day, just through AOL. Gosh.

    I figure I get about 425,000 a day myself at this point (er, give or take). It's at the point where it's getting painful to go through my SpamAssassin "caughtspam" folder. But there are still enough false positives (really, one is enough) that I can't send the whole thing to /dev/null.

    Meanwhile, I'm accruing a great collection of classic spam subject lines. Some examples (all real):

    • "I don't need your social security number yet"
    • "this mom loves to stick hot dogs up her cooch"
    • "Pill to Increase Your Ejaculation by 581%"
    • "i am not perfect but i suck c0ck"
    • "I got revenge by fucking! Here's proof :)"
    • "Mission: To fuck as many mothers as I can!"
    • "Fucking Machines! 13IN, .5HP, 350RPM"
    • "Your slut wife boss need some action!"
    • "#1 COLON CLEANSER! SEE PROOF"
    • "Maybe your pets dream of intercourse with you"
    Mmmm, society at its finest.
    --
    wordclock records :: flailing since 2000
    1. Re:yep, we're all doomed by vinton · · Score: 1

      Just wanted to share my favorite subject line I've received so far:

      "To you I'm an atheist; to God, I'm the Loyal Opposition."

      It turned out to be an add for human growth hormone pills.

  57. I'm at 80% today by Jeff+Fohl · · Score: 1
    It's only 7:30 AM here, but so far, 80% of the mail I have received today is spam. Total spam from the last six months: 67% of my mail.

    Just one man's data.

  58. on a related note by AssFace · · Score: 1

    I just reported that 100% of spam is e-mail.

    --

    There are some odd things afoot now, in the Villa Straylight.
    1. Re:on a related note by ODD97 · · Score: 1

      All SPAM is e-mail? Ok, I suppose I can believe that, but how do they make it pink?

      --
      The emperor is naked.
  59. What the article didn't say by jj_johny · · Score: 4, Interesting

    AOL does no filtering on the content only on the header information. It does nothing with the content of the email messages. It forwards every mail that is accepted by its mail servers to the users. Thats why AOL only blocks about 50% of the stuff. Even if they accepted the mail, they should be deleting or giving me the option of deleting without seeing every mail that wants to increase my unit's size or my wife's boobs and the pharmacy come ons and the Norton junk. But AOL continues to act like a single lost email is the end of the world. Well give the users some tools and let them decide. No wonder they are losing subcribers, they don't know how to deal with the number one annoyance on the internet today.

    1. Re:What the article didn't say by LookSharp · · Score: 1

      No wonder they are losing subcribers, they don't know how to deal with the number one annoyance on the internet today.

      Screaming audio-filled pop up flash ads that cover the text you're trying to read for a mandatory period of time?

    2. Re:What the article didn't say by jbolden · · Score: 1

      Nobody reads at (Score: 1) threshold anymore. Read my comments and witness my pathetic karma.

      Lots of people read at 1:

      1) longer replies filled good information

      2) reply very early on a topic (which probably means replying on places like ask.slashdot, or apple.slashdot rather than the main board

      3) Don't mention karma in your sig

  60. Excellent point, however... by tfriedlich · · Score: 1

    Look at something like telemarketers. They do not call you at work, only at home. I see something like that as being the first step for Congress. Eliminate all spams to domains designated as Corporations. I think they will first try to stop spam from actually hurting businesses and then move on to individual users. After all, the People are really just an afterthought to Government.

    1. Re:Excellent point, however... by rutledjw · · Score: 1
      Ah yes, but here's where consumer protection can come in. Telemarketers don't cost the phone company when you call, but SPAM costs ISPs. The corporate muscle may work in our favor there.

      Otherwise I agree, but we may be seeing some changes. The most recent political debacles, from Clinton to the election to Enron (and friends) is encouraging some more voter interest (I hope) and the result is items like the national no-call list and the FTC thinking about taking on SPAM. At least I assume they are, why else would they have the uce@ftc.gov?

      Granted, this may be optimistic...

      --

      Computer Science is Applied Philosophy
  61. Snail mail spam by DrFrasierCrane · · Score: 1

    Anyone have any idea how much snail mail is "spam"? Looking at my mailbox, I'd be willing to believe the 40% for e-mail spam in comparison is low. We worry about bandwidth and lost productivity when it comes to E-mail spam. Why don't we worry as much about the post office system and how much time and money gets wasted every day mailing me this unwanted stuff? Is E-mail spam costing us more than snail mail spam?

    --
    You call this a signature?
    1. Re:Snail mail spam by jakob_grimm · · Score: 1
      Is E-mail spam costing us more than snail mail spam?

      Yes, because the sender pays for snail mail spam. Not much (thanks, bulk rate), but they pay.

      --

      "No prints can come from fingers / If machines become our hands." -- Jack Johnson

  62. How much "real" mail is lost? by nlinecomputers · · Score: 1

    The problem with filters at the ISP/Mail Server is that one persons spam is anothers desired mail. How do correct for this?

    --
    Slashdot, home of supporters of free software, free music, and free speech.Except for Moderators that disagree with you.
    1. Re:How much "real" mail is lost? by dubl-u · · Score: 4, Funny

      The problem with filters at the ISP/Mail Server is that one persons spam is anothers desired mail. How do correct for this?

      Those few people can type "enlarge my penis" into Google and click on a link that comes up.

    2. Re:How much "real" mail is lost? by gl4ss · · Score: 1

      the bigger is that at some places email is considered private mail and thus can't be tampered(filtered) with automagically by default.

      --
      world was created 5 seconds before this post as it is.
  63. i dunno bout you... by No.+24601 · · Score: 1

    but i wish only 40% of all email was spam.

  64. 40%? by hafree · · Score: 1

    96-98% if the incoming mail to my primary e-mail account is spam. 40% my ass...

  65. is that by data volume or by quantity? by phrantic · · Score: 2, Interesting

    If it is by quantity (the number of mails received it is probably close to correct) but if it is by data volume (if you open the html ones at least I would say that the figure is a bit low...

    --
    --My sig is bigger than your sig--
  66. Re:Spammunition-SMTP Proxies. by Anonymous Coward · · Score: 0

    That reminds me. I'm looking for a Linux SMTP 'bayesian filter' proxy that can be remotely administrated via a web interface, that can interface with IMAP and POP3 mailboxes, and works well with any standard E-Mail client.

  67. Old fashion torch burning mob by boy_afraid · · Score: 0, Insightful

    What we need is an old fashion torch burning mob running around and storming these Kings of Spam to roast them alive. I'm sure we would have NO objections from anybody. I hate the strange hints that my penis is too small. Is it? Is there something someone is not telling me? I don't think it's too small. I think it's normal.

    WTF is up with these printer ink mail. Do they think I'm running an illegal printing shop and I need all this ink because I'm running 24x7? I should be printing fake 20 dollar bills and but more ink!

  68. I thought about it, and you know what? by Rev.LoveJoy · · Score: 1
    Corporate speech is not the same as individual speech.

    q.e.d.

    Cheers,
    -- RLJ

    1. Re:I thought about it, and you know what? by TopShelf · · Score: 1

      And what does that have to do with anything? Corporate speech and individual speech are equally protected under the First Amendment.

      --
      Stop by my site where I write about ERP systems & more
    2. Re:I thought about it, and you know what? by dubl-u · · Score: 2, Informative

      Corporate speech and individual speech are equally protected under the First Amendment.

      Wrong.

    3. Re:I thought about it, and you know what? by Wntrmute · · Score: 2, Insightful

      Truth in advertising laws.

      Restrictions on how/when/where some businesses can advertise. (Tobacco/Alcohol)

      Nike v. Kasky

      It's not as clear-cut as you make it sound.

    4. Re:I thought about it, and you know what? by Carmody · · Score: 3, Interesting

      Corporate speech and individual speech are equally protected under the First Amendment.

      Seriously, what gave you that idea? Are corporations citizens? Do you think they have the right to vote? Does the second amendment apply to them? Does a sufficiently old corporation have the right to run for president, if it was founded in this country?

      My impulse is to think that was an incredibly asinine statement, but I do not claim to be an expert on constitutional law. In fact, "mildly informed" is putting it too strongly. So educate me, back up the claim that "Corporate speech and individual speech are equally protected under the First Amendment."

      --
      God is real unless declared integer
    5. Re:I thought about it, and you know what? by Rev.LoveJoy · · Score: 1
      You are very correct, it is not as simple as I make it out to be. My post was made more to counter the original parent's straw man (that people have argued spam is OK because it's free speech).

      Interesting Nike link from Ma Jones, but it appears they are just appealing an earlier ruling from CA supremes? I found good info here.

      Cheers,
      -- RLJ

    6. Re:I thought about it, and you know what? by Khomar · · Score: 1

      Even individual speech is not entirely protected by the constitution. For example, you cannot openly talk about an assasination on the President without getting into serious legal trouble. Free speech is allowed only until it starts seriously infringing on other people's rights.

      I am not sure, however, if this would apply to the issue of e-mail, and I am really not sure how to stop the spam problem without a change in the SMTP protocol. Legislation will still require implementation which will be difficult given the way e-mail currently works. It will take a great deal of time and money to track down the source of spam and prosecute. While it may save people some headaches, it will only shift some of the monetary cost to the government (and then, of course, to use tax payers -- remember, nothing is free). The best bet will probably be a technological change.


      I believe in de-evolution. God made the world perfect, man fell, and its been going downhill ever since!

      --

      I believe in de-evolution. God made the world perfect, man fell, and its been going downhill ever since!

  69. I get a lot more than 40% by gergi · · Score: 3, Funny

    I (if you want to me, email at gergi@aol.com!) don't know why I get so much spam (gergi@aol.com if you know of a good solution to get rid of it!) I'm very friendly and social (gergi@aol.com to reach me) and I don't know why people would spam me at gergi@aol.com!

    Later,
    gergi@aol.com

    --
    Nosce te Ipsum
  70. BrightMail by NetJunkie · · Score: 3, Interesting

    We use BrightMail and are very happy with them. If anyone can give you fairly accurate stats, it is them due to how they work.

    They monitor a LOT of mail boxes...many customers plus many created mailboxes for spam. If a message hits a number of mailboxes in a short time span that message is forwarded to their NOC. A person looks at it and decides if it's spam. If so they tag it as spam before sending it to other customers that receive it.

    It works very well. We now block almost all of the spam we receive and have not had ONE single false positive.

    1. Re:BrightMail by realdpk · · Score: 1

      "not had ONE single false positive."

      How do you know? Do they send you a monthly report on what was blocked or something?

    2. Re:BrightMail by mrhandstand · · Score: 1

      Thanks for taking the time to respond...I'm glad to see a substantiated response. I merely am cautios about fact from parties with a vested interest.

      --
      Always value the individual over the system. --Bruce Lee "I don't need a Sig - I have a custom 191" - me
    3. Re:BrightMail by Burdell · · Score: 1

      When you use Brightmail to sideline spam, each user opted-in gets a
      periodic report (default is daily, how often is determined by admin)
      that lists the subject, sender, date, and size of all new sidelined
      messages. Then you can login to a website, view the messages, redirect
      them to your regular mailbox if they were false positives (and also send
      them to Brightmail for analysis so they can fix what triggered on the
      message).

    4. Re:BrightMail by NetJunkie · · Score: 1

      We still receive the spam, it is just marked as spam with a subject flag. Our AV/Content Management software, Antigen, is set up to purge all emails with that flag. I quarantine them and look through them sometimes. We especially did it the first week. No false positives.

  71. The Email Tax by Anonymous Coward · · Score: 0

    Well hey, I suppose if the supposed "email tax" ever went into effect somehow, we could that it for less spam. Unless Bill Gates one day decided he wanted to unleash his wrath on the world in the form of spam. That would probably be bad.

  72. In other news... by anthony_dipierro · · Score: 1

    40% of all ISP revenues are from spammers.

  73. Much higher percentage, probably by iiioxx · · Score: 1

    It wasn't until I setup a spam filtering mail relay for my home network using a FreeBSD server running Postfix and SpamAssassin, that it really hit home just how much spam I was getting on a daily basis. Postfix is using RBLs and header filtering criteria, and that kills a lot of the spam outright. That which passes Postfix is analyzed by SpamAssassin and flagged as spam in the subject line. My MUA filters my mail and moves flagged messages to a designated SPAM folder for review before I delete it (because I will never trust an automated process like this 100%). Now that my legitimate mail is nicely sorted from my junk mail, the percentage is staggeringly obvious. I get 4 to 5 times the amount of junk mail as legitimate mail, and that is with Postfix kicking a large portion of the inbound mail before it ever hits SpamAssassin! I don't have precise figures on how many Postfix kicks, but my mail log is flooded with Postfix reject messages. And you can add to that the fact that I firewall access to my mailserver from all of Latin America and Asia because of the high volume of spam and network attacks sourced from those regions.

    Based on my guesstimation, I'd say that 90-95% of my inbound email is spam. And given the fact that bandwidth and CPU power keep getting faster, cheaper, and more available, I can only see the spam problem getting worse.

  74. Sarxpam by Anonymous Coward · · Score: 0
    What about sarxpam? Is there any solution to the sarxpam (unsolicited and unwanted sexually-oriented E-mail) epidemic? I'm always receiving offers to enlarge certain parts of my anatomy, watch young teens perform disgusting acts, etc.etc.

    Short of changing my email address, is there any way I can stop them?

    1. Re:Sarxpam by Gunfighter · · Score: 1

      Depends. Do you own your own domain or are you an AOL/Yahoo!/MSN/Earthlink type customer?

      See this post for more info.

      --
      -- Stu

      /. ID under 2,000. I feel old now.
    2. Re:Sarxpam by Anonymous Coward · · Score: 0

      Thanks for the info!

  75. Sliding scale by phorm · · Score: 4, Informative

    I think this could almost be measured on a sliding scale based on lifetime of an account. Once a user opens a new account - unless the email address is easily guessable or his email provided sells it off - spam volume per real email will be low.
    Then, you get a few friends your email. General email volume increases. You sign up for some server or other and forget to use a protect email... spam starts to drip in.
    A little while later, the drip becomes a trickle as your email gets sold again, and again, and spreads like splitting amoebas.
    Then... a few friends send you e-cards around Christmas, or invite you to some joke sites etc. Not your really gonna get it (I strongly b*tch-out any who e-card me at my work address).

    To top it off, a LUG or whatever you are posting to puts their history on a public website... you start getting picked up by spam-spiders.

    So over time, one will go from maybe 0-5% spam, to 50+% spam. As more people get you in their address books, the more likely it is that somebody will let your email slip to a spam-source. And spam-sources sell your email to other spam-sources... it spreads like wildfire.

    The best way to protect yourself is to use a difficult-to-guess, 9+ character email, for which you never sign up for anything with, and only give to people you trust not to e-card you or have "sniffers" installed on their system which gives away the address book. Using bounce addresses might help also, as you could then switch bounces but still pull from the main email, and then filter the ones that get messy or drop them.

    1. Re:Sliding scale by dubl-u · · Score: 1

      The best way to protect yourself is to use a difficult-to-guess, 9+ character email, for which you never sign up for anything with, and only give to people you trust not to e-card you or have "sniffers" installed on their system which gives away the address book.

      And then when you've driven off 98% of your potential correspondents by doing this, you can get rid of the other 2% by bending down and unplugging the ethernet cable.

  76. Irony by siskbc · · Score: 1

    You have to have no sense of irony at all (or outrage) to actually buy a pop-up blocker from the asshole who keep spamming you. Might as well buy anti-spam software from a popup.

