Slashdot Mirror


I, Spammer

PCOL writes "The Washington Post is reporting on testimony before the Senate Committee on Commerce, Science and Transportation by Ronald Scelson, an eighth-grade dropout and self-taught computer programmer from Louisiana, who claims that he sends between 120 million and 180 million e-mails every 12 hours, that he can break sophisticated software filters 24 hours after they are deployed, and that he has no choice but to resort to forging the sender information in his bulk e-mail so he can be anonymous and maintain his connection to the Internet. He added that he obtained all his addresses legally and that AOL gladly sold him the company's entire customer directory which Ted Leonsis, vice chairman of AOL, did not deny." It's a tough life. Here's another story about the Senate committee meeting.

138 of 730 comments (clear)

  1. Uhhh.. by gurnb · · Score: 4, Funny
    "Mr. Leonsis, are you a spammer?" McCain asked.

    Leonsis, who had testified minutes earlier about how AOL was blocking 2.4 billion pieces of spam per day, did not answer directly.

    "We let members opt out" of commercial messages sent by the company and affiliates, he said. And he accused Scelson of violating the company's "terms of use" agreement by using AOL's membership directory as a source for e-mail addresses. Scelson readily agreed.


    Hello Pot, this is the kettle, you're black!!

    AOL is a bigger part of the problem vs being a bigger part of the solution.

    With great power, comes great responsibility.

    --
    "This must be a Thursday, I never could get the hang of Thursdays."
    1. Re:Uhhh.. by UCRowerG · · Score: 3, Insightful
      Hello Pot, this is the kettle, you're black!!

      Yes, AOL sends commercial messages to its members, but it doesn't spam the rest of the world too -- a perhaps small but significant difference. They do offer a "check here to opt-out of commercial messages" mechanism, but it auto-resets itself after a period of time.

      Hmmmm.... AOL blocks 2.4 billion spams a day. I wonder how many the company generates itself to send to its own members.

    2. Re:Uhhh.. by David_W · · Score: 5, Insightful
      Does the never ending stream of AOL CD's mailed in the post not count as spam?

      No, it doesn't. Spam is unsolicited e-mail. What AOL does has been going on for long before the term spam came around. It is also different in that there's no forgery, you can return it to sender, etc. Whether AOL should be sending out tons of CDs is certainly debatable, but it is something different from spam.

    3. Re:Uhhh.. by The_K4 · · Score: 5, Funny

      Actually, have you ever tried to write RETURN TO SENDER on a AOL-mailed CD?
      The post office won't return it.

      Ever taken a bunch of them down to the post office and sent to back certified mail (and request delivery confirmation>?
      AOL sends you a Cease and Desist letter.

      I'm serious, some friends and I did this in college because we were bored.

    4. Re:Uhhh.. by Anonymous Coward · · Score: 2, Funny

      So why don't you just send them a Cease and Desist letter?

    5. Re:Uhhh.. by Dr+Caleb · · Score: 4, Funny
      If it walks like a duck, and quacks like a duck

      It might have Mad Cow Disease.

      --
      "History doesn't repeat itself, but it does rhyme." Mark Twain
    6. Re:Uhhh.. by gallen1234 · · Score: 4, Informative

      So turn the tables on them. That's what USPS Form 1500, Application for Listing & Prohibitory Order (pdf), is for.

    7. Re:Uhhh.. by Spudley · · Score: 2, Funny

      Yes, AOL sends commercial messages to its members, but it doesn't spam the rest of the world too...

      [AOL] "Wha-?! You mean there's people using email *outside* of AOL?? That must mean they didn't get our CDs then! Did we miss someone?"

      --
      (Spudley Strikes Again!)
    8. Re:Uhhh.. by cioxx · · Score: 4, Funny
      That's what USPS Form 1500, Application for Listing & Prohibitory Order (pdf), is for.

      Maybe not. The application states:

      "The attached mailpiece, from the mailer identified below, offers for sale matter that I believe to be erotically arousing or sexually provocative and therefore is a pandering advertisement. Under the provisions of 39 USC 3008, I request that a Prohibitory Order be issued against the mailer and the mailer's agents or assigns."

      Unless you use the AOL CD as an artificial vagina, you won't get far with that application.
    9. Re:Uhhh.. by mark_lybarger · · Score: 2, Insightful

      offers for sale matter that I believe ...

      actually, from the working that you quoted, it's appears to be up to the discression of the person requesting the prohibitory order.

      when it stops aol cd's it has gots to be a good thing, when it lets RIAA request and get your Verizon logs b/c they suspect you to be trading songs, then it's a bad thing. lovely how EVERY coin had at least two sides...

      oh yeah, and on the original topic. aol selling member lists is completely WRONG, but does /. sell user info? not yet? not that we're told?

    10. Re:Uhhh.. by shayne321 · · Score: 5, Informative

      Unless you use the AOL CD as an artificial vagina, you won't get far with that application.

      Wrong! Go read this page. Go ahead, I'll wait.

      Now, pay special attention to these sections (emphasis mine):

      a. Whoever for himself, or by his agents or assigns, mails or causes to be mailed any pandering advertisement which offers for sale matter which the addressee in his sole discretion believes to be erotically arousing or sexually provocative shall be subject to an order of the Postal Service to refrain from further mailings of such materials to designated addresses thereof.

      ...and...

      Both the absoluteness of the citizen's right under 4009 and its finality are essential; what may not be provocative to one person may well be to another. In operative effect the power of the householder under the statute is unlimited; he may prohibit the mailing of a dry goods catalog because he objects to the contents or indeed the text of the language touting the merchandise. Congress provided this sweeping power not only to protect privacy but to avoid possible constitutional questions that might arise from vesting the power to make any discretionary evaluation of the material in a governmental official.

      It is not up to the post office to decide that you can't get aroused by AOL CD's.. In a nutshell, what's offensive to you may be miles apart from what's offensive to me, so the Supreme Court decided it's not up to the postoffice to make the judgement call. If you deem it offensive, form 1500 applies.

      I've used it successfully to stop CitiBank's incessant bombardment of "you're pre-approved" credit card offers (I was litterally getting 3 a day for a while). Try it, it works.

      Shayne

      --
      Today I didn't even have to use my AK; I got to say it was a good day -- Icecube
    11. Re:Uhhh.. by msblack · · Score: 2, Informative

      Actually, under 38 US 3008, et seq, the law lets you, the recipient determine what is erotically arousing or sexually provacative. The postmaster is prohibited from making this interpretation. I used this form 1500 to get off of the weekly Pennysaver mailing.

      --
      signature pending slashdot approval
  2. Dang it, there goes my stomach lining... by Saint+Aardvark · · Score: 5, Interesting
    "This is censorship," he said, arguing that both anti-spam vigilantes and Internet providers that filter out spam are depriving people of their right to see their mail.

    Dear God, I hope the committee saw through this pathetic little charade. Last time I checked, I had no oblighation to pay to receive advertising; I had no right to force others to pay the cost of carrying that advertising; I had no right to force others to put up with the deluge of complaints about that advertising.

    And if he's right about AOL selling him their membership list and spamming their members (and AOL VP Leonsis' weasel words about "letting members opting out" does nothing to make me think otherwise), all that means is there are two assholes there instead of one. It doesn't give him any moral high ground.

    But at least there's the proposal for a "federal antispam SWAT team". I'd pay good money to see a live video stream of that take-down.

    1. Re:Dang it, there goes my stomach lining... by Strange+Ranger · · Score: 4, Insightful

      >But at least there's the proposal for a "federal antispam SWAT team". I'd pay good money to see a live video stream of that take-down.

      I hate to say it, but I hope the SWAT team proposal fails. How will the Federal SWAT team know who to raid? If they can trace a spammer they can trace activists, dissidents, anybody who might be a terrorist, they can trace anybody. Sure they can do it now to a large degree, but if there's a Federal SWAT team they'll need access to some sort of system right? Something like the Terrorist Information Awareness network or Carnivore but geared specifically towards email and only email. The SWAT team has to be efficient right? Mistakes would make them look real bad.

      The worst thing spammers will do is cause even more loss of privacy, loss of open mail relays, and an increase of government monitoring of email.

      I'm not entirely sure but I think for now I'd rather wear out my delete key a bit more and wait for better technical solutions. The legal solutions are just much too likely to be worse than the problem.

      --

      Operator, give me the number for 911!
    2. Re:Dang it, there goes my stomach lining... by Dark+Paladin · · Score: 5, Interesting

      For me, the key word is "pay for spam".

      One of the reasons why sending advertisements over the Fax is now illegal (without prior authorization, etc, etc, etc) is because it costs *me* money to recieve *your* ad.

      In the case of bulk snail mail, 100% of the costs (if you don't include me physically picking up the mail, looking at it, and tearing the latest "Want a 0% interest credit card that jumps to 30% later?" envelope as cost) is payed by the sender.