    --

    -Looking for a job as a materials chemist or multivariat

  77. Terrorism! by fredrikj · · Score: 4, Funny

    $10 billion, that's a lot of money, and therefore an argument that George W. Bush might listen to. So, how about lobbying the US government into declaring spam "terrorist activity"? Just imagine the concept of special troops hunting down spammers, then locking them up without without a trial and throwing away the keys. Unless you bombed them off the face of the earth directly... In either case, we could even laugh our asses off while watching it live on TV!

    1. Re:Terrorism! by Alizarin+Erythrosin · · Score: 1

      Better yet, just classify massive bombardments of spam as DDoS attacks and then we can sic the feds on them... maybe they'll let us chuck napalm at them just for fun too...

      Hey that would be a good law! "If you can track down a spammer you can set him alite (alight?)"

      --
      There are only 10 kinds of people in this world... those who understand binary and those who don't
    2. Re:Terrorism! by pjp6259 · · Score: 1

      This illustrates well a problem with all of our terrorism legislation. Terrorism is not well defined. Sure this example seems funny, but what if the government is persuaded that using kazaa is terrorism. Or in a few years running a non-DRM operating system. In any case without a clear unambigous definition of terrorism, any law with the word terrorism in it is open for abuse.

      --
      Computers don't make mistakes. What they do, they do on purpose.
  78. Accountability Void by ipmcc · · Score: 2, Insightful

    If ISPs could find some way to limit each accounts number of outgoing messages, or charge per outgoing message over, say, 500 messages a day, this would probably be much less of a problem.

    At the core of this problem is the Accountability Void, and the temptation that carries with it. When you look at the lengths that (some) ISPs and watchdogs go to block (much to libertarian chagrin) kiddie porn and other potentially offensive material, its clear that solving the spam problem is NOT about technical feasibility. If there was impetus there would be a solution. The problem is that the ISP can say "we dont send it, we dont receive it, its not our problem," the spammer can say "I send it, but I use fake accounts that get closed in 6 hours, so I don't have to take responsibility for it" and, for the most part, the receiver says "I received this, but theres really not much I can do about it." I describe this phenomenon as an "Accountability Void." No one is responsible for spam.

    Until there is an accountability structure in place, either legislative, technical, or economic, spam will go on. One of these days, AOL or some other "big enough" player is going to do something that will "change everything" like demand digital signatures, or some other method that fills the accountability void and spam will cease to be a problem.

    --
    This too shall pass.
    1. Re:Accountability Void by wilhelm · · Score: 1

      I describe this phenomenon as an "Accountability Void." No one is responsible for spam.

      Accountable, no. Responsible, yes. The spammer, regardless of what s/he says, is responsible for their own misuse of the network. They just can't be held accountable since, for the most part, they hide themselves well enough that nobody can find out who they are. The spammer knows s/he's doing something underhanded, otherwise s/he wouldn't have to use fake accounts that get closed in 6 hours.

      Accountability and responsibility are two very different animals.

      Of course, there's a big responsibility vacuum in society today, and the spammer is just a really good example of it.

    2. Re:Accountability Void by jbolden · · Score: 1

      Its not the ISPs its local cops and the FBI. The average spammer needs to collect money at some point. But having a business that uses spam to adverertise is not illegal. So business can freely use spam. OTOH any involvement in kiddie porn brings down the wrath of god.

      If spammers were having the computer's siezed, doing multiple years in high security prisons, having many law enforcement agencies treat tracking them down as a high priority, having judges willing to issue very broad warrents to catch them...
      we wouldn't have a spam problem either.

  79. The spam is hidden, not gone by phorm · · Score: 4, Insightful

    The problem is, you are still getting spam. The filter may block you from seeing most of it, and it may stop you from getting tags with linked images, etc... but it's still coming in.
    You, and your ISP, are paying for the bandwidth it uses. And if you ever had to travel and get email by dialup/cellphone... you can expect that you'll notice spam simply by the large delays it takes you to download email.

    Client-side filters only mask the problem... it's like having an air-freshener and big fan in a public washroom.... the stink is still lingering in the background.

    1. Re:The spam is hidden, not gone by jilles · · Score: 1

      The amount of bandwidth is not that large. I just did a quick check on my spam folder. The median size of a message is something like 6KB. About one third is larger than 10KB and the largest (an exception) was like 200KB. At 100 messages/user/day we are talking about 600KB. Maybe a whopping 1 MB on a bad day. In any case you won't find back that kind of bandwidth on your ISP bill. If you do, change ISP.

      For mobile users, I'd suggest using serverside filtering (e.g. Spamassasin) and IMAP (only download the headers). That should eliminate most of the performance problems

      --

      Jilles
    2. Re:The spam is hidden, not gone by phorm · · Score: 1

      Ooops. Forgot to mention, I run a small .com. Lots of spam that comes seeking entry, even if 90% of it gets ignored because the usernames are invalid.

    3. Re:The spam is hidden, not gone by nathanh · · Score: 1
      The problem is, you are still getting spam. The filter may block you from seeing most of it, and it may stop you from getting tags with linked images, etc... but it's still coming in. You, and your ISP, are paying for the bandwidth it uses.

      Shrug. The monetary cost is small. I waste more money downloading the latest games trailers off IGN than I get from spam in a month. The real cost of spam is my time. That's why I installed SpamAssassin (and I'm very happy with it).

  80. Why does spam work? by BFKrew · · Score: 1

    Just who are the people who are responding to spam?

    Years ago there was the excuse that inexperienced users thought it novel, but surely not now....

    The only way it can work is for people to respond to the mails..

    1. Re:Why does spam work? by forkboy · · Score: 3, Funny

      Just who are the people who are responding to spam?

      -Men with small penises who are insecure about them

      -Someone who wants a diploma but is too dumb to go to college

      -Someone gullible enough to think that they can buy pure human growth hormone for 29.95 a bottle.

      -A person who really doesn't know how to find a teenage beastiality plump asian tranny webcam on their own with a search engine

      -Someone who wants to "make money fast" and has never been burned by a scam before. (Or is too dumb to see that this is one)

      Should I go on?

      Think about how many complete fucking morons you run into every single day, now understand that about 75% of them have email addresses and receive spam. Out of 10 million spams, all it takes is a few gullible fools to give a return on investment.

      People sometimes ask my why I rag on stupid people so much. It's because their ignorance causes me inconvenience in many forms...spam is one of those forms. (others include needing ID to buy liquor, pot being illegal, and car insurance in denver being so fucking high)

      --
      This message brought to you by the Council of People Who Are Sick of Seeing More People.
  81. 90% of what comes through spamgourmet gets eaten by jqh1 · · Score: 1

    One stat that's held fairly constant during the 2.5 years that spamgourmet has been running is that 90% of email messages to spamgourmet addresses are blocked (actually ignored) as unwanted email.

    A little background is in order -- spamgourmet users invent disposable email addresses at their whims, and by default each is valid for a particular number of messages (they can be "refilled" or made permanent for certain senders if the user takes action). Therefore, it can be said that, understanding the way this works, the users have declared that they actually want 10% of the email that comes to those addresses.

    Granted, the users are engaing in "high risk" behavior because they know they are protected -- that is, disposable addresses fall into the hands of people who are likely to try to abuse them at a higher rate than normal addresses do. Still, for this sort of activity (signing up for things on the web, public postings, etc.) it seems safe to say that 90% of the resulting email is unwanted.

    As a spamgourmet developer, I forward my "eaten" mail to a yahoo account. In the two + years I've been doing this, there have been only two false positive messages -- I can truly say I'm glad I didn't get the rest, because I saw them. My personal ratio is 77%, and this includes a great number of delivered test messages that didn't result in spammage later.

    This may be a more expansive definition of spam than what is popular, but it works for me...

    --
    who's moderating the meta-moderators?
  82. Charging per transaction would help. by Gorbie · · Score: 1

    If there were a system that charged people for each time a mail left their organization's server for another organization's server, this would just about kill spam. It is used because it is free. Make it cost money and the problem is solved.

    How could this money be put to use? Better internet services, perhaps to offset ISP costs, etc..

    This type of change would be very difficult to implement, and is perhaps not ideal. It is an option to not only keep spammers from bouncing e-mails around, but it will also REALLY make people with open relay recognize that it is a "bad thing" and shut it down. Nothing like getting a big old bill for a bunch of e-mail someone bounced off of your server to make you think about investing a small amount to fix the issue. People might take their internet services more seriously, and the IT industry might even see a bit of a boost fromk the needs of people to get compliant and out of trouble.

    Just an idea...

  83. Yahoo's spam filter by blinder · · Score: 1

    My primary email addy is yahoo, and while I do appreciate some of their efforts in blocking spam (and adding that XFiltered-bulk header) what pisses me off... is that they filter out my Homing Beacon newsletter from Starwars.com!!!

    Eeegads! Thats probably the most valuable piece of email I get!

    1. Re:Yahoo's spam filter by Monsieur_F · · Score: 1

      That happened to me with one newsletter I subscribed to. There is a link in the mail which you can click which is named "this is not spam", and in the future the newsletters from this address will go into your main folder, not in bulk mail.

      --
      McCartney fans pay bus tickets. [...] Lennon fans too, with discretion.
    2. Re:Yahoo's spam filter by Anonymous Coward · · Score: 0

      Sometimes it works, sometimes it doesn't. I have a Yahoo account which the only mail that I have going to it is from the Newslinx sources. On any given day, the newsletter will be marked as junk. I go in and say "This is not junk", and for a day or two it then goes to the main mailbox. Then it starts getting tagged as junk again.

  84. Just... by Anonymous Coward · · Score: 0

    Choose:

    1- Create New Law

    2- Let ISPs recoup some investment using new ideas?

    Seems like instead of using profitable ideas, we shield ourselves with new laws. Why does this feel wrong?

  85. Re:Take this with a grain of salt - not by HermanZA · · Score: 1

    Spam varies a lot from domain to domain. One of my mail servers gets 90% spam, the other gets about 40% spam. So, 40% and rising is probably correct for the average.

  86. on average by Anonymous Coward · · Score: 0

    If you don't post your email, 0% is spam. If you classify all mail as spam then 100% is spam. Your a dumb ass.

  87. The Multiple Approach by TheIronDuke · · Score: 1

    Don't focus on a single approach to spam elimination. 1) filter your mail 2) secure your MTAs 3) boycott businesses that us spam for marketing 4) block unsecured MTAs 5) spam the spammers and companies that use them. Dealing with counter-spam alone would make it too expensive to use spam as a marketing tool.

  88. What are you guys doing wrong? by chill182 · · Score: 1

    I get maybe 2-3 junk mail messages a day to my real account and those are to the guy that previously had my domain name. I simply use a fake email to fill out forms on websites. If a valid email is required I have a hotmail account used only for that purpose.

    Spam is not the unstoppable killing machine sent from the future to destroy mankinds' last hope of survival that you think it is.

  89. Friends don't let Friends use AOL by FecklessGorgon · · Score: 1

    Sure, spam is an objective, universal evil. But kee-rist, why pay $29.95 a month to access a walled garden of content with bad spam filters? I mean really. WTF?

  90. I don't belive this by Coke+in+a+Can · · Score: 1

    According the Postini service my ISP provides, it's currently 66%, which makes a lot more sense. FYI, this is a very good filter. All false positives I've gotten were mailing lists, and there was only one spam message that got through.

    URL for their statistics: http://www.postini.com/stats/index.html

  91. wow, what a job by LifesABeach · · Score: 0



    so a, is a.o.l. hiring in the southern california area?

  92. Corporate speech is individual speech by Anonymous Coward · · Score: 0

    "Corporate speech is not the same as individual speech."

    It is all the SAME, since all corporate speech by necessity is produced by individuals.

    What is your angle? Typically, this is pointed up by those who want to censor certain types of speech because they do not like the content or who is saying it.

    The Constitution does not work that way. There is no Asterisk after the first amendment that says "free speech does not apply if you are a member of certain organizations".

  93. AOL Good? by Fammy2000 · · Score: 1

    Wow. Nice to see AOL do something semi-useful. Now only if the U.S. Postal Service would block 40% of AOL CD's...

    Excuse me while I look into this "Free Vacation!!!" I just received from "Stella".

    --
    If I had something intelligent to say, I would have said it.
  94. War on Spam! by TheRaven64 · · Score: 1
    3."Find the people that send spam and destroy them."

    1. Make spam illegal.
    2. Persecute, sorry Prosecute local spammers and do somethnig humane to them (such a use an anesthetic when you cut off their hands).
    3. Find all countries still harboring spammers.
    4. Issue trade sanctions against them.
    5. If this doesn't work, invade them, find the spammers and burn their houses down.
    6. ...
    7. Profit!!!
    Okay, it's extreme but it might just work...


    -1 flamebait.

    --
    I am TheRaven on Soylent News
  95. It's not just quantity but SIZE by magarity · · Score: 2, Informative

    Spam is not just a problem of numbers of emails, but also how big the darn things are. My filter's stats so far for this month reveal that while spam is barely over half of the quantity of mail I get but is over FOUR TIMES the size of real email:

    Total Volume Sent on as Clean Mail: 211 (342.3KB ) 44.8%
    Total Spam Messages: 260 (1.4MB ) 55.2%

    This is the most important evil of the spam flood; not only do I not want it but it's huge!

  96. Since email became "main-stream" by Anonymous Coward · · Score: 0

    AOL HAS to be one of the biggest reasons USPS is still alive today. Generally, people don't send letters anymore... people are stopping sending cards too... now they send an E-card... cheeper and just as thoughtful

  97. Re:Several Easy Solutions-And baby makes three. by Anonymous Coward · · Score: 0

    " Didn't your mummy ever tell you that "two wrongs don't make a right"?"

    No, they make a little wong.

  98. For what it's worth by Anonymous Coward · · Score: 0

    I am an AOL bring-your-own-connection subscriber, and I've been on AOL for years, and yes, I read slashdot. For a while it was the only ISP that I could reliably use, and I've been too lazy until recently to change, and I'm still on there, bringing my own connection, until I wean myself off of that.

    Six months ago, I was getting 40-50 spams a day. Today, I'll get 10-15. Not great, but a solid improvement. I report every spam I get via the button they provide, and hey, at least it seems to be working a bit. It might not be the best system in place (ok, no might about it), but it is working.

  99. The Spam Solution: Re-Costshifting by Dion · · Score: 2, Informative

    The base problem with spam is that it shifts the cost to the victim, the only technical solution is to shift that cost back to the sender so all (or most) costs are transfered to the sender of the mail rather than letting the receiver bear the cost of storage

    An exelent proposal is IM2000.

    --
    -- To dream a dream is grand, but to live it is divine. -- Leto ][
    1. Re:The Spam Solution: Re-Costshifting by winnetou · · Score: 1
      An exelent (sic) proposal is IM2000

      I don't think IM2000 can do anything against spam like "please this link", since reading IM2000 mail basically is the same as clicking on a link.

  100. What am I missing by Laroue · · Score: 2, Interesting

    It seems to me that stopping spam wouldn't be that difficult. Spam seems to be catogorized like this.

    Type 1- Legitimate headers. No problem you've got someone to harass to remove you from the list. You can look up the domain name contact the admin and generally make their lives difficult. And if all else fails simply block everything from that domain.
    Type 2- Forged headers, can't even send a bounce message back no real options for tracing short of contacting the isp in charge of the ip address.

    Type 1 doesn't seem to be a problem. Type 2 is where most of my spam seems to come from. It seems that the simple solution would be when
    sendmail/qmail whatever is receiving the message and gets the reply-to address it should pause and see if it exists. If it doesn't just leave the connection open and if they are bulk spamming
    the server it's coming through will quickly have issues when it has 20,000 hanging connections. When a user pops/imaps to check their mail have the pop server see if the reply-to exists, if they don't dump it to dev null. It would seem that this would keep emails trackable. For it to get to the user the user would have the ability to get back to a person.

    So my question becomes, what's the hole in this kind of answer? It seems simple enough. Am i missing something?

    And yes i know my spelling is horible...

    --
    #### ## Laroue ####
    1. Re:What am I missing by Carmody · · Score: 1

      When a user pops/imaps to check their mail have the pop server see if the reply-to exists, if they don't dump it to dev null. It would seem that this would keep emails trackable. For it to get to the user the user would have the ability to get back to a person.

      Here is the hole:

      People forge "reply-to" headers. I know this from experience. Some spammer put my vanity domain name on the reply-to (or equivalent) header, and I wound up getting hundreds of bounced "no such address" emails. I was lucky that nobody tried to mailbomb me.

      I was lucky in that after a month the problem went away.

      --
      God is real unless declared integer
  101. Only for AOL? by www.sorehands.com · · Score: 4, Insightful

    The article stated the figure came from Brightmail not AOL.

    If it was AOL or Verizon, then I would think that the numbers would be skewed as they have sued spammers and those spammers have agreed not to send spam on those networks.

    Grasshopper, remember the two rules of spammers.

    1. Spammers lie.

    2. If a spammer says anything, see rule 1.

    1. Re:Only for AOL? by Anonymous Coward · · Score: 0

      You forgot the third rule applying to spammers (you might have to retake the test for your lumber cartel union card again):


      3. Spammers are stupid.

      Sincerely,
      Evariste Galois
      Lumber Cartel #2718

    2. Re:Only for AOL? by Carnivorous+Carrot · · Score: 1

      > You forgot the third rule
      >
      > 3. Spammers are stupid.

      You forgot the first rule of the Ferenghi Rules of Spamming:

      1. The general population is stupider.

      --
      "Has [being a kidnapped teenage girl, raped repeatedly for months] changed you?" - Katie Couric to Elizabeth Smart
  102. SMTP not Email by jbolden · · Score: 1

    Email as in the idea of individual messages sent to individual accounts on particular IP addresses is still quite useful. The problem isn't email but the particular method used to transport email SMTP.

    I think the technological solution to the email problem is to move away from SMTP towards a much more spam proof system. The core problem of spam is that the sender can fake the origin. Simply create a proticol where that isn't possible (for example all email is encrypted and to decrypt it requires knowing the senders actual public key).

  103. 40 Percent? by Mossfoot · · Score: 1

    Spam... aparantly it IS what's for dinner... and lunch... and breakfast...

    --
    Fuzzy Knights: New RPG Strips Tuesday and Friday!:
    http://www.fuzzyknights.com
  104. There's really a workable solution to spam... by TelevisioSledgicus · · Score: 2, Interesting

    ...at least as far as 90% of end users are concerned.

    On my Cingular phone, I have the capability of setting up a simple "Reject if not in list" filter, this weeds out anyone I don't know and anyone I don't want calling me on my cellphone.

    On my mail filter I have whitelisting, if you're not on the whitelist, I don't see your e-mails ever. No need to holistic filtering techniques, RBL's, or anything else... if you're not pre-approved to contact me you eat a bounced e-mail.

    Now that simple filtering method should cover all end-users, home accounts, and the like. The only accounts that should now be able to receive spam are your group and management accounts. root@, webmaster@, sales@, etc.. cannot readily be blocked this way unless you're looking to minimize your customer and user base (which would be fine on some days... :) but isn't feasible in the real world.

    However, that is one place legislation can take care of business.... Any UBE\SPAM\Junk to management addresses should be punishable by large fines, perhaps some caning, beatings, etc.. as your local human rights limits allow =)

    And for those that want to receive spam there is always the opt-in by not using whitelisting.

    Your personal whitelist will just be something else you can carry with you like your checkbook or USB drive/smart card...go into an internet cafe, stick in your USB dongle, check your e-mail. Web based e-mail could keep your whitelists in their database, but I see this as a security hole since yahoo or whomever could add themselves to your whitelist as they want.

    1. Re:There's really a workable solution to spam... by Fritz+Benwalla · · Score: 2, Insightful

      Maybe I'm not getting this. I don't know what you do for a living, but let's say you're a web designer.

      I get your name from Bob, a former client, and I want you to design my web site. I send you e-mail to that effect and you never see it because I'm not on the white list? If that's the case it would be unworkable for 90% of business e-mail, since most of what you're trying to do is make contact with prospects you've never met before.

      Sorry if I misunderstood, but it seems as though for business e-mail accounts I'd spend more time manageing my white list that deleting spam.

      -----

      --

      Believe me, I'm as surprised by my comment as you are.
    2. Re:There's really a workable solution to spam... by TelevisioSledgicus · · Score: 1

      I guess perhaps I wasn't as clear as I could have been.

      When you get my name from Bob, and you want to do business with me, you would contact my business through one of the legislatively protected e-mail accounts, for example sales@somecorp.com. You might mention in the contact e-mail that Bob recommended SomeCorp because TelevisioSledgicus did an amazing job on his web page, and perhaps I would would get back to you directly, depending on current project load, or I may hand you off to a colleague because Bob was a pain in the rear customer.

      I'm not sure if you've spent any serious time in sales, but a good portion of your job IS managing contacts, your client list, to which adding whitelist is nothing...I'm sure any enterprise CRM products would very quickly support seamlessly managing of the whitelist of customers in addition to everything else, etc... in fact one of our current Domino projects is adding this very feature and tying it to the OverQuota CRM package.

      The full details of what the "protected" e-mail addresses are would have to be ironed out of course, but as I mentioned things like root, sales, abuse, webmaster, etc.... would be protected from spam by large severe fines.

      And, I am a SA, so I get to deal with whitelists and spam, and spam complaints very regularly on the job.

      At home I don't have a spam problem.

  105. Re:Spam is like TV advertising by magarity · · Score: 4, Informative

    Umm, televison advertisements subsidize television programming. Junk mail subsidizes postage. Newspaper ads, radios ads, magazine ads, etc, etc do the same for their respective mediums. How does spam help pay for my internet connection? ABSOLUTELY NOT AT ALL. All it does is increase my ISP's costs on behalf of a freeloading spammer.

  106. Popfile shows that 71% of my email is SPAM by Rushmore · · Score: 1

    Well, using Popfile, it shows what percentage is SPAM and what percentage is good email. So far this year out of 3459 emails, 71% is spam and the remaining 29% is good email. I hate spam as much as the next guy but with Popfile, I never see it. I use it at work and at home.

  107. 40% is an understatement by Burdell · · Score: 5, Informative
    I just installed an upgraded spam filter server at the ISP I work for, and we are now filtering out almost 70% of inbound mail as spam (with basically zero false positive complaints). We combine Brightmail with the three main MAPS lists (RBL, DUL, and RSS), as well as the basic DNS based checks (for valid domains, etc.) built into the mail server, with Brightmail catching the most by far.

    You can see our mail stats here.

  108. Compare it to the real world: by Fritz+Benwalla · · Score: 3, Insightful

    About 18 percent of the traffic carried by the US Postal Service is bulk mailing, but USPS studies say that postal employees spend 25 percent of their time sorting it. All a waste? Keep in mind that the DMA asserts the $50 billion was raised as a result of bulk mailings by charities.

    I'd be interested in knowing what the total load on our economy is from the two forms, inluding manpower, network load, inconvenience etc. My suspicion is that the hyperventilation over spams growth is driving up the percieved cost, especially when you consider the cheapness of bandwidth, and that spam control is an automation battle leaving the real expensive resource, humans, to design the filters and clean up what they miss.

    "The spammers are evil folks," Evil? Like Hitler evil?

    Opportunists, yes. Using mildly unethical means to further themselves in business venture, often. But I wonder how many people who are apoplectic about the "evilness" of spammers cheat on their wives, cheat on their taxes, park in handicapped zones, etc. . .All no more evil than faking a return address, and certainly no less.

    -----

    --

    Believe me, I'm as surprised by my comment as you are.
    1. Re:Compare it to the real world: by jbolden · · Score: 1

      About 18 percent of the traffic carried by the US Postal Service is bulk mailing, but USPS studies say that postal employees spend 25 percent of their time sorting it. All a waste?

      I'm not sure I like tha analogy with spam here, because bulk mailers unlike spammers pay a pretty high per piece charge. They can't survive nearly the same low rates that spammers can survive on.

      Anyone the reason for the above is that most commercial mail is sent to a presort house prior to being given to the postoffice. The sorting work is still being done just another agency is doing it.

  109. Re:A.C. Control by mnemotronic · · Score: 1
    What's needed is accountability. Give someone internet or smtp access? Make sure you have a way of billing them for any spam they send, and put it in big letters when they sign up
    I'd like the see the same rule applied to people posting as Anon.Coward, or even Noel.Coward.
    --
    The Russians have won. They have made the world a cesspool of distrust, greed, fear and hate.
  110. Too many problems by siskbc · · Score: 1
    The most popular free mail clients could start including hash-cash postage with each sent message, and then in a couple of years' time start to drop incoming messages that don't have postage paid.

    By that point the damage is done to the ISP, and besides, your email client doesn't communicate with the spammer - your ISP's SMTP server does. The site you cite (ha!) mentions this. So you have to do it at the server level.

    There is one problem tho - Unless I'm missing something, the way it works is a possible "sender" requests to send an email. The server then sends him a hash problem. But, then they BOTH have to generate the answer (because the server has to have something to compare to). So, the server has just as much work load as the sender.

    For spam, that's OK - it has the end result of stopping spam IF this plan becomes MANDATORY. However, if it's backward-compatible, it will take spammers a while to catch on, at which point some poor ISP doesn't have the processing power to do all the computations, and they quit doing the hash. So it almost has to be mandatory, to ensure that everyone takes the hit equally.

    Now, this has a further problem. Even if it stops spam completely, can you say DDoS? All I have to do is write a virus or whatever that keeps emailing a target server from wherever. In fact, it might not even have to be distributed - what if I keep requesting to send an email, but never calculate the hash? Does the server calculte the "answer" before I submit it? If so, I can crash a big mail server with my desktop. If not, I'll distribute it, same effect.

    I think this is a great idea, but it will need a lot of work before it becomes effective. If I can figure out how to exploit it in 2 minutes (and I ain't an 3!33t h4x0r, either), it will be quickly rendered ineffective.

    --

    -Looking for a job as a materials chemist or multivariat

    1. Re:Too many problems by Ed+Avis · · Score: 2, Interesting

      I wasn't thinking of the cost to the SMTP server but of the human cost of spam - wasted time in deleting it and the fact that people are turned off email altogether because of it. This, IMHO, is a much more serious problem than wasted bandwidth.

      Also, note that if payment for messages (whether real cash or hash cash) becomes widely adopted, spam will stop because there won't be any money in it any longer. So the problem of costs to the ISP is also dealt with.

      Of course it is possible for ISPs to configure their mail servers to check hash postage on each message and drop them if it's not valid. This would save the storage costs of spam. And if a particular other host always sends messages with bad postage you could stop accepting connections from that host. But all this is optional: I feel a postage system has the best chance of getting started if it is adopted from the bottom up by mail user agents rather than ISPs' mail servers. Both is better though.

      I don't think that hash cash works by having a problem sent from the recipient to the sender which the sender must then generate the answer to. Rather, you have a one-way function where it is hard to generate the answer but easy to check that the answer is correct. The 'problem' includes the recipient's email address and the message content - so you cannot reuse the same postage for two messages.

      The recipient just has to look at the message body, the To: header and the postage, and verify that the postage is a correct answer (which can be done quickly).

      --
      -- Ed Avis ed@membled.com
  111. 40% of Slashdot is Spam by Jrod5000+at+RPI · · Score: 1

    40% of /. is spam... if you don't believe me, recall all the dup articles.
    but at least we know Taco doesn't need a peen enlarger; the current poll even mentions Taco's 10 foot pole!

  112. 40%?? by diggem · · Score: 1

    Either my ISP (charter cable) is doing an awesome job of spam elimination, or I'm wise enough to keep a hotmail spam account which I NEVER read (except to confirm web accounts) I actually have three email accounts in general. I have one I give out to almost nobody, it's used mostly by friends and family. A second that's used by sites I trust, any email sent there is strictly opt-in and I've been lucky (or choosy) with who I give that email to. Then I keep a hotmail account which I'll give to just about anybody. d1663m@hotmail.com as a matter of fact.. :) Hoo boy I can see the spam influx now! Otherwise I hardly ever see any true spam.

    However at work I was unfortunate enough to be mail-list-logged to a website which didn't protect my work email. So now I get SOME spam at work, but it's still not near 40%, unless you count vendor email. :P Some of our vendors are downright spammy..

  113. The Nat. Do-Not Call Registry will increase spam by Anonymous Coward · · Score: 0

    Think about it. Telemarketing is more costly than sending out bulk spam, and now that we are going to reduce the number of people which telemarketers can reach, they'll turn to an equally obnoxious AND cheaper solution: spam.

    I suspect that after the next 8 weeks when the system phases in, we'll see more than a quadrupling of spam in our inboxes.

  114. It is anti-semitic alright by Anonymous Coward · · Score: 0

    Those who want to exterminate the Israelis are anti-semitic, for sure. All that "propping up" of Israel does is see that its neighbors do not invade and exterminate its people (the typical reason for this given is because they are Jewish).

    And yes, anti-zionist is typically anti-semetic. It's just a code-word these days.

  115. Re: Valid return address by Continental+Drift · · Score: 1
    99% of the spam does not have a valid return- or from-address.

    This has already been countered by using a valid return address of any poor sap. I can easily imagine having a list of thousands of addresses, and sending spam to one address with a from field of the previous address. Thus, address 3235 gets spam from address 3234. That would prevent one victim's address from getting black listed, and would keep the spammers effective.

    My white list protects against this, because it auto-replies to all mail with a from field that is not known by my address book. I'm expecting that some spammer will send me spam with a victim's address, they will get my auto-reply, and they will be annoyed at me for sending them such spam.

    BTW, if someone auto-replies to my auto-reply, my filters are smart enough to trash it, not reply to it.

  116. A 3 Point Program to Eliminate Spam Completely by TechnoGrl · · Score: 1

    1. Make ISPs themselves *legally* accountable for spam with stiff penalities for spam floods.

    If an ISP hasn't applied the appropriate patches to it's software or is maintaining an open mail relay (or letting one of it's users maintain such) then it should be fined - heavily. Great incentive for keeping on the ball or *else*

    2. Require *legally* (with stiff penalities yadda yadda) that *all* SMTP server and relay software be required to monitor the number of messages per unit time sent out from each connection or user as appropriate. Require that such monitoring software break the connection after a certain threashold is reached and block the connection/user thereafter. Provision would be made for an exception list to be manually edited for those clients that have a legitimate need.

    3. Maintain a publicaly accessible national list of known (ie. caught) spammers to be blacklisted from *all* U.S. ISPs for a set period of time. Make this a legal requirement for all U.S. ISPs

    --
    ----- In Your Cubicle No One Can Hear You Scream...
    1. Re:A 3 Point Program to Eliminate Spam Completely by Cheeze · · Score: 2, Informative

      1. what happens with Mr. DumbGuy sets up a proxy on his dialup account, and then doesn't take the necessary steps to secure it? That would technically not be the ISP's mail server, but much more spam comes from these types of instances that large mail servers being used for outgoing spam.

      2. if you "legally" require software to contain certain settings, and that software is open source, it would be pretty easy to get around any settings that are "legally" put in place. This is called tarpitting, and is already used on many mail servers, but there is no reason to make it a law.

      3. what happens when yahoo.com or aol.com get on that list. What, you think all spam comes from an end user?