      In the case of a fax, *I* pay the paper, toner, etc. So even at $0.01 per ad, if it wasn't stopped I could wind up paying hundreds/thousands a year for the honor of recieving ads.

      In the case of spam email, I believe that the same conditions apply. While I might not pay directly $0.01 per "spam email sent", I am paying by having my web space taken up (for those with ISP's that limit their mail boxes to 5 - 10 MB). And if my business relies on emails, *your* spam interferes with my ability to do work, thereby costing me money.

      Add in that most spammers forge their address, hijack (or at least use without permission "open relays" (who should be closed anyway, yes, I'm looking at you, China, Korea, and any other country who's causing this problem)) other people's mail servers (thereby costing the mail server money they did not want to spend on bandwidth, storage, processor, etc).

      I should hope that the Senate should make a very simple anti-spam plan:

      If you send an unwanted email as an advertisement, you must have a method of truly getting someone off of the list.

      If you sell the email addresses of your clients, you should be required to state to whom they have been sold so you can opt out *before* you get spam mail.

      There should be a "national opt-out" spam list that all spam senders must check before sending a message.

      Violating these agreements, or sending another message after the user has "opted out" is punishable by a $1000 fine per email sent.

    3. Re:Dang it, there goes my stomach lining... by why-is-it · · Score: 5, Insightful

      There should be a "national opt-out" spam list that all spam senders must check before sending a message.

      If such a list existed, you can bet your bottom dollar that every spammer will pay very close attention to it. It would be a list of 100% valid email addresses! Normally they would have to pay for lists of email addresses, and here is one that is free and guaranteed to be accurate.

      The spammer could then fire up the spambox which is conveniently located outside of the US, bounce the spam off of an open relay in the Far East, and it would be business as usual.

      If anyone out there believes that the spammers are honest and trustworthy, they deserve all the viagra, penis/breast enlargement/pr0n spam they get in their inbox...

      --
      *** Where are we going? And what's with this handbasket?
    4. Re:Dang it, there goes my stomach lining... by Alan · · Score: 2, Funny

      I agree with most of your points, but the problem with mandating spam to include an opt out link (which I think most "legit" spam does) is that there will still be people that use the remove@ messages to harvest "live" email addresses. I tell people these days to *never* reply to spam, no matter what it says, simply because chances are better that way.

      Even if all "legit" spams did this, it only takes one person to start harvesting this way and the whole thing completely looses it's meaning. And when you're in a business where a) following the rules and b) annoying people is required, providing opt-out really isn't in your best interests.

      Personally I think the only way to deal with this is public execution of one spammer a week on live TV until either a) they're all gone (may have to increase the frequency a bit for that) or b) the rest get the picture.

      Either way it'd be fun :)

    5. Re:Dang it, there goes my stomach lining... by realdpk · · Score: 2, Interesting

      I've been checking - most of the spam I get is actually from Windows boxes that don't have port 25 open (or other proxy ports). On some of them, the ones that invited me in (because they spammed me, ;) ), I've been able to look around. I've found the usual spyware - Gator, KaZaa, etc. I'm not sure if any of those allow the companies to send spam from 'doze boxes, but it sure wouldn't surprise me.

    6. Re:Dang it, there goes my stomach lining... by KC7GR · · Score: 5, Insightful

      Opt-out is a cop-out. Why should ANYone ever be required to opt-out of any E-mail list that they never opted into in the first place?

      You, like many others (thieving parasites like Scelson included), are still overlooking one critical fact:

      The Internet is not now, nor has it ever been, a truly "public" resource. Nobody in the government pays me any subsidy to operate my servers, and I don't know of any ISPs in the U.S. that are receiving any similar subsidies.

      I pay, out of my own pocket, for the electricity and bandwidth that my servers require to work as they do, just as anyone from a mom-n'-pop ISP to a giant like Earthlink pays for the electricity and bandwidth to run theirs.

      In each case, whether you're a single individual or a multinational conglomerate, or anywhere in between, your servers are YOUR PRIVATE PROPERTY, along with the mailboxes on them. You might rent them to others, as ISPs do, but the only guarantee that ANYone has in terms of sending and receiving mail is whatever guarantees are in the contract that gets signed between an Internet provider and their customers.

      When spammers spam, they're violating private property rights. Period. When someone spams me, or one of my other users, they're STEALING from me. When someone spams AOL, they're stealing from AOL and its users. When someone spams ANYone with a 'net-connected system, it is theft of resources. Period.

      I will do whatever it takes to protect my systems from such intrusions. If that means risking the loss or delay of some legitimate E-mail, so be it.