      Your 3 point program has lots of holes. One of the biggest holes is the fact that most of the spam comes from sources outside the US. Brazil, Japan, Taiwan, Singapore, Russia ,etc all send more spam than open proxies in the US. Your 3 point program would not address anything outside the US. When you have laws that force their ideas upon a part of the internet, all of the stuff you were trying to get rid of in the first place will just move outside of the US's jurisdiction.

      --
      Why read the article when I can just make up a snap judgement?
    2. Re:A 3 Point Program to Eliminate Spam Completely by Anonymous Coward · · Score: 0

      In Soviet Russia...

      Ass sucks your theories.

    3. Re:A 3 Point Program to Eliminate Spam Completely by TechnoGrl · · Score: 1

      >1. what happens with Mr. DumbGuy sets up a proxy >on his dialup account, and then doesn't take the >necessary steps to secure it?

      Such mail has to be relayed through a larger ISP's SMTP server. Since we've already required that such servers and relays monitor and stop mass mailings then the problem takes care of itself.

      >2. if you "legally" require software to contain >certain settings, and that software is open >source, it would be pretty easy to get around >any settings that are "legally" put in place.

      No, you miss the point. The software installed at the ISP end is legally required to monitor and disconnect mass mailings - not the client.

      >3. what happens when yahoo.com or aol.com get on >that list.

      Exactly my point. Such large ISPs are a large part of the problem. Prevent them from relaying message floods

      >One of the biggest holes is the fact that most >of the spam comes from sources outside the US. >Brazil, Japan, Taiwan, Singapore, Russia ,etc >all send more spam than open proxies in the US

      But at some point it has to be relayed through a US SMTP server. Stop the relaying of message floods from unique users when it encounters teh first US relay. It's that simple. Make it a legal requirement for SMTP server software used in the US

      --
      ----- In Your Cubicle No One Can Hear You Scream...
  117. No, we do not all agree. by fmaxwell · · Score: 2, Interesting

    We all agree that legislating Spam out of existance isn't going to work, due to the international design of the Internet.

    No, we do not all agree. The majority of spam is "in-country" spam. That is to say that the sender is in the same country as the recipient. Some scammer trying to tell you about his "fantastic" multi-level marketing scheme is probably located in your country. Make the advertiser responsible for the mail and don't worry about whether he sent it through an open relay in Korea or paid someone in Brazil to blast it out.

    Legislating child pornography out of existence hasn't worked either, but would you argue in favor of repealing existing laws? Would you argue against passing new laws that crack down on child pornographers?

    A technical means to thwart spam is like the lock on your car door: You would not want car theft to be legal if the thief defeated the lock, so why do you want spam to be legal if the spammer defeats your anti-spam measures? We need to approach this problem from both a technical and a legislative means.

    1. Re:No, we do not all agree. by nsayer · · Score: 1
      The majority of spam is "in-country" spam.

      That may be true, but about 40% of the spam I get is in Asian character sets. And that's enough spam to still be annoying even if all of the spam in English went away.

    2. Re:No, we do not all agree. by fmaxwell · · Score: 1

      That may be true, but about 40% of the spam I get is in Asian character sets. And that's enough spam to still be annoying even if all of the spam in English went away.

      Serves you right for giving your real e-mail address to hotasianchicks.com.

      But seriously, I'd rather have legislation that would get rid of a large percentage of the spam even if it could not get rid of all of it.

    3. Re:No, we do not all agree. by goon+america · · Score: 1

      While most spam is from US-based entities, these people may be able to take advantage of servers outside the US.

    4. Re:No, we do not all agree. by fmaxwell · · Score: 1

      While most spam is from US-based entities, these people may be able to take advantage of servers outside the US.

      I get a spam.
      It comes from an open relay in Korea.
      It advertises a toll-free telephone number.
      I get a subpeona to find out who owns the number.
      I sue them.

      Or perhaps, the headers reveal that the message originated in the U.S. even though the server was in Korea.

      Make the advertiser responsible and that addresses the problem of overseas servers.

  118. Nigeria will help! by ShortSpecialBus · · Score: 1

    As for overseas sites, maybe thats where we need treaties and insentives for foriegn governments to crack down on said open relays (I know it will never happen)

    Actually, I'm sure the Nigerian government will be glad to help out, seeing as they are losing all these taxes when the money gets smuggled out of the country.

    --
    //FIXME: Bad .sig
  119. Most civilized nations jail their criminals by Anonymous Coward · · Score: 0
    Perhaps Mr. Krim, might want consider the following regarding this paragraph.

    "Many spammers have become so adept at masking their tracks that they are rarely found. They are so technologically sophisticated that they adjust their systems on the fly to counter special filters and other barriers thrown up against them. They can even electronically commandeer unprotected computers, turning them into spam-launching weapons of mass production."

    According to the folks at SpamHaus, spammers are not only identifiable, they are typically part of well known spam gangs whose numbers seem not all that large. Responsible ISPs boot such individuals from their services. It is enlightening to see which ISPs are not so responsive.

    As to point two. In order to combat those who "Joe Job" or use relay servers to spam, we really do need to apply existing law or adopt new laws to address this type of behavior. Spammers who highjack servers should face serious legal consequences. When spammers choose these types of methods to spam, what they are really doing is simply stealing. Our response to such behavior should be to invoke the normal consequences associated with theft.

    Because of the current economic climate, state coffers are down around the country. Savvy lawmakers should begin looking in their own inimitable ways (read: fines levied), how their own states can "make millions from bulk email".

  120. Heh by Alari · · Score: 0

    I've had an e-mail account pretty much since I got online to begin with, and at this point I get over 10 megs of e-mail a month on it, ALL spam.

    --
    I use Windows... like a two dollar wh.. why don't I just go ahead and not finish that sentence.
  121. not ambiguous at all by cascadingstylesheet · · Score: 1

    I don't want to quibble about the specific number, but how do they decide what is spam? Much of the decision is somewhat ambiguous.

    No it isn't. You know spam when you see it. It's unsolicited commercial email. If you are trying to sell me something, or trying to get me to go increase page views on your website, and I didn't *explicitly agree* to receive such communication, it is spam. Very simple.

    Generally, the only people who ask this are involved in spamming, and either don't feel right about it or are trying to muddy the waters. But I'll assume that you are genuinely curious :)

  122. Why 40% does not seem unrealistic. by DaemonSD · · Score: 3, Insightful

    A lot of people here are saying that more than 40% of their email is spam and that the figure quoted is somehow wrong. A lot of people here also fail to take into consideration that the 40% figure is very likely an approximation or an average and is not valid for every single user on the internet. Being computer literate, having a website, posting on different websites and other internet activities contribute to more spam because of email harvesting. Sure, you and I get more spam than the average Joe, my spam is more like 80% of all emails received, but do not forget about all the people that are on AOL and have only given their email to their family relatives. Granted, they will receive some spam too, but surely not as much as the rest of us.

    --
    -- Daemon@Slashdot
    1. Re:Why 40% does not seem unrealistic. by Anonymous Coward · · Score: 0

      true true
      over a break of rougly 10 days, I have received around 650+ emails
      of which 94% were spam.

      I get around 30-50 emails a day (counting from leaving the office to starting a new day, which excludes spam received during the day), I would have to say around 25-40 of them were spam.

  123. Re:Spam is like TV advertising by dubl-u · · Score: 1

    practically 20 minutes out of each hour during prime time TV is dedicated to commercials.

    I should point out that the ads pay for the programming, so there's some quid pro quo.

    We cannot escape spam. We can delete it, and not look at it, in a similar way that we sometimes ignore TV ads by changing the channel. However, spam is here to stay.

    I could say the same thing about, say, theft. Or drunk driving. Both of those are here to stay. But we have laws against those most people recognize it as wrong, and people go to jail for them. Spam can be the same.

  124. Hackers are the answer by diablobynight · · Score: 1

    I think that slashdot should start a list that we forward all of our spam to, and hackers around the world can use it to back track the spam to its original server. Than we do as much nasty stuff as we can to it. I realise it's hard to find the original source of an email, but if you have access to the mail server that the mail came into, it's not impossible. We should hack these servers, and take them down. Even if their innocent open relays, they will pay for being that stupid.

    --
    Anonymous Cowards - Oh God, How I hate you
  125. ... solves everything ... by Anonymous Coward · · Score: 0

    spamd

  126. SPAM Report by koolB · · Score: 0
    Removing most of your spam is incredibly easy with sendmail. Just add the follwoing lines to your sendmail.mc file:


    FEATURE(dnsbl, blackholes.mail-abuse.org)
    FEATURE(dnsbl, spews.relays.osirusoft.com)
    FEATURE(dnsbl, relays.osirusoft.com)
    FEATURE(dnsbl, bl.spamcop.net)
    FEATURE(dnsbl, or.orbl.org)
    FEATURE(dnsbl, list.dsbl.org)
    FEATURE(dnsbl, relays.ordb.org)



    I wrote a very simple perl script to generate a report based on the number of spams I get...

    Feb 9 thru 28: 5271 spam emails of 10150 total emails detected and rejected

    5136 detected by bl.spamcop.net
    45 detected by orbs.dorkslayers.com
    86 detected by relays.ordb.org
    3 detected by relays.osirusoft.com
    1 detected by spews.relays.osirusoft.com

    Mar 1 thru 13: 4392 spam emails of 6614 total emails detected and rejected

    1552 detected by bl.spamcop.net
    178 detected by list.dsbl.org
    14 detected by relays.ordb.org
    1709 detected by relays.osirusoft.com
    939 detected by spews.relays.osirusoft.com
    --
    --- Every day I am forced to add another to the list of people who can kiss my ass...
    1. Re:SPAM Report by Anonymous Coward · · Score: 1, Interesting

      Or not. blackholes.mail-abuse.org? or.orbl.org? Just how old is this list?

      Try this on for size:

      (various countries).blackholes.us if you like
      (spews|spamhaus).relays.osirusoft.com
      (rela ys|list|multihop).dsbl.org
      (proxies|formmail).rel ays.monkeys.com

      I used to reject with 5xx errors on things like the DSBL, but have moved them down to 4xx series. That gives the lusers a chance to fix their situation and have the mail "magically" arrive if they find a clue later on.

      It also gives me the ability to manually whitelist things that look valid if that doesn't work.

  127. The Obvious Solution: by cybercuzco · · Score: 1
    What's needed is accountability.

    Theres a simple solution: Spam is trying to sell you something. If you cant contact the person who is selling you the thing how can you be reasonably expected to buy it? The people who sell the products through spam should be held accountable for all damages from said spam, just like somone who hires a hit man is responsible for the murder (along with the hit man of course)

    --

  128. There is an issue here by diablobynight · · Score: 1

    I think the best way to deal with spam would be for no one to ever, ever, read it. But the problem is that some idiots actually buy things from spammers, it's profitable to spam, if it wasn't they would stop. So lets stop spam through our own actions. Just stop reading it completely, even if it says 80% free inkjet cartridges Also, developing a protocol that requires authentication is stupid, you will just increase the amount of time it takes to send anyone an email.

    --
    Anonymous Cowards - Oh God, How I hate you
  129. 85% of all statistics are made up on the spot. by Anonymous Coward · · Score: 0

    85% of all statistics are made up on the spot.

  130. Spam has historical roots... by wirelessbuzzers · · Score: 1, Funny

    WIZARD: Why, anybody can have a brain. That's a very mediocre commodity. Every pusillanimous creature that crawls on the earth or slinks through slimy seas has a brain! Back where I come from, we have universities, seats of great learning--- where men go to become great thinkers, and when they come out, they think deep thoughts--- and with no more brains than you have --- but! they have one thing you haven't got!

    SCARECROW: What's that?

    WIZARD: A U N I V E R S I T Y D I P L O M A !

    Do you want for a prosperous future, increased money earning power, and the respect of all?
    We can assist with Diplomas from prestigious non-accredited universities based on your present knowledge and life experience.

    Call Today -->> 1 - 415 - 276 - 2393

    No required tests, classes, books, or interviews.

    Bachelors, Masters, MBA, and Doctorate of Thinkology (ThD) diplomas available in the field of your choice - that's right, you can become a Doctor and receive all the benefits and admiration that comes with it!

    No one is turned down.

    Confidentiality assured.

    Call us 24 hours a day, 7 days a week! (including Sundays and holidays):

    Universitatus Committeeatum e pluribus unum
    1 - 415 - 276 - 2393
    Contact us NOW to receive your diploma within days, and start improving your life!

    --
    I hereby place the above post in the public domain.
  131. Outlook Spam Control by RaboKrabekian · · Score: 1

    There is a perfectly good way to block spam within outlook: the Rules Wizard

    Using nothing but Outlook rules I have reduced my spam by about 90%. The trick is setting up the rules correctly.

    Mine go something like this:

    1. If email comes form someone on my contact list, stop processing rules (this makes it important to keep your contact list updated)

    2. If my name isn't in the To: or CC: box then move it to junk mail

    3. If email subject or body contains following words, move to junk mail.
    -I update this list of terms as needed. mostly pretty common things (sex, adult, penis enlargement, etc etc.)

    The third rule is very aggressive once you've built your list of words. The trip is the first rule which lets anythign form your contact list though, which really decreases the false positives.

    I've found that the biggest problem is that often online purchase confirmations get filtered as spam. But Iv'e learned to just look for these in my "DMZ" folder if I'm looking for a confirmation.

    Anyway, the system works very well for me.

    --
    "Moderate drinking can help prevent amputated limbs" -- Abigail Zuger, NYTimes, 12/31/02
    1. Re:Outlook Spam Control by Ed+Avis · · Score: 1

      By the system you describe, the message you just posted would be discarded as spam if you sent it to a mailing list rather than Slashdot.

      --
      -- Ed Avis ed@membled.com
    2. Re:Outlook Spam Control by RaboKrabekian · · Score: 1

      I'm not sure I understand your point. These are filters for my personal inbox - not for a mailing list.

      --
      "Moderate drinking can help prevent amputated limbs" -- Abigail Zuger, NYTimes, 12/31/02
    3. Re:Outlook Spam Control by Alizarin+Erythrosin · · Score: 1

      I think what he's implying is that some mailing lists don't include your name in the to: or cc: address, therefore a mailing list posting may get moved to your junk mail folder.

      Plus, by filtering words it's almost like a primative Bayesian filter...

      --
      There are only 10 kinds of people in this world... those who understand binary and those who don't
    4. Re:Outlook Spam Control by Ed+Avis · · Score: 1

      My point is that there may be legitimate messages which contain the words 'penis', 'adult' etc. Not that your filter isn't a good 99% solution, but it's ironic that many messages discussing email filtering solutions would get blocked by it.

      --
      -- Ed Avis ed@membled.com
    5. Re:Outlook Spam Control by RaboKrabekian · · Score: 1

      yes, dealing with false positives is an issue - but I've found that I'd rather glance through a junk folder tofind false positives than wade through an inbox filled with crap. Keeping an up to date contact list (since no one on your contact list gets filtered) becomes important.

      --
      "Moderate drinking can help prevent amputated limbs" -- Abigail Zuger, NYTimes, 12/31/02
  132. Have recipient decide if spam, and charge sender. by Anonymous Coward · · Score: 0

    Mabye a system could be implemented whereby if a user decides that a certain piece of mail sent was spam, they click a button, and the person who sent the spam has to pay $.05. who the money would go to, I'm not sure, mabye to charity? If a user accidentally clicked, or it wasn't really spam, no big deal, the legit business wouldn't have to pay too much, but it'd certainly bankrupt the spammers.

    This way, if a legit business sends out thousands of emails to legit customers, they don't have to pay per email. It's easier on small legit businesses to start up.

    I'd also like to say that spammers are so agressive that they are causing thier own extinction.

  133. 100%-ish effective spam-prevention technique by UberQwerty · · Score: 4, Informative

    I have a real, useable e-mail account that never recieves any spam at all, and I never delete/filter legitimate mail! How is this possible?

    I have two e-mail addresses. One gets nothing but spam, and the other gets no spam at all.

    I have a free account at hotmail.com and a private one on a server that isn't owned by a big business. When I'm giving my address to someone I know personally, I give the private one. When I have to give an e-mail address to sign up for some service or to get some account, or basically whenever I'm giving my e-mail address but I don't know who is getting it, I give my hotmail account.

    Result:
    -My hotmail account occasionally gets confirmation e-mails when I've just created one of those free accounts for some website, but I always know when they're coming. Otherwise, it just collects spam, which I periodically delete (and block the addresses it came from).
    -My personal account never gets spam.

    (I have a university account that forwards to my private account, so occasionally it gets what could be called "spam" that's aimed at univ. students, but if I stop the forwarding it stops the spam, so I don't really have a problem.)

    --


    PUBLIC SPLIT ON WHETHER BUSH IS A DIVIDER -CNN scrolling banner, 10/15/2004
    1. Re:100%-ish effective spam-prevention technique by gdr · · Score: 4, Insightful
      This works until one of your friends enters your email address into a form on the web (say to send you a electronic birthday card) and it gets added to a spammers list.

      It's also possible that a spammer could harvest email addresses using a Outlook virus that infected one of your friends or anyone who has been sent an email that has your email address in the header (or body for that matter).

      I don't know if these sort of viruses are common but if they're not now they could be in the future.

      Having multiple email addresses is a good idea but, unfortunately, not a perfect solution. Once your "safe" email address is in the hands of a spammer they can pass it on to other spammers and it can become unusable quite quickly.

    2. Re:100%-ish effective spam-prevention technique by Andy+Dodd · · Score: 1

      Or just wait until that university address of his gets dictionaried.

      No matter what other measures I might have tried, at this point I'd be screwed, as spammers have started performing dictionary attacks against Cornell's netid namespace.

      Doesn't matter what you do - Sooner or later a dictionary attack is gonna get you.

      --
      retrorocket.o not found, launch anyway?
    3. Re:100%-ish effective spam-prevention technique by tkny · · Score: 1

      hotmail wasn't ALWAYS like this though...

      now i get 20 junk email for every 1 good email, so i'm forced to send all mail to the junk mail folder by default and then i add known individuals to my protected list as i come across them.

      i can only speculate it started when ms started msn.... those bastards.

      to make matters more infuriating, hotmail counts the bytesize in your junkmail folder!!!

    4. Re:100%-ish effective spam-prevention technique by callipygian-showsyst · · Score: 1
      You have to be sure the people who get your real email are VERY web savvy!

      I do the same thing, and only the most trusted people get my real email. Otherwise, I'll get someone who will send me and 40 of his closest friends his latest rant, and we'll all be CC'd with visible email addresses.

      I now have removed my email address from my business cards! This way, a card handed out at a trade show, etc, doesn't result in getting on an email list I can't get off of!

    5. Re:100%-ish effective spam-prevention technique by Zluka52 · · Score: 1

      Any one try to create a personal domain and forward all email to single mail box???

      When web site ask for your email you just enter

      @.com

      example: slashdot@zluka52.com -> forward to private@email.com ... and when your start to recive spam on email slashdot@zluka52.com just block this email forward.

    6. Re:100%-ish effective spam-prevention technique by ThisIsBob · · Score: 1
      Your technique works! I have a personal domain that forwards all mail with an invalid name to a catch-all account. Then anytime I give out my address to a company, I give them the email address of TheirCompanyName@MyDomainName.tld Then if I get any spam from them selling my name or being harvested, I;

      A. Know who sold me out.

      2. Block that recipient.

      III. Only have to tell one person to change their email address record for me. (If I even care)

      I've been doing this for well over a year and it works great.

      It never rains in California, except when it's raining.

  134. Go after the source (1st post) by The+Master+Control+P · · Score: 1

    The spam problem would go away if we could teach the 100th of a percent of morons who buy into it to NOT buy into it.

    Send out messages to everyone in your address book with instructions on anti-spam procedures and a request to forward it.

    Now, how do you explain what to do to someone who mistakes their CD drive for a cup holder? Or am I dreaming again?

  135. This brings up a question I have. by Wuhao · · Score: 0

    I'm a novice system administrator, and I've been learning to set up e-mail servers lately...Wouldn't wide-spread SMTP AUTH nip all this in the bud? The only way you could send mail would be through your own registered account. If you send too much, they know with utmost certainty what account was responsible.

    Now spammers would have to either abandon their "hit-and-run" tactics, or start stealing log-ins.

    Or should I lay off the crack?

    1. Re:This brings up a question I have. by Anonymous Coward · · Score: 0

      Sorry to say this, but you are not a system adminstrator but a part of this very problem.

    2. Re:This brings up a question I have. by Wuhao · · Score: 1

      Where I come from, an innocent question is usually answered with something useful and constructive, as opposed to vague statements that I am "a part of the problem."

      I already said I'm a novice. This is a genuine question. Why don't I see SMTP AUTH getting more love?

    3. Re:This brings up a question I have. by Anonymous Coward · · Score: 0

      Because it's too hard for your grandma to set up in Microsoft Dismal Outlook '84.

  136. What's the point? by siskbc · · Score: 2, Interesting

    First, a fundamental problem: There IS NO COMMUNICATION between your mail client and a sender. Therefore, you have no way of submitting the hash problem TO the sender, he can only return an answer. Therefore, if this even happens, it HAS to be server-based. Re-read the site you quoted, nowhere do they talk about mail clients. There's a reason.

    I wasn't thinking of the cost to the SMTP server but of the human cost of spam - wasted time in deleting it and the fact that people are turned off email altogether because of it. This, IMHO, is a much more serious problem than wasted bandwidth.

    What, you think bandwidth pays for itself? So eventually your ISP costs go up, not so good. Besides, it's easier to stop spam at the choke point (server) than trying to track it down later. And for people paying to d/l spam on, say, a mobile device, having to d/l it IS the problem.

    Also, note that if payment for messages (whether real cash or hash cash) becomes widely adopted, spam will stop because there won't be any money in it any longer. So the problem of costs to the ISP is also dealt with.

    Yes, but GETTING it widely adopted is the big problem here. You have to mandate it, probably, and it's easier to get webmasters to switch than, say, my mom, who has no idea what a mail client is. And, for ISP's, the problem is in the voluntary-adoption period. Who takes the hit first? Who starts off with this, when it will increase CPU load even for the sender, while all the spammers are still out there? And how will you get wide-scale participation? It's all well and good to talk about this stuff, but there has to be some method of implementation, where you get from here to total adoption. And voluntary adoption wouldn't work, actually, because the sender's client probably won't understand what the receiving server wants when it asks for the hash, unless they also upgraded to the hash deal. So, in the voluntary phase, do you drop these emails? Do you let them through, defeating the point?

    The recipient just has to look at the message body, the To: header and the postage, and verify that the postage is a correct answer (which can be done quickly).

    I can look at the header and the body NOW and tell it's spam. Really, I didn't think it was ACTUALLY president Mugabe trying to send me money when I got that email. If you have to d/l the message, look at the message, and look at the header, then there is no advantage over the status quo.

    --

    -Looking for a job as a materials chemist or multivariat

    1. Re:What's the point? by Ed+Avis · · Score: 3, Interesting
      Therefore, you have no way of submitting the hash problem TO the sender,

      I could be wrong on this but having looked at the hash cash site I think that no communication from receiver to sender is necessary. The problem is based on the message body and the recipient name. The sender knows these at the beginning.

      The costs to ISPs in the short term will be no worse than at present. In the long term costs to ISPs will fall as spam traffic declines.

      You are right that adoption is a problem but that is no reason not to start now. Of the 10% of messages I get that are not spam, almost all are from relatively knowledgeable people who can upgrade to the latest version of Pine or whatever to get hash postage. For other users, it just needs AOL or Microsoft to put out a new release, which as likely as not will be an automatic update. Attaching postage to your message increases CPU load, but only for a few seconds per message sent, and even that can happen in the background.

      The advantage over the status quo is that legitimateness of a message can be checked *automatically*. That is the point, you don't have to have your time wasted by checking and deleting spam, this job can be done by the computer. Children do not have to look at pornographic messages, etc etc. Saving time for humans, not computers, is the most important thing. Though like I said, in the long term making spam uneconomical will reduce the load on ISPs as well.

      And unlike Bayesian filtering there is no way around it, the message has to cost a few seconds of CPU time or else the postage will not be valid. (Assuming the hash function is cryptographically secure in the sense there is no easy way to get either partial or total collisions with a given hash value.)

      --
      -- Ed Avis ed@membled.com
  137. Slight Problem by Anonymous Coward · · Score: 0

    This technique works great for me, however during my testing phase, I uncovered one slight problem, and that was if the person trying to contact me didn't understand enough english to realize that a code word in the subject line was required, he wouldn't resend. But then, I couldn't understand his language either so I'd have probably lost his business anyway.

  138. No More Email by ONOIML8 · · Score: 1

    Where I work they no longer use email for about half of the employees. They had given them email accounts as part of bringing the county "21st century tools". While email was supposed to have the biggest benefit it turned out to be the biggest flop.

    Turns out that the end users didn't use it because of the spam distraction. Most of the mail they got was spam so they ignored it all. When the computer geeks put spam filters on they worked for a while but it became too much work for them and by then the end users had already soured on the concept of email.

    So now that email is no longer a valid business tool because of spam I wonder if it is the valid marketing tool that the spammers think it is. If fewer people are using email because of spam then fewer spam is being read.

    I dunno. I've about quit using email too so I don't know that I really care either. I now stay in touch with those I care to using web BBS's rather than email.....no spam.

    --
    . Quit playing Monopoly with Bill. Switch to one of many non-Microsoft products today.
  139. it IS a technological issue by Srin+Tuar · · Score: 1

    Its very simple to stop spam with a tech fix:
    Make it uneconomical.

    Whenever your mail agent receives a new email from an unknown source, it could send back a return receipt requesting that the sender either click on a link or reply to it to verify their return address.
    (You could also white list people, or you could limit this return receipt to only kick in when the mail look like spam)

    If a spammer had to do this for each intended recipient, then they would quickly be out of business.

    Black-lists, the current most popular choice, dont work, because its very easy to get a new source address.

    1. Re:it IS a technological issue by SillySlashdotName · · Score: 1

      Its very simple to stop spam with a tech fix:
      Make it uneconomical.


      Yep, uh'huh, and correct. I don't think your solution will work, but your analysis of the problem and the best solution for it is right on the money (pun only sorta intended ;] )

      I think the ONLY way to stop spammers is to hit them in the wallet (a swift kick in the balls only slows them down... "Candy gram for Mongo!"), and the best way to do that is to charge them for the bandwidth they use - probably through a metered access. Just as the Post Office charges by the piece (although some of the CBM - I think - is charged by the pound...), connections to the internet should be charged by the quantity of bandwith used - and outgoing should be at a way higher rate than incoming, possibly after some minimum is passed (i.e., basic access for $19.95/month, anything over X gigabytes OUTGOING charged at $10/Meg/Gig/whatever, anything over Y gigabytes INCOMING charged at $0.50/Meg/Gig/whatever). That way the bulk of the expense of the mailing would be on the spammer.

      I immediately see several problems with this solution, but it is the best I can come up with quickly.

      --
      Acts of massive stupidity are almost never covered by warranty. --me.
  140. Spam is a low-tech virus by objekt · · Score: 1

    I've said it before and I'll say it again. Spam is a low-tech form of virus. It's the easiest type of virus to write and disseminate. It's also the most annoying per-capita, and the most ignored type of virus. It slips in under the radar, wastes your time, and its authors suffer very little in the way of repercussions.

    --
    -- Boycott Shell
  141. I wonder... by jellis274 · · Score: 1

    Do spammers actually get anything out of all of the junk that they send, or are they just trying to piss everyone off? 100% of all people who respond to spam should be shot.

  142. Whitelists! by Tikiman · · Score: 2, Interesting

    I'd estimate that 99% of mail I get is from people I am expecting it from. I could easily configure my email client to put this mail in another folder. At the end of the day (or more often), I can look at all the non-whitelisted mail for stuff that wasn't spam-tagged to look for new people to whitelist - takes about a minute. While spam may be a huge infrastructure concern, I really don't see it as a huge productivity concern.

  143. 40% sounds low. by nurb432 · · Score: 1

    Though once you add web popups, I bet the % of 'unwanted advertisements' would triple..

    It was said to be 35% last month.. 40% this month.. at this rate email will be unusable by the holidays, and a total collapse of the infrastructure by this time next year.

    Unless something is done to stop it.. donno what.. but something has to be done..

    --
    ---- Booth was a patriot ----
    1. Re:40% sounds low. by schatten · · Score: 1

      currently even while running a full time online business the amount of spam I receive is more than 40% daily. I should try to crunch some numbers down but that's not worth the time to come up with at the moment.

  144. Is it possible that spammers are dying off. by Anonymous Coward · · Score: 0
    This may be a strange take on the trend, but I wonder if the marked increase in spam is an indicator of spam failure.

    As has been pointed out in several posts here, most people understand that buying from spammers is simply encouraging bad behavior. Since this is the case, I would guess that spam is no where near as effective in generating revenue for the spammers as it once may have been.

    Perhaps the current increase in spam activity we all are seeing is the result of aggressive spam activity because their own revenue returns from spam are falling.

    You will note that reputable companies, realizing the social backlash, are nearly never associated with spam. Affiliate based programs will generally provide for holding back revenues when spamming is involved as part of the Ts and Cs of their agreements, so that once lucrative channel has nearly dried up for spammers. Thus it seems that spammers are reduced to pushing scams and generally far less profitable products.

    The spammers continue to push the belief that spam is and will remain an ongoing fact of life, but perhaps what we are really witnessing are the last death rattles prior to the ultimate death of spam.

  145. BellSouth puts itself on those blacklists by sirshannon · · Score: 1

    BellSouth adds its range of IP residential IP addresses to spam blacklists in order to keep its users from running spam factories at home. I found this out after all of my emails to a friend were bounced due to my IP being on that list.

  146. One thing that could be outlawed by Skapare · · Score: 1

    Despite the obvious problems of jurisdiction, there is one thing that could be outlawed. That is a requirement that when the mass emailer gets a rejection of the spam, either through an SMTP 5XX code, or a bounced message (they would be required to codify the return addresses and have capacity to receive all the bounces and process them), then the address being mailed to should be handled this way. If the address had been successfully delivered to before, further mailings should be stopped after rejections keep coming back for 7 days. If the address had never been successfully delivered to before, further mailings should stop immediately.

    Spam is regularly mailed to a few hundred email addresses that not only do not exist, but never have existed (in a few domains I have). A lot of it just comes from random locations, so that can be just propogation of bad addresses among small time spammers (you know, the CD of millions). But a lot of this repeat spam to never-existed addresses comes from bulk mailing houses, including places like rackspace.com, m0.net, and even weatherbug.com.

    This is a clear case of abuse which could be used to help shut some obvious spammers down, or at least fine them heavily, without running afoul of things like first amendment issues. If there's no one there to read a message, then it isn't free speech. And once it is possible for them to know this is the case, then any further attempts are nothing more than intentional abuse.

    --
    now we need to go OSS in diesel cars
  147. It's universal by prestidigital · · Score: 1

    Folks, it's not just email. My "old-fashioned," land-based telephone line, which I keep in case of emergency, is almost entirely a vehicle for sales - like 98%. It's like I'm paying someone to advertise to me and I hate it! Then there's junk (snail) mail, which has been a problem for decades. Anyone have any figures on what percentage of snail mail is junk mail?