      Apparently, AOL is taking a similar path. That's fine. They have absolute and final authority over their own equipment. Scelson can scream "censorship!" all he wants, but he still has no right to mail to someone else's network if they don't want to receive his (or any other spammer's) crap.

      --

      Bruce Lane, KC7GR,

      Blue Feather Technologies

    7. Re:Dang it, there goes my stomach lining... by Eelis · · Score: 5, Insightful

      This national database could store irreversible hashes of the addresses. This way it would not be possible to extract addresses from the database, while it would still be possible to check whether some address is present in it.

    8. Re:Dang it, there goes my stomach lining... by hymie3 · · Score: 4, Insightful

      If such a list existed, you can bet your bottom dollar that every spammer will pay very close attention to it. It would be a list of 100% valid email addresses! Normally they would have to pay for lists of email addresses, and here is one that is free and guaranteed to be accurate.

      In order for unsolicited *commercial* email (read: spam) to be effective, there *must* be a product/service to purchase and a method to contact the seller.

      Yell at/Fine the seller. They will know which campaign did the spamming. Then fine the spammer.

      In order for the spammer (or the company the spammer is spamming for) to get my money, they have to provide a way for me to contact them. It doesn't matter if they use open relays on Mars, they still, ultimately, have to provide a method for me to contact them.

      That means that a national opt-out list, coupled with a spambounty (or some other kill-the-spammer type legislation) *would* matter, and it would *not* be business as usual.

    9. Re:Dang it, there goes my stomach lining... by cybermace5 · · Score: 3, Interesting

      I work for a company that prints mass quantities of "direct mail." The cost factor is one of the things that keeps my conscience relatively clean: our customers pay for everything. Research, package layout, list maintenance, materials, printing, postage. And the return rate makes it all worthwhile to them. But the DM News magazines still claim "innovative" email solutions, and my company was considering getting into mass email. I doubt they will now, it's just not possible for a spammer to be REALLY successful unless they are mobile, anonymous, and willing to sidestep a few laws.

      I have an interesting question though: if receiving spam cost you money because you pay for bandwidth, what about other advertising? How much do you pay for the time commercials are shown on cable channels? How much money per month is spent on electricity, during the times when the TV is being used to display advertisements in your home? How much is your time worth?

      --
      ...
    10. Re:Dang it, there goes my stomach lining... by phallstrom · · Score: 3, Insightful
      In the case of bulk snail mail, 100% of the costs (if you don't include me physically picking up the mail, looking at it, and tearing the latest "Want a 0% interest credit card that jumps to 30% later?" envelope as cost) is payed by the sender.


      Do what I do... if it comes with a "no postage necessary" return envelope, tear it up, put it in the envelope and mail it back to them. I asked the post office if they minded and they said nope, they get paid...

      seems if enough people did this then the signal to noise ratio would be high enough that maybe just maybe they'd stop.

      in any event, it sure makes me feel better.
    11. Re:Dang it, there goes my stomach lining... by dubious9 · · Score: 3, Insightful

      Still a problem. You can verify your list of emails, or write a brute force program that will keep track of all emails that are verified by the address. a@aol.com aa@aol.com ab@aol.com and see which ones are in the directory.

      These verified email addys would then be sold from spammer to spammer and eventually most of the database will be cracked and valid email addresses known.

      It just won't work until there is an enforcable penalty and since most get routed outside the US, a nospam list will never be a solution (unless ratified by the world, heh).

      Better to scrap the current email protocols and develop a new one that enforces accountability. Don't ask me how this'll work, but I think it the best solution out there.

      --
      Why, o why must the sky fall when I've learned to fly?
  3. Pretty simple by Paddyish · · Score: 5, Funny

    while ($AOL)
    { $AOL=shoot_self_in_foot(with_gun);}

    1. Re:Pretty simple by Paddyish · · Score: 2, Funny

      Overwriting AOL with a bullet-riddled and mangled apendage would probably have a positive effect on the company as a whole...

  4. FYI incaseof /. fx by Anonymous Coward · · Score: 3, Informative

    By Jonathan Krim
    Washington Post Staff Writer
    Thursday, May 22, 2003; Page A01

    As a Senate committee sought answers yesterday on how to curb the overwhelming surge of junk e-mail, one of the nation's most notorious spammers told members just how hard their job would be.

    Ronald Scelson, an eighth-grade dropout and self-taught computer programmer from Louisiana, riveted the Commerce Committee hearing room as he explained that he sends between 120 million and 180 million e-mails every 12 hours.

    He boasted that in 24 hours he could crack sophisticated software filters designed to block spam.

    And he accused Internet providers of hypocrisy in claiming to want to protect their customers from unsolicited messages.

    Large Internet companies spam their own members, he said, while other network access providers have signed contracts allowing known spammers to send out mass e-mail.

    "I'm probably the most hated person in this room," said an unapologetic Scelson, responding to a parade of technology, government and marketing officials who decried the purveyors of junk e-mail.

    Scelson and eight other witnesses testified as Congress grapples with what Sen. Conrad Burns (R-Mont.) called a tide of "digital dreck" that threatens e-mail communication, one of the most powerful tools of the Internet age.

    With spam now costing U.S. businesses upwards of $10 billion a year, Sen. Ron Wyden (D-Ore.), who is co-sponsoring an anti-spam bill with Burns, said it was time for Congress to stop dawdling and pass federal legislation.

    All of the witnesses agreed that spam is a complex problem that defies an easy fix. But as executives from leading software companies and online providers fidgeted uncomfortably, the man known to anti-spam tracking groups as the "Cajun Spammer" described how he easily acquires millions of e-mail addresses from publicly available member directories at America Online and other providers.

    Moreover, he said, "the same people complaining about spam send e-mail" with solicitations for their own products and services. "AOL spams its members," he said.

    This prompted the committee chairman, Sen. John McCain (R-Ariz.), to turn to Ted Leonsis, vice president of AOL.

    "Mr. Leonsis, are you a spammer?" McCain asked.

    Leonsis, who had testified minutes earlier about how AOL was blocking 2.4 billion pieces of spam per day, did not answer directly.

    "We let members opt out" of commercial messages sent by the company and affiliates, he said. And he accused Scelson of violating the company's "terms of use" agreement by using AOL's membership directory as a source for e-mail addresses. Scelson readily agreed.

    Scelson also testified about how some Internet access providers signed little-known agreements, called "pink contracts," with known spammers to allow them to send mail in bulk, at prices higher than other commercial clients were charged.

    Although the contracts mandated that bulk e-mailers abide by all state laws, Scelson said it did not matter if the e-mailers followed the rules. Most of the providers rip up the contracts and kick spammers off their systems after being threatened by anti-spam organizations that track mass e-mailers and put them on blacklists.

    As a result, Scelson said, he has had no choice but to resort to forging the sender information in his bulk e-mail so he can be anonymous and maintain his connection to the Internet.

    "This is censorship," he said, arguing that both anti-spam vigilantes and Internet providers that filter out spam are depriving people of their right to see their mail.

    "People still buy this stuff," he said, claiming that his clients get a response rate to his e-mail of 1 to 2 percent.

    Scelson, who said he does not distribute mail containing pornography, said one of his biggest clients sells a package of anti-virus computer software called Norton SystemWorks at cut-rate prices.

    Officials at Symantec Inc., which makes the Norton software

    1. Re:FYI incaseof /. fx by Turing+Machine · · Score: 5, Funny

      "I'm probably the most hated person in this room," said an unapologetic Scelson

      An impressive claim, considering that he was testifying before Congress.

    2. Re:FYI incaseof /. fx by DogIsMyCoprocessor · · Score: 5, Insightful

      Can we stop with the cut-and-paste of text from the WaPo site? The site seems to be extremely well architected to handle high demand, and has never been Slashdotted as far as I know.

      --

      "And this is my boy, Sherman. Speak, Sherman." "Hello." "Good boy."

    3. Re:FYI incaseof /. fx by DogIsMyCoprocessor · · Score: 3, Funny

      Ooops, should have said copy and paste, since it looks like the WaPo article is still there.

      --

      "And this is my boy, Sherman. Speak, Sherman." "Hello." "Good boy."

  5. Just a few by DreamerFi · · Score: 4, Insightful

    This sort of confirms that most spam is sent by a small group. Take this sucker out, and a massive amount of spam drops off the planet. Do it with enough prejudice, just to make sure nobody takes over the vacancy.

    1. Re:Just a few by BrookHarty · · Score: 2, Interesting

      Actually, this is a Bad idea, this is why we have laws against people posting addresses for doctors at abortion clinics.

      While I hate spam, I think Ronald Scelson is on the right track. He wants to send spam with correct headers, make all spam use [ADV] and let the user filter spam. Seems a win/win solution. No need for black lists, just create a little client side filter [ADV*] -> Trash. Then the people who want discounts on software, or whatever can be part of the 1-2% that actually buy from spam.