  148. What percent of this is porn? by httpamphibio.us · · Score: 0

    80%?

    --
    sig.
  149. 10% of Spam is Valuable by handy_vandal · · Score: 1

    I suppose 10% of my spam is valuable ... if I get 10% of 14.5 million ($US) from that Nigerian oil minister ....

    --
    -kgj
  150. Media coverage by Anonymous Coward · · Score: 0

    Lately there is a lot of media coverage on spam. Since everyone is pissed off with this, I bet we can see a solution pretty soon.

  151. Tragedy of the Commons by paulfwilliams · · Score: 1

    Speaking of The Tragedy of the Commons. Guess what? This argument applies to Internet email, too. The individual benefit a marketer gets by sending a single piece of spam is a relatively high positive number, and the impact of this extra piece of email on the world is a very small negative number. Therefore, spammers will continue to send more email, until eventually the commons collapses. In this case, perhaps the Internet will not be able to handle the load, or maybe people will stop using email for communication. But the collapse will come.

    What can we do about it? The freedom to send any email must be restricted somehow. You can't have unrestricted freedom without the eventual collapse of the commons.

  152. Right... Get the facts straight by nortcele · · Score: 1
    The srticle states that 40% of Internet traffic is Spam

    No, the article states that 40% of email is spam.

    40% of Internet email is spam.
    40% of Internet traffic is PORN.
    1. Re:Right... Get the facts straight by axxackall · · Score: 0, Troll
      You all are wrong. 40% of world's email traffic is of USA and 99% of it is spam.

      My yahoo, netscape and hotmail accounts are 99% full of junk. But even friends from US corporations complain about the same - their work mailboxes 99% full of junk at periods when a sysadmin switch off a spam filter temporary.

      You like the democracy? You've got it. At least you've got what you call a democracy.

      --

      Less is more !
  153. New Way by mugnyte · · Score: 1

    There is no better time than NOW to keeping suggesting a server-based email system. Email as it is now is a tired protocol.

    Spammers should send links to their host and then accept visitors like any other serving format. There are several projects working on this, but adoption is the holy grail. Yawn.

    mug

  154. Is this RIAA style "equivalent billions"? by Anonymous Coward · · Score: 0

    You know, where the fact that somebody thinks that someone might possibly be taking 5 seconds to delete spam, and they multiply it out by absolutely everyone on the planet to arrive at some "cost"?

    Not only is the 40% a fiction in itself, but saying spam costs "$10 billion dollars" is ludicrous. It's just someone jumping to a number to generate support for their cause. It's no more accurate than all the "piracy costs billions!", or "traffic congestion costs billions!", or "rough toilet seats costs billions!"

    1. Re:Is this RIAA style "equivalent billions"? by schatten · · Score: 1

      actually it doesn't seem that unrealistic since time is money and people's time for coping with such things cost them money that they could otherwise be earning on a productive basis - even if it was making minimum wage at wendy's.

      net traffic congestion would be minimal, but ever growing, however processing power and application developments/cost to filter out spam is even more so annoying.

      when I receive - personally - well over 40% of spam a day running an online business - you bet it costs money because of the time it takes to filter out those that spam filters do not filter out.

  155. Remove the Filters by jetsetscoot · · Score: 3, Insightful

    Is 40% what the user sees or what hits the ISP?

    What if for one day - 24 hours - everyone who is running a spam filter at any level simply took the filters down. Show the users what the real flood of junk looks like. I bet the hue and cry would provoke real efforts - legal or technical - to solve the problem once and for all.

    I find myself thinking; what's all the fuss about, I only actually see a half dozen spam messages a day in my Hotmail and POP accounts. But I know that for every piece I see there are untold dozens being blocked by filters. Filters merely hide the scope of the problem from the end users, but ISP's still have to deal with the bandwidth.

    Take down the filters for a day and let everyone see the real scope of the horror that is spam

    -Jetset

    - I can't hear the forest for all the falling trees-

  156. How the hell do you people get all this spam? by Anonymous Coward · · Score: 1, Interesting

    I use email constantly and average about 1 spam email every two weeks. This is for both my university account and the yahoo account I give out all the time to companies and vendors when I buy things.

    Do all the /.'s need give out their addy to all the porn sites they surf? Is this why you get all this spam. What gives?

  157. Check your math by wilhelm · · Score: 1

    You might want to check your math on this. By my calculations, 600-700 of 1800 is 33-38%. Therefore being less than 40%.

    You were saying about making up statistics...?

  158. Ridiculous let-in-the-spam stunt. by Anonymous Coward · · Score: 0

    "What if for one day - 24 hours - everyone who is running a spam filter at any level simply took the filters down. Show the users what the real flood of junk looks like"

    Not everyone would pull this kind of ridiculous stunt, and what would happen would that the service providers who DID do this would lose all their customers, and those who kept the filters going would gain the customers.

  159. Spam Icon? by Anonymous Coward · · Score: 0

    What happend to the Spam Can Icon that used to adorn this topic? I think it's more apropos than the pig.

  160. Disposable Email Addresses -- Effective? by angle_slam · · Score: 4, Informative
    Does anyone here use a Disposable email address service? Examples of such services include the following:General information about disposable email addresses can be found in this PC Magazine article and this about.com article.

    Briefly, I'll explain how they work in theory. After signing up with a disposable email service, they give you a disposable email address that you can, for example, enter into forms. Mail sent to that disposable email address gets automatically forwarded to your email account of choice. But here's where they supposedly come in handy. You can sign up for a different disposable email address everytime you fill in a web form. If you start getting spam, you can look at the disposable email address the spam was sent to and you can do 2 things: (1) cancel the disposable email address so you no longer get spam sent to that address; and (2) you know who gave out your disposable address and you can take whatever action you deem appropriate.

    This seems like a cool product, in theory, but I haven't seen anyone with real world experience with these services. If anyone here can describe their experiences, it would be greatly appreciated.

    1. Re:Disposable Email Addresses -- Effective? by jumpingfred · · Score: 1

      I have used sneakemail. It does work as advertised. I do not however get any spam forwarded through them. Which means the people I gave these email addresses out to didn't sell the address or maybe it means I gave my email address to OK guys or maybe it means that people could filtered it as a bogus address or perhaps something else.

    2. Re:Disposable Email Addresses -- Effective? by mjpolanco · · Score: 1

      This almost works. The problems are that (1) you often cannot tell what email address caused you to receive the email message. And (2) the greater issue is that unsubscribing from newsletters/mailing lists the service often uses the 'From:' address to identify who to remove, rather than allowing you to establish it in the message body or on a web form. Result: you spend time messing with your email client to change the From: address to what you need it to be. BTW, the CHEAPO way to create disposable email addresses is simply to get a domain name with catch-all email addresses AND aliases. You use the catch-all to generate all the distinct emails you want, then when you want to kill one you simply create an alias for that particular email address and send it to nobody@nowhere.com. Any enom.com reseller will have these features.

  161. Re:40% ...? Viruses!!! by Big_Monkey_Bird · · Score: 1

    The other 40% is viruses

  162. And the best way to do this by Aexia · · Score: 2, Interesting

    is to punish companies that *hire* spammers.

    Let's face it; if we focus solely on the spammers themselves, we'll have little luck reducing the flow.

    But if the court system allow people to sue the companies that contracted out for spam, a few hefty verdicts might cause corporations to think otherwise.

    1. Re:And the best way to do this by budgenator · · Score: 1

      punish companies that *hire* spammers, When I feel spunky and complain about the spam I recieve I complain mainly to the people who will benefit from the spam i.e. the companies trying to sell something, and I usualy tell them that the spam placed them on, My do not do business with list. It commercial so somebody benefits, go there

      --
      Apocalypse Cancelled, Sorry, No Ticket Refunds
  163. False Positives? by jmichaelg · · Score: 1

    This morning's inbox had 5 legit messages and 20 pieces of spam. That's fairly common for me.

    OTOH, I seriously doubt AOL's claim of 1 billion. AOL's spam filtering is brain dead. Every Wednesday, I send 40 emails to my clients. I used to use a pacbell pop account to do that but AOL filtered about 1/3 of them thinking they were Spam. They weren't - they were legitimate emails apprising my clients of information they have asked to receive.

    To get around AOL's spam filter, I've had to open an AOL account for no reason other than to bypass their spam filter. My weekly emails suggest to my AOL customers that they find a new isp that doesn't deluge them with ads and, incidentally, is easier to reach by email.

    1. Re:False Positives? by Anonymous Coward · · Score: 1, Insightful

      And AOL doesn't have 40 million users - they have 40 million SNs (screen names). If they counted only one user per account instead of SNs, their claim would be substantially smaller.

    2. Re:False Positives? by berzerke · · Score: 2, Interesting

      I'll agree on the brain dead part. From what I've learned from my host, AOL has put in a new system that automatically blocks based on complaints from AOL users. The more complaints, the longer the block stays in place. Apparently no human ever looks at it (until something goes wrong). This means AOL can be unreachable pretty much at random, and it can happen several times a day.

      I remember one instance not too long ago where AOL even admitted that address had been forged and they were blocking incorrectly, but they couldn't figure out how to unblock manually. This was straight from an AOL represenative's mouth.

  164. Re:90+ % when you have a hotmail account by Greywethr · · Score: 1

    Of course! MicroShit sells our names so we get spam in hopes that we'll pay them for their stupid butterfly. I get more spam in my care2 account, and don't even use that email on websites.

  165. The cost of spam... by gnovos · · Score: 1

    Well, theoretically, the spam is generating revenue for SOMEBODY right? I mean, even if nobody responds to any of it, the higher bandwidth bills are eventually paid to some ISP. Is it really true that spam costs $10billion a year?

    --
    "Your superior intellect is no match for our puny weapons!"
  166. Spam back? by Lazarus2k2001 · · Score: 1

    Isn't it possible to spam back at those nasty spamers themselfs??? I mean when they get a thousand mails per day, maybe they get the idea.

    --
    "Holy instant noodle"
    1. Re:Spam back? by PigleT · · Score: 1

      Not easily; you need to know a valid email address for them.

      Of course, postmaster @ (something related to whois or reverse-DNS lookup on the incoming IP#) would be nice, but if they're evil enough to spam you, don't expect RFC-compliance :)

      However, you could consider a teergrubing approach. Something like http://www.iks-jena.de/mitarb/lutz/usenet/teergrub e.en.html would be a start - or for all the difference, if you're going to mess around with the incoming SMTP stream, then why not integrate spam-checking with spamassassin (use either sendmail's milter interface or exim's exiscan, perhaps) and reject the mail as it's coming it? Then exactly the right person gets exactly the right kind of failure message.

      --
      ~Tim
      --
      .|` Clouds cross the black moonlight,
      Rushing on down to the circle of the turn
  167. the U.S. of A. et al` COULD do something by Ender+Ryan · · Score: 1
    I see a lot of people complaining that spam can't be legislated away, because of different jurisdictions, etc. That is pure nonsense. All you need to make effective spam legislation is economic pressure from the U.S.A. and a couple other large economies.

    Remember, these are already the countries that basically control the Internet. Any foreign spam could be billed against foreign ISP's/Carriers at a high premium, domestic spammers will face serious penalties. This will force foreign ISP's/Governments to crack down on spam.

    Besides, how much spam do we Americans get from out of the country? I'm guessing it's a small percentage for most people. Does anyone have any statistics on amount of spam per country?

    --
    Sticking feathers up your butt does not make you a chicken - Tyler Durden
  168. Charge Spammers For Spell Checking by kotku · · Score: 4, Funny

    I just created a web site whose terms of service are that if you send an email to the email address listed then you will be charged for spell checking the email at £10 a character. Anybody want to advise on what my chances of collecting are ?

    --
    The bikini - security through obscurity since 1943
  169. Did anybody notice... by DrewCapu · · Score: 1

    that Yahoo has improved its SpamGuard?

    Overall I've been pretty satisfied with Yahoo's filtering. It would be nice if you could block email from certain domains though.

  170. only 40 % ??? by minti · · Score: 1

    only 40 % ??? i get something like 90% spam (which is about 45 / day)

  171. anti-zionist != anti-semitic by Anonymous Coward · · Score: 0
    All the 'propping up' of Israel does is to ensure that they can continue to steal land from their neighbours, who as a result aren't that keen on Israel.

    If the Israelis were content with the lebensraum that they stole in 1948, driving the indigenous population out by means of massacres like Deir Yassin, then there might be a solution.

    But they're not, and they continue to perpetrate war crimes against civillians in the occupied territories.

    Call me an anti-semite if you like - I'm just a humanist and a hater of land thieves and war criminals.

    1. Re:anti-zionist != anti-semitic by gurps_npc · · Score: 1
      I am not going to call you an anti-semite. I am going to call you an ignorant fool.

      Israel has NEVER "stolen" land.

      They are a tiny country. Other countries, FAR bigger than they are, with FAR more money (most of it coming from the U.S. via Oil sales) attacks them, as a way to distract their unhappy population from the fact that their countries are incredibally poorly run.

      Isreal wins the War, that they did NOT start, and Conquers their defeated enemey. They then keep the Land they won in the War.

      This is clearly "CONQUERING" not "stealing"

      Other countries of the world do nto object because ALL of them have Conquered before, including Iran, Iraq, Syria, Egypt, Saudia Arabia, etc. Most of them however started their wars, rather than reacted to them.

      Isreal may mistreat their non-jewish citizens by not allowing them to vote, but Only a really stupid person thinks that Isreal "stole" land.

      --
      excitingthingstodo.blogspot.com
    2. Re:anti-zionist != anti-semitic by Anonymous Coward · · Score: 0

      "Israel has NEVER "stolen" land."

      Correct. The land in question is handed to Israel on a silver platter, more or less. What do you call it when a place is used for unprovoked aggression in a war of ethnic extermination? Of course the victims have the reasonable right to occupy this land until the aggressors back down.

  172. isnt that what I said by Srin+Tuar · · Score: 1
    best way to do that is to charge them for the bandwidth they use


    The problem is that it doesnt take much bandwidth to send out spam. If the spammers had to send each email individually, or if they had to encrypt each message to the recipients public key, then the costs would be exorbitant.


    And if you dont think the return-receipt idea will work, can you give one reason why? Personally, I dont want to be overchanged just because I run a webserver, like your scheme would require.

    1. Re:isnt that what I said by SillySlashdotName · · Score: 1

      I agree it doesn't take much bandwidth to send one spam email. But it does take a chunk to send millions of spam email messages.

      Maybe it is possible to limit the metering to SMTP messages - but couldn't the spammers get around this by using a different protocal or a different port number?

      As I said, I see several problems with this possible solution. I don't think I have it figured out, I just think there has to be a technical solution for the problem.

      I agree with you that web servers should not be charged extra if the purpose is to combat spam.

      On the other hand, I can see ISPs going to metered bandwidth as a change to their business plan in an effort to increase their revenues. In that case, running a web server will cost more than my fathers sporadic email reading. But I really think you use more bandwidth and SHOULD pay more than a non-webserver-running user.

      If the ISP is buying X MegaGigaWhatsits from their upstream provider, and you are using 1/500 of that, while I am using 1/10,000, Then YOUR SHARE of the price is different than mine and your payment should also be different than mine.

      --
      Acts of massive stupidity are almost never covered by warranty. --me.
  173. Rackspace by Skapare · · Score: 2, Informative

    It just seems to odd to refresh the page to see more comments about spam, and I get a banner ad promoting one of the larger spammer hosters in the US ... Rackspace. Those who sign up for service from those scumbags are just as bad as the scumbags because that effectively helps support the spam they keep pounding my servers with. So far today, 98 attempts just from Rackspace addresses. Yesterday there was a total of 240.