      Of course, why Ronald Scelson isn't using [ADV] type tags already is a slap in the face. Spamers should team up and start everything they can to do things legit, before we start legislating them into the history books.

      Also on opt-out, You don't even need opt-out if you have [ADV] tags. Thou nice to have opt-out, the power to filter correctly is more important (imho)...

      He who fights with monsters might take care lest he thereby become a monster. And if you gaze for long into an abyss, the abyss gazes also into you. - Friedrich Nietzsche

  6. Why do people do this? by blumpy · · Score: 5, Interesting

    Why do people bother with doing crap like this? Just because they can? This guy has the mentality of a script kiddy. Someone find his info and organize a snailmail spam-a-thon.

    1. Re:Why do people do this? by AndroidCat · · Score: 5, Insightful
      Are you going to snailmail him on your dime? Otherwise, you're stealing from magazines, companies with catalogs, etc. Oh sure, it's just pennies here and there, but that's the same logic the spammer uses.

      But okay, the reports of Al Ral getting buried in mail did make me smile. :^)

      --
      One line blog. I hear that they're called Twitters now.
    2. Re:Why do people do this? by realdpk · · Score: 4, Insightful

      The reason people are working so hard to break filters is not to get to Joe Bob SpamAssassin - it's to get through Yahoo! and AOL's spam filters.

      Ask a dozen random AOL and Yahoo! users - I bet not one of them can describe how the antispam features that their mail host uses work.

    3. Re:Why do people do this? by pboulang · · Score: 2, Interesting
      I like most of this logic with the exception of how spammers are paid. If it is a matter of a percentage of revenue generated, makes sense to target people who might buy. If a spammer gets paid by the number of emails successfully sent (maybe counted by an html image ref download) then it is just a matter of putting things in front of eyes.

      Anyways, this is just scary as a solution to the problem.

      --

      This comment is guaranteed*

      *not guaranteed

    4. Re:Why do people do this? by bheerssen · · Score: 2, Insightful

      hell, I bet maybe only one in that twelve realizes that the spam is being blocked in the first place (what spam?).

      That's why I'm with the crowd that thinks that spam filtering is a waste of time. In fact, I think it ultimately does more harm than good - especially when it's done at the server level. If more people actually saw all the spam that was sent to them, there would be a much larger public outcry. As it is, most people regard the problem as somewhat amusing, if annoying, instead of as the costly epidemic it really is.

      But then again, I also agreed with the late, great Bill Hicks when he urged all advertisers and marketers to kill themselves. I'm personally offended by all the advertising that I'm subjected to every day. I think that all advertising should be restricted to appropriate forums such as dedicated magazines, TV channels, and websites.

      The fact is that people, including myself, do want to view advertisements for products that they are interested in, and will search out that advertising. There is no need to subject people to unwanted, garish marketing -- except that those companies that employ such methods demonstrably sell more products, to the detriment of other companies that try to be more socially responsible. Restrict business to advertising in forums established expressly for the purpose and the world would be a much more peaceful place.

      And don't give me any guff about free speech. Businesses are not citizens, and should not have any such rights.

      I realize that many media outlets rely on advertising revenue for their business models, and that many would die if they were deprived of it. Just don't expect me to care. Those outlets with the creativity to find better models will survive. More than likely the public would end up being the customer instead of the product, resulting in better media.

      --
      (Score: -1, Stupid)
  7. Slam his customers by st0rmshad0w · · Score: 5, Interesting

    Ok, another spammer, joy, so when are we going to start getting lists of those who HIRE these urchins? I frankly would love to start re-routing all the spam that comes to me BACK to the idiots who hire spammers. Oh, and how about some postal addresses on these spam-buying scumbags too, eh?

    1. Re:Slam his customers by lysium · · Score: 2, Interesting
      From what I've seen, the products offered through spam come from the finest snake-oil salesmen that the world has to offer. Pretty much all an outrageous rip-off, if not an outright con. These businesses could probably be persecuted for other violations without even legislating spam, if some law enforcement types went over them with a fine-tooth comb.....

      Now -that- would be slamming the customers. p.------------

      --
      Together, we will drive the rats from the tundra.
  8. Slashbashing. by AltGrendel · · Score: 2, Insightful
    All we need is his address info and we can SlashBash him like the others.

    Ok, maybe this is a troll, but its what /.ers have done before.

    --
    The simple truth is that interstellar distances will not fit into the human imagination

    - Douglas Adams

  9. Profit on selling customer list? by decesare · · Score: 5, Insightful

    I wonder if anyone inside of AOL has run the numbers to figure out

    • how much money AOL has spent on anti-spam measures, or
    • how many customers AOL has lost due to the overwhelming amount of spam in their inboxes,

    and compared that to the amount of revenue that they get from selling out their customers.

    1. Re:Profit on selling customer list? by epsilon720 · · Score: 2, Interesting

      Someone here could do it with the same logic the RIAA uses for their financial analysis, and show that had AOL not sold out, they would own the entire world. Since customer loss is clearly purely due to spam, AOL would then sue the spammers for $97 Billion. Then AOL would be allowed to attack any spammer's computer and delete or alter anything that has the same name as an e-mail client....

    2. Re:Profit on selling customer list? by enjo13 · · Score: 4, Insightful

      I bet they've profited from this, greatly.

      AOL has the luxury of being both part of the problem (huge customer list) and part of the solution (spam fighting tools). They sell both.

      To the user they offer 'advanced' spam fighting tools. The users see the problem as external to AOL (EVERYONE gets spam after all), and continue to use AOL because they offer at least some kind of protection. This creates, in the users mind, value.

      It is not in AOL's best interest for Spam to simply go away. Much like telemarketing is in the best interests of the phone companies (they CREATE the problem by selling phone numbers, and also sell the tools to fight the callers). AOL merely wants to propogate the perception that they are on 'our' side of the spam battle.

      --
      Turn s60 photos into awesome videos with mScrapbook for all S60 3rd edition phones!
    3. Re:Profit on selling customer list? by Suidae · · Score: 2, Insightful

      To the user they offer 'advanced' spam fighting tools

      *advanced* tools? For god's sake, they just recently gave their users the ability to alphabetize their mail!

  10. Can't beat my filtering by afidel · · Score: 2

    My false negative rate using Mozilla Bayesian filtering is way less than 1%, and the false positive rate since training is non-existant. Of course I do go back about once a month and re-train it with both positive and negative datasets but if you don't do good training how can you expect good results, it's almost like training a pet.

    --
    There are 4 boxes to use in the defense of liberty: soap, ballot, jury, ammo. Use in that order. Starting now.
  11. Spamming != bulk mailings by Anonymous Coward · · Score: 5, Insightful

    Scelson tries to make the argument that what he does is no different than other advertisers who send their adverisements through the US mail.

    Unfortunately he, like all other spammers, completely misses the point that the two are not related. When LL Bean sends its catalog to you it costs the company X cents to do so per each catalog.

    When Scelson sends out his 180 emails a day it costs him X cents in total. However, it costs all the ISPs whose bandwidth he and others chew up X dollars per email. Thus, he is offloading the cost of doing business to the people who are receiving the email.

    This reminds me of the old postal system in the UK. In days gone by it was the receiver who had to pay to accept the piece of mail. If they didn't pay the mail was returned. It is only in recent history that the mail system is such that sender pays.

    I wonder if Mr Scelson would be happy if all the advertisers who send him their mailings would tell him he has to pay to get those things whether he wants them or not.

    1. Re:Spamming != bulk mailings by Columbo · · Score: 2, Insightful

      This might be knit-picking, but we do actually pay for traditional mailings as well. We pay the taxes that provide our garbage services and maintain our landfills. Those services have a higher load on them than they would without the presence of traditional mailings. My biggest problem with the flyers that I get at least two and often more of each day is that they are such a waste of our natural resources. In my building and in many others I've seen, we have a large garbage can specifically for these mailings. It is overflowing everyday that mail is delivered, without exception. That depresses me.

      Okay, granted, the overall additional financial cost to us is perhaps not really that great, but it does exist.

    2. Re:Spamming != bulk mailings by misterpies · · Score: 4, Interesting

      To go wildly offtopic...

      Postage stamps were first introduced in Britain, in 1840. As you say, before then it was the recipient who paid for the mail, not the sender.

      Now in those days that was sensible, since there was no mail system as such anyway. Cash on delivery was the only way you could be fairly sure that the messenger would actually deliver your letter -- since if he didn't, he wouldn't get paid.

      Problem was, people cheated the system. Early hackers, shall we call them, figured out that they didn't need to have their letters actually delivered & paid for to communicate. For instance, if someone wanted the answer to a simple yes-no question (remember, all long-distance communication was by letter then, so this happened a lot), they could set up a code for the response to be communicated by the colour of the envelope. So: messenger arrives with a letter -- but the recipient, having seen the colour of the envelope, says he doesn't want it and refuses to pay.

      Solution: set up a national postal system that people trust, so they're willing to prepay for delivery.