    And while previewing this comment submission, yet another Rackspace banner ad. Don't these guys know I'm never, ever, going to pay them for any services?

    --
    now we need to go OSS in diesel cars
    1. Re:Rackspace by Dimensio · · Score: 1

      While Rackspace is notorious for actively aiding and abetting criminals hosted on their network, they're hardly the only ones. Verio is also well-kown as a supporter of spamming criminals, as are QWest, AT&T and VDI. All of those ISPs are happy to allow their customers to break whatever laws they want, so long as the check clears. As such, those ISPs are accessories to their customers crimes, but they don't seem to care at all about that.

      Their CEOs should all be shot.

    2. Re:Rackspace by Anonymous Coward · · Score: 0

      Rackspace is wonderful because they treat their customers like people, offer incredible support, and are available 24 hours a day with actual experts. That, and they cost a bundle...

      Their philosophy seems to be that the customer is always right and leave the customer alone unless they call for help. So maybe they're being too trusting of their customers, I dunno.

    3. Re:Rackspace by Skapare · · Score: 1

      I've found 6000 some spamming servers in Rackspace's network. Based on their pricing, that's over a million dollars a month. Based on the spam volumes I've seen, they are costing others over 30 million dollars a month in mail server load costs, and probably a lot more figuring in "just press delete" time for what makes it through. Lots of networks are blocking Rackspace now, as well as many others as another comment in this thread mentioned.

      --
      now we need to go OSS in diesel cars
  174. As if.... by endoboy · · Score: 1
    The "solution" is for everyone to be 100% on the ball

    Yea, right--never in the history of the world has even a small percentage of people, let alone everyone, been 100% on the ball.

    It's a particularly stupid suggestion when you follow it up in the very next sentence with most people using the internet are really fucking stupid

  175. What are they gonna do about it?! by mesach · · Score: 1

    Now that span has joined the ranks of MP3's and Piracy as costing companies serious money, are they going to do anything about it? I seriously doubt it.

    --
    moo.
  176. I motion that we abolish E-Mail... by shadowxtc · · Score: 1

    ...and replace it with a new standard. All you free software people get to work!

  177. Wow, who's getting all the GOOD email? by Vengeance · · Score: 1

    I'll tell you what, my signal-to-noise ratio is WAY lower than 60%.

    --
    It was a joke! When you give me that look it was a joke.
  178. Unfortunately, he's correct... by alispguru · · Score: 1

    In 1866, the Supreme Court ruled that corporations have the same rights as living persons. They leaned on the Fourteenth Amendment, not the First, but if a corporation is a person, it has First Amendment rights, too.

    I agree this sucks, but it's hard to do anything about a century-old precedent.

    --

    To a Lisp hacker, XML is S-expressions in drag.
    1. Re:Unfortunately, he's correct... by Carmody · · Score: 1

      Thank you for the cite. I stand corrected.

      --
      God is real unless declared integer
  179. The cost of spam from an ISP point of view by ZarkDav · · Score: 3, Interesting

    I work for a medium-small ISP in FR. We host around 6500 domains and 150k mailboxes.

    Our abuse department is manned by one person 365 days a year, a bunch of scripts, a largish database integrated with our customers database, and lots of red tape. This person calls our customers when they are the source of spam or other non UCE conforming use of our network (including running an open-relay). He explains the situation politely and asks the customer to conform to the policy written in the contract. If the customer does not comply after the first warning, he must look for another ISP to do business with, for we send him an official letter (with official receipt acknowledgement)each time we interact with him.

    All in all, given our company size, a bit over 1% of our costs are burnt by our abuse department. Needless to say, we relay these costs to our customers, as do most of our competitors.

    This is only half of the cost of spam from our point of view. Our mail servers farm is sized in order to perform well even with 40% of the mail being spam. These are larger human and hardware costs associated with spam as well (though more diluted and thus difficult to pinpoint).

    Spam costs people and companies a lot of money, we feel the need for the Internet mail system to be reengineered in order for the cost of sending email to become high enough so that spammers don't get away with their offense.

    The Brightmail report is not a big surprise.

  180. Perhaps AOL email is that bad, by Lord+Kestrel · · Score: 2, Informative

    but inside corporations, it's more like 98% real email, and 2% jokes/spam/pr0n/whatever. Speaking from my experience (I receive upwards of 600 internal emails a day), almost all of it is work related. Email from the Internet isn't all non-spam, but spam is still only 2-4% of the email I receive.

  181. just for the heck of it by geekoid · · Score: 1

    I went to all my email accounts,work, home, public.

    I had a total of 121 emails sent to me in the last 24 hours. 12 were not spam.
    Now if I remove my public accout(the one I use for /.) from the list, I get 30 emails, 11 of which where not spam.

    I do have an account that only goes out to my 'trusted' sources. that account gets no spam.

    so based on my accounts, it is higher then 40%. except for my trusteed account.

    --
    The Kruger Dunning explains most post on /. http://en.wikipedia.org/wiki/Dunning%E2%80%93Kruger_effect
    1. Re:just for the heck of it by GnuPengwyn · · Score: 1

      *3/13/2003, 12:55:53: FETCH - 103 messages in the mailbox, 4 new

      Of those 4 only 1 was REAL!

      --
      Love Music? Got a Band? Are you a Label? http://garageradio.com
  182. Even Soylent Green is watered down... by duck_prime · · Score: 1
    soylent green is.... PEOPLE!?
    Actually these day's it's really about 40% people. If you look on the can it says "SOYLENT processed GREEN food spread".
  183. It is all hatred. by Anonymous Coward · · Score: 0

    All the 'propping up' of Israel does is to ensure that they can continue to steal land from their neighbours



    Which they have not done yet. The Golan Heights, for example, was taken by Israel after numerous attacks from Syria originating on this land. Israel has no incentive to give it back, as Syria still sticks to the "we will exterminate you" plan.


    "...who as a result aren't that keen on Israel."


    You have it backwards. The anti-semitism (hatred of Jewish people) goes back centuries in that area. The neighboring countries have killed far many more Palestinians than Israel has. The main reason they hate Israel is because it is a place where Jews are not mistreated.


    "But they're not, and they continue to perpetrate war crimes against civillians in the occupied territories"


    They don't. The Palestinian army is responsible for the vast majority of Palestinian deaths in the latest period of senseless aggression against Israel. (just today, a terrorist hid in a civilian area inviting Israeli retaliation.... 2 Palestinians dead, used as human shields by another evil-minded Palestinian soldier)


    "I'm just a humanist and a hater of land thieves and war criminals"


    You won't find those in Israel. Humanist? Talk about a phony discredited religion. You also forget that the Jews are the indiginous people of the area.

  184. Message count or bandwidth? by Anonymous Coward · · Score: 0

    40% by count, or 40% by volume? In my experience, spam is loaded with html, gif, and javascript content. Most of my legitimate mail is plain text. A single spam usually is larger than all the legitimate mail combined. I think the 40% statistic is misleadingly low.

  185. Re:Unfortunately, he's correct...Nope. by Anonymous Coward · · Score: 0

    Which was a hack.

    Corporate personhood

    Unequal Protection: The rise of corporate dominance and theft of human rights

    Like most things legal (and otherwise) things aren't as clear as people think. Slashdot BTW already covered this subject.

  186. Finish the sentence... by mccrew · · Score: 1
    It works very well. We now block almost all of the spam we receive and have not had ONE single false positive...

    ...that we know about.

    --
    Hey, Windows users, there is no such thing as "forward" slash, there is only slash and backslash.
    1. Re:Finish the sentence... by NetJunkie · · Score: 1

      Read my other reply to this thread from someone with a similar question.

  187. "Dictionary attacks" by YAN3D · · Score: 1
    On a recent afternoon, an unexpected spike suggested the work of spammers using one of their favorite new weapons, the "dictionary" attack.


    Upon further investigation, the spammers were not only using the new "dicionary" attack but were using the highly controversial "thesaurus" attack and the dreaded "encyclopedia" attack as well.


  188. Amazing Coincidences by de_boer_man · · Score: 0, Redundant

    Amazingly, Hormel's Spam Lunchmeat is 40% jellied fat.

    --
    .sig wanted. Inquire within.
  189. Re:90+ % when you have a hotmail account by Anonymous Coward · · Score: 0

    What AOL doesn't say is that the only reason they have to filter that much spam is because they sell their own users information. My email account recieves no spam and I do use my email address on certain websites. Screw AOL.

  190. Seems somewhat easy by shadowpuppy · · Score: 1

    I think there might be an solution here.

    1. Use a mail filter.
    2. Every once in a while enter the "I'm interested" email address or inlink into a database.
    3. Have a junk submission program send it some junk. For Nigerian scams you could forward them all your collected spam.

    Basically the idea is to keep out of you inbox and at the same time hurt the Spammer.

  191. Where is Microsoft's solution for its users? by aquarian · · Score: 1

    Spam is just one more area where Microsoft is neglecting their customers' needs. For all the years we've been on the internet, Microsoft has offered its users *nothing* but some rudimentary filters in Outlook Express and Outlook. As usual, this demonstrates that Microsoft *does not care* about its users.

    I've used several spam filtering systems, all of which work extremely well. Right now I'm using POPFilter with Outlook Express. It works great. The one thing that would make it perfect, and I mean perfect, is an automatic whitelist of my addressbook. I haven't bothered to try to do that because I'm not a MS/Win32 or Perl programmer. But there's no reason why this code, or some Win32 implementation of it, couldn't be incorporated into Outlook Express for the benefit of Joe User -- without usability problems.

    Again, these spam filters are very effective. Since Outlook Express is by far the most common mail client on the internet, building good spam filtering into it would stop most spam dead in its tracks. The only reason it flourishes is that most of it does get through, and getting it through is so easy and cheap. If this were made just a little harder, there would be a lot less incentive to try. The problem is, no one with any influence (MS and its users) is even putting up a fight.

    Blame Microsoft for falling down on the job -- again.

  192. Forward it to your Congressman by Anonymous Coward · · Score: 1, Interesting

    Look, until Congress got inundated with fax's years ago they were happy taking the Direct Marketing Association's money and ignoring the fact the everyone with a fax was wasting a lot of money on expensive paper and supplies. It was only when they were directly affected that they passed legislation to stop it.

    If billions are being wasted in time and equipment on this problem then that's a lot more than the DMA is paying them!

    2 rules to remember:

    1. Taking money from a group to ignore what they are doing isn't politics, it's a protection racket.
    2. When you take an oath of office and then place your self above your constituents that is treason.

    " Treason - A betrayal of trust or confidence."

    The best investment you could make is "donate" a few thousand dollars to a Congressman. Depending on your industry you could get millions back and a loophole so you have to pay little or no taxes!!

  193. Send your spam to someone who cares... by machinecraig · · Score: 1

    I know a guy who regularly registers for things with president@whitehouse.gov as the email. I wonder how their spam filter is working these days! :-)

  194. Spam is expensive by vanyel · · Score: 1

    I'm probably going to have to upgrade my mailserver, which is getting overloaded by filtering all the spam coming in. It's money I *definitely* don't need to spend otherwise. Is there any way for a class action suit to sue a class of offenders?

  195. A small suggestion by Ddl_Smurf · · Score: 1

    I found a rather simple way to fight spam, which over time has proven very effective : I bought a domain and hosting with unlimited pop inboxes. I use the catchall account (this way, I receive all mail sent to anything@mydomain.com). Then, when I subscribe to something, eg FakePortal.com, I give them fakeportal@mydomain.com. That way, I know who sent me mail by knowing the address it was sent to. And if I do get spam, I just create an email alias with that name redirecting mail to /dev/null... Something Ironic though, is that I got spam sent to aol@mydomain.com, which is the address I gave when I subscribed to aim... Maybe a script, maybe some spamees are spamers...

    --
    Bleh !
  196. Where's the petition? by Anonymous Coward · · Score: 0


    Talk is cheap.

    This change will take 100 years if people don't start petitioning for change.

    It will take HEAVY petitioning and lobbying of ISPs, Microsoft and other mail server developers and standards organizations before things will change.

    I have half a mind to get this started.

  197. Why don't I get spam ?!? by rhfrommn · · Score: 1, Flamebait

    I don't know how you people all get so much spam. Seriously!

    I don't do ANYTHING right according to what you are supposed to do to avoid spam. I use the same Yahoo account I've had for 6 or 7 years. My username is only 8 letters and contains both my initials and home state abbreviation in it. I use that address EVERY TIME I sign up for anything on the web or when I buy something online or whatever. My wife and sisters send me free greeting cards quite frequently using that address. I don't use Yahoo's "bulk mail" folder or "this is spam" button, and haven't turned on any filters.

    And still, I only get 2 or 3 pieces of spam a day, at worst. Compared to 10-20 legit pieces of mail.

    I don't get it? How am I magically not getting spammed when all the people who are so pissed about spam and are actively trying to protect themselves get tons of it? I'm not denying that OTHER people have major problems with spam, I'm just amazed that I don't and can't figure out why.

    ps. Please don't get pissed and add me to some spammer list or anything! I am seriously wondering what it is that makes me appaerntly immune to the problem. If I could figure it out maybe I'd have a useful suggestion for everybody else.

    --
    My motto is: Never give up - unless it's harder than you want it to be.
    1. Re:Why don't I get spam ?!? by Anonymous Coward · · Score: 2, Funny

      Whats your email address again?

  198. Ow! My head! by medscaper · · Score: 1
    It finally came out the other guys had done this, but the other store decided to make a promo out of it and honor the coupons anyways...backfiring on the others.

    Jesus Christ! ...And totally mangling the English language and all common sense in the process.

    --
    Any sufficiently well-organized Government is indistinguishable from bullshit.
  199. Spam harms the enviroment by Easy2RememberNick · · Score: 1

    If a program is running to filter Spam, then that means it is using power, if there was no spam then no need for the spam filter. So the time spent processing, filtering the spam is wasting electricity which is made by either conventional;coal, oil, gas, hydro or nuclear power plants. If most of the power plants use coal then that means more electricity is needed to power the computers running the progrmas to filter the spam, and that wasted power means that more coal or oil is burned which causes air pollution which in turn we breathe, or which cause global warming!

    I don't know if this is funny or serious.

  200. Spammers and SMB by mikecole · · Score: 2, Funny

    Has anyone else notice that most spammers use windows and leave their port 139 wide open? I have great fun deleting their files and sending them a good old smbnuke.

  201. Encrypted email address? by drfreak · · Score: 1

    This is just spontaneous speculation, but it seems that encrypting the email address itself may be an option. How about instead of sending someone your email address, you send along with it a PGP public key. That way, anyone who wants to send you email must have your public key to encrypt the email address with. SMTP server simply has your private key to decrypt all incoming email addresses with and only accepts the ones which are valid once decrypted. Did you give someone your public key you didn't want to give it to? Generate a new key pair and propogate it to the SMTP server and all trusted recipients. What do you think?

  202. Woes of Irregulation by Cruxus · · Score: 1

    [blatant troll]
    That 40% of all e-mail in the U.S. is now spam goes to show you what happens when people are left to their own devices. The same thing has happened in AIM's public chat rooms--tons of spam bots advertising porn, warez, outwar, etc.

    Technological action, filters, is not enough. Regulations that hit spammers in the bank account are the only way to force compliance out of these miscreants. We must be virulent against spammers routing their wares through overseas and anonymous servers. These loathsome perverters of technology need to be extracted from their lairs and delt with with all force needed to exterminate their faulty business practices.
    [/blant troll]

    (Cowers away from the libertarian response.)

    --
    On vit, on code et puis on meurt.
  203. what about snail mail? by greenrom · · Score: 1

    Not that I like spam or anything, but I wonder what percentage of snail mail is junk mail. I'm sure that over 40% of what goes into my mailbox is junk. In fact, just the offers for credit cards alone would be close to 40%. Yet for some reason, the junk mail doesn't bother me nearly as much as spam. I wonder why that is.

  204. Unless.... by Anonymous Coward · · Score: 0

    Your username is Xre91jve12v0q5X5nNpRN1

    1. Re:Unless.... by Carnivorous+Carrot · · Score: 1

      Thanks. You just fucked him over.

      --
      "Has [being a kidnapped teenage girl, raped repeatedly for months] changed you?" - Katie Couric to Elizabeth Smart
  205. But.. by Anonymous Coward · · Score: 0

    There are laws that limit their so called first admendment rights.

  206. I Told You So (tm) by gorbachev · · Score: 1

    Every anti-spammer has been saying the same sort of things for years now ("email will be destroyed, if spam is not killed").

    Funny how nobody ever listens to experts. About anything.

    Proletariat of the world, unite to kill ignorance

    --
    In Soviet Russia, I ruled you
    1. Re:I Told You So (tm) by Anonymous Coward · · Score: 0

      most common people ignore experts so they can yell at them when something goes wrong.

      ya know, like a newbie on the internet, signs up stuff on mailing lists and complains that his ISP does not filter and for WASTING his time.

  207. Spam filtering by Anonymous Coward · · Score: 0

    Now what we need is a central address to forward the headers of our spam to.

    These headers are fed through the current set of spam filters and the ones which sneak through used to improve the rule set. From time to time a batch of legitimate mail is used to check that the system hasn't outlawed all addresses containing @aol.com (again).

    Paying clients (TANSTAAFL) can download the latest rule set to minimise the spam leaking onto their network.

    Alternatively, we could all agree not to buy anything from a spammer - ever.

    A.C.

    P.S. Does AOL really stand for Any Old Lamer??

  208. Where's that spam contest? by Vadim+Makarov · · Score: 1
    A year ago, there was a contest for poems composed of spam.

    A year ago, spam titles were kinda fun to read.

    Today, they're all like hasty business notes from dyslexic employees of a big American company.

    The spam war ruined my day.

    --
    17779 eligible voters in a district, 17779 'vote' as one. This is Russia.
  209. Telemarketing and Spam by Anonymous Coward · · Score: 1, Interesting

    Recently, American President Bush signed into law making it illegal, punishable by up to an $11,000 fine, for a telemarketer to call any household on the do not call list. Further, a federal database of no-call numbers was created and made free to join. Story at http://yro.slashdot.org/article.pl?sid=03/03/11/20 31247&mode=thread&tid=158&tid=103

    Why could the same principle not be given to spam? Of course this would not apply to spammers from other countries, but it is a start. Just because it is not a total solution does not mean that it shouldn't be done.

  210. I said "ish" by UberQwerty · · Score: 1

    This works until one of your friends enters your email address into a form on the web (say to send you a electronic birthday card) and it gets added to a spammers list...

    I suggest anyone who uses my idea cut down on the potential leaks by having very few friends.

    But seriously, I'm not an idiot. I know there are ways around my little scheme. That's why I said 100%-ish and not 100%.

    I've had this setup for about a year now and it has worked at literally 100% for me, but then, I have very few friends. And hey, if spammers get my current e-mail address, I'll just change it and get another spam-free year (I hope).

    --


    PUBLIC SPLIT ON WHETHER BUSH IS A DIVIDER -CNN scrolling banner, 10/15/2004
  211. Do spammers really get much business tho? by TooTrueTroubs · · Score: 1

    We're all getting these spams every damn day - god knows my own spam-to-legit mail ratio is getting riddiculous, I'm probably on around 80-90% spam at this point on a business email address I've had for 4 years. But every time I get spam I just delete the fucker - which is what most people do I assume.... I just can't imagine that these chumps would actually get any business at all, or at least not enough to justify their time in front of the computer - has anyone got any info on how much money these guys can actually make from this?

  212. What are they actually counting? by Anonymous Coward · · Score: 0

    I wonder if they are including as spam all the legimite email ISPs like AOL are incorrectly blocking? What kind of world is this when ISPs can, without permission of their customers, block email from friends and family members?

  213. The best part is ... by Anonymous Coward · · Score: 0

    Even before this if you didn't hand out your email address, picked something that was not a common name or word, you rarely got any spam.

    The only crud that made it through was for those annoying fake diplomas, which I suspected where doing dictionary and other attacks.

    The annoying part was that the spammers used brake tags, and I couldn't get yahoo's filters to block it. I would also bet that was why the spammers stated using them, it was so easy to block the keyword "diploma" instead of "html break a, html break c" etc. They also removed said keyword from their subject line.

    This only lasted for about a week, I haven't seen any spam since then.

  214. Spam ain't so bad by Carnivorous+Carrot · · Score: 1

    Actually, Spam isn't so bad.

    If you really wanna scare the holy hell out of yourself, check out the ingredients in Armour Potted Meat Product.

    My wife got a can of this stuff to reminisce the days when her sargeant daddy used to feed her this stuff on crackers. We...didn't like how it tasted too much. Upon looking at the ingredients, we got queasy.

    There was a web site with ingredients and I recall seeing a scan of this product.

    I'm still mad that I can't find Underwood Beef Spread down here, and must go "up north" to find it. Oh, the chicken and devilled ham are omnipresent, but not the tasty beef that I reminisce from my childhood.

    (Oh, and to the percent per cent guy, percent is the preferred, although it is still proper to also use per cent.)

    --
    "Has [being a kidnapped teenage girl, raped repeatedly for months] changed you?" - Katie Couric to Elizabeth Smart
    1. Re:Spam ain't so bad by stanmann · · Score: 1

      Ok, that is just straight disgusting armour meat spread ingredients

      --
      Food not Bombs is a nice platitude but it breaks down when you notice that the Bombees are usually well fed
  215. Whatever happened to that website by Carnivorous+Carrot · · Score: 1

    There used to be a website that would look up the personal information of the spammers and publish it.

    I remember reading about one teenager, and they published his father's company phone number and said, "If you wanna ask his father why he does this, here's his number."

    Another spammer had an anti-spammer break in and find topless photos of the spammer (a female.)

    Needless to say these might be illegal, but are they still around?

    --
    "Has [being a kidnapped teenage girl, raped repeatedly for months] changed you?" - Katie Couric to Elizabeth Smart
    1. Re:Whatever happened to that website by Anonymous Coward · · Score: 0

      That would be the infamous Rodona Garst. More info
      Here

      And the topless photo (not for those of a nervous disposition):
      Rodona Garst Breast Size

  216. Hotmail by Anonymous Coward · · Score: 0

    Today I tried to send an email from hotmail and received an "Undeliverable Mail" reply (from hotmail mind you). Where did hotmail put that message? In my junk folder.

  217. Error-free spam-reduction technique by UpnAtom · · Score: 1

    I looked at an old email account which had 400+ messages, 99% spam.

    It doesn't seem difficult to create an email account that would accumulate 100% pure spam. If ISPs did this, they could block all this spam from their users.

    Not sure if this is a new idea.

  218. Not terribly accurate by silvwolf · · Score: 1

    I help run a mailing list for my car club on a friend's cable modem.. At the time, there were about 500 users between the direct mail and the digest versions of the list. Roughly 10% were AOL users. A couple years ago, AOL users just stopped getting email. Everything in the logs looked normal. As far as we could tell, AOL was accepting the email, but users weren't getting it. AOL was just sending them off to /dev/null without telling anyone. After about a year of this, we took the AOL users out of the subscription lists, and still don't have any in there.

    This is just your normal majordomo list... confirmation email is required before you start getting list email, list and server owner addresses are read, footer at the bottom of each message gives info on unsubscribing, and we have a FAQ on the website. Sendmail wasn't relaying any messages. We never did figure out why AOL decided to block us.

    1. Re:Not terribly accurate by Anonymous Coward · · Score: 0

      We never did figure out why AOL decided to block us

      Evidently asking them never occured to you.

  219. Spamgourmet allows you to generalize this. by SysKoll · · Score: 1

    UberQuerty, this is an efficient technique. Me, I found that even friends can sometimes compromize my "good" email address by entering it in one of these email postcard websites that are generally big email addresses collectors.

    So I give everyone (including friends) revokable addresses from spamgourmet and I invalidate selectively the addresses that start getting spammed. SG forwards me all emails to a secret account.

    As per dictionary attack, they'll be extremely unlikely to succeed against these addresses considering the precautions you can choose to use on SG, such as keywords.

    -- SysKoll
    --

    --
    Mad science! Robots! Underwear! Cute girls! Full comic online! http://www.girlgeniusonline.com/

  220. Yep. How does 91% sound? by SysKoll · · Score: 1

    Well, I am a satisfied user of Spamgourmet.com. This site has a nice little stat: 91% of the email it gets is spam. And therefore destroyed.

    Granted, spamgourmet addresses are disposable and are generally given to mail-order web sites or other web-based suppliers, who are likely to spam you or to refuse to ever take you off their mailing lists (which is also unwanted mass mailing, hence spam). So it's hard to generalize this example to the whole Internet.

    Still, it's a rather sobering amount. So the 40% figure is prolly optimistic indeed.

    -- SysKoll
    --

    --
    Mad science! Robots! Underwear! Cute girls! Full comic online! http://www.girlgeniusonline.com/

  221. Effective? YES. by SysKoll · · Score: 1

    Angle_slam, I am a satisfied user of SpamGourmet.com ( described here) and sneakemail.com ( described here). My favorite is SG and I really want to help it getting well known (it is free and open-source too).

    My experience: sneakemail is good for one-time communications or automated services. It creates addresses that are a random string, and this jumble of letters and numbers is very hard to memorize or to simply dictate over the phone.

    So you should never use sneakemail for generating email addresses that are also account names (e.g., sites such as amazon that identify you through your email address), because you'll not be able to remember them. Also, don't use them to give to people over the phone.

    Spamgourmet allows you to pick a user name and then to create addresses of the form word1.word2.username@spamgourmet.com, with a possible extra prefix to avoid dictionary attacks. So if your user name is Joe6Pack, and sleazy.com wants you to register, give them something like sleazy.reg.Joe6Pack@spamgourmt.com that you'll be able to remember and that will be easy to trace. If sleazy.com starts spamming you, you just disable the address.

    I tried several disposable services, and my favorite are spamgourmet and sneakemail, in that order.

    Make sure you pick a new, secret, never used address to forward the emails received by these services.

    Did I mention I have absolutely ZERO spam since I started using these services? Of course I had to get rid of my old address that was spammed to death.

    -- SysKoll
    --

    --
    Mad science! Robots! Underwear! Cute girls! Full comic online! http://www.girlgeniusonline.com/

  222. ''90% of statistics are made up'' by Convergence · · Score: 1

    You went through all 5824 messages to confirm they were spam? If not, then what you said is false. Rather, you have a statistics that says not that 69.89% of your mail is spam, but that spamassassin thinks that 69.89% of your email is spam. The actual amount of spam could be higher or lower than that, indicating false positives or false negatives.

    You're not the only one to make this sort of a false claim.

    1. Re:''90% of statistics are made up'' by Zaknafein500 · · Score: 1

      False claim? There is an error margin in every statistic. SA 2.50 is amazingly accurate. We have 0 false-positives, and very few false-negatives. In my estimation, the numbers I quoted above are accurate to about 2%.

      --

      "The guide is definitive, reality is frequently inaccurate."
  223. And 80% of /. articles are... by UncleRage · · Score: 1

    redundant.

    http://yro.slashdot.org/article.pl?sid=03/03/11/ 22 3248&mode=thread&tid=109&tid=111

    http://slashdot.org/article.pl?sid=03/03/09/1447 21 3&mode=thread&tid=111

    http://yro.slashdot.org/article.pl?sid=03/03/06/ 20 28250&mode=thread&tid=111

    http://yro.slashdot.org/article.pl?sid=03/03/06/ 20 28250&mode=thread&tid=111

    http://yro.slashdot.org/article.pl?sid=03/03/06/ 01 25250&mode=thread&tid=111&tid=95&tid=1 20

    http://slashdot.org/article.pl?sid=03/03/05/0545 22 6&mode=thread&tid=111

    http://interviews.slashdot.org/article.pl?sid=03 /0 3/03/1528247&mode=thread&tid=111&tid=9 5

    http://slashdot.org/article.pl?sid=03/03/02/1415 25 7&mode=thread&tid=111

    http://yro.slashdot.org/article.pl?sid=03/03/01/ 21 53201&mode=thread&tid=111

    The above are ./ articles specifically related to spam, this month alone.

    Will someone please come up w/ a Slashdot Spam Article Filter?

    --
    #SickNotWeak
  224. where's the legislation? by doggo · · Score: 1

    I wish our government would address some of the real threats to our country, like this. Basically our email accounts are constantly under attack by what amounts to terrorists, the spammers. If you follow the jargon, everything that the government doesn't like is "terrorism". How about they fight the "terrorism" that is spam?

    If George had to wade through a hundred or so spam emails a day to get to the stuff he really needs to read, maybe he'd jump on the bandwagon. Unfortunately, he strikes me as the kind who doesn't use a computer much, if at all.

    'Course if he did, we'd be sending thousands of taxpayer dollars to Nigeria in an attempt to help Mr. William Ngongo get that surplus cash out of the country, making a tidy profit on our assistance. And we'd probably notice that Mr. Bush's pants would have a strangely large bulge in the crotch, and that his breasts seem to be getting larger. But at least the government would be free of credit card debt at last!

  225. Sarxpam Scourge by Anonymous Coward · · Score: 0

    This is the official notification of the Campaign to Raise Awareness of Sarxpam Scourge (CRASS) (sarxpam: unsolicited and unwanted sexually-oriented E-mail). Maybe some enterprising soul can think of something to actually do about it (I'm too busy unclogging my mailbox).

  226. "I'm A Conservative" by Anonymous Coward · · Score: 0

    I used to lead a quiet life
    In fact it was a bare existence
    I passed out on many floors
    I don't do that any more

    Hello my friends
    Is everybody happy?
    Hey look me over
    Lend me an ear
    I'm a conservative

    I like the small black marks on my hands
    I'm a conservative
    I like the crazy girls that I screw
    Hey I know them all well

    And when I run out of bread I laugh
    All the way to the bank
    Sometimes I pause for a drink
    Conservatism ain't no easy job

    I smile in the mornings
    I live without a care
    Nothing is denied me
    And nothing ever hurts

    I got bored so I'm making my millions
    When you're conservative you get a better break
    You're always on the right side
    When you're conservative

    You walk with pride
    Pride is on your side
    Pride pride pride
    Is on our side
    Oh boy
    Pride is on our side

    I like my beer
    I like my bread
    I love my girl
    I love my head

    I'm in the clear man
    I'm in the dear
    Because I'm a conservative
    I'm a conservative
    I really am
    Oh yes I am

    And it would mean so much to me
    If you would only be like me
    Yes it could mean so much to me

    Hey look me over
    Lend me an ear
    I'm a conservative

    -- Iggy Pop "I'm A Conservative"

  227. Last Post! by alpg · · Score: 0

    Except for Great Britain. According to ISO 9166 and Internet reality
    Great Britain's toplevel domain should be _gb_. Instead, Great Britain
    and Nortern Ireland (the United Kingdom) use the toplevel domain _uk_.
    They drive on the wrong side of the road, too.
    -- PERL book (or DNS and BIND book)

    - this post brought to you by the Automated Last Post Generator...