      Of course, 150 years later and US phone companies make the same mistake with cellphones. Charge people to receive calls + caller id -> don't answer, just call back on a land line.

      --
      The author of this post asserts his moral rights.
    3. Re:Spamming != bulk mailings by leviramsey · · Score: 2, Interesting

      Spam is a direct consequence of the fact that the email system was designed without taking this possibility into account.

      The only way to stop spam is going to be junking some major portion of the email infrastructure. Every antispam measure yet proposed does this.

      • filtering and auto-deleting, along with its close cousin, whitelisting: junks the assumption that the mail will actually be read by a recipient
      • blacklisting IPs and networks: junks the assumption that there will be open communication
      • replacing SMTP with some new protocol: junks the underlying protocol by which the email system works
      • banning anonymity: junks the assumption that the uses of anonymity would be "good" uses.
      • ending common carrier (at least for the purposes of civil liability; this is quite possibly the best option): junks the idea under which the internet as a whole has operated for the past few decades (namely that the carrier of the data is not necessarily responsible for the data).

      Either the spam problem continues, or you espouse getting rid of some part of the traditions by which email and the Internet have operated since the early days.

  12. Nothing Good Is Going To Come Of This by nemski · · Score: 4, Interesting

    Why do I have this knot in my stomach as Congress prepares legislation to stop spam? Remember when they 'deregulated' the cable industry and all our rates went up? I know it is possible to go from bad to worse, but what is after that?

    --
    Some people have a way with words, others not have way.
  13. He's the Norton SystemWorks guy! by sulli · · Score: 4, Interesting
    Watch for the lawsuit, Mr. Scelson:

    Scelson, who said he does not distribute mail containing pornography, said one of his biggest clients sells a package of anti-virus computer software called Norton SystemWorks at cut-rate prices. Officials at Symantec Inc., which makes the Norton software, said in an interview that although they have not seen the package Scelson's client is selling, other similar offers that they have tracked down have proved to be counterfeit.

    I get 1-2 Norton SystemWorks spams a day. If they're from this fucker, let's hope the Symantec people are able to find out where he lives, and sue him into oblivion.

    --

    sulli
    RTFJ.
  14. Scelson, as all spammers, is a liar by gorbachev · · Score: 4, Interesting

    There is NO way he bought the AOL address information from AOL.

    One thing to keep in mind when talking with spammers is that they always lie. They lie to themselves ("everything I do is legal", "I am forced to hijack open proxies") and they lie to everyone else ("Here's the information you requested").

    The career spammers are, indeed, bold enough to even lie to the US Government, face-to-face. Too bad the US Government is usually totally cluefree when it comes to the spam problem, so these conmen get away with lieing to senators.

    Proletariat of the world, unite to kill spammers. Remember to shoot knees first, so that they can't run away while you slowly torture them to death

    --
    In Soviet Russia, I ruled you
    1. Re:Scelson, as all spammers, is a liar by nomadic · · Score: 2, Insightful

      It's entirely possible that AOL didn't sell the e-mail list, but the VP didn't know whether the accusation was true or not. In which case he's best off keeping his mouth shut until he finds out.

    2. Re:Scelson, as all spammers, is a liar by gorbachev · · Score: 3, Interesting

      Read my response to the previous reply.

      Also consider this. How much do you think a little weasel like Scelson could've afforded to pay for the customer list? $20K, maybe, if he borrowed money from his stepmom.

      AOL would NEVER sell complete (as in without AOL's involvement) access to their most valued asset for anything not in 6-7 figures.

      Scelson is putting on a smoke-and-mirrors game trying to confuse people involved so that they won't notice he's a thief, liar and a conman. This is Spammer 101 tactics.

      Proletariat of the world, unite to kill spammers

      --
      In Soviet Russia, I ruled you
    3. Re:Scelson, as all spammers, is a liar by leviramsey · · Score: 5, Insightful

      There are a few possibilities:

      • AOL sold the member list, and Leonsis affirms: major PR disaster
      • AOL sold the member list, and Leonsis denies: Leonsis is risking perjury and contempt of Congress charges (both of which are jailable offenses)
      • AOL did not sell the member list, and Leonsis affirms: perjury and PR disaster
      • AOL did not sell the member list, and Leonsis denies: status quo ante
      • Leonsis neither affirms nor denies: status quo ante

      There's no reason Leonsis would know every dealing that AOL does (especially those before he rose to this level); if he affirms, he's fucked. If he denies, the best he can hope for is status quo ante if he's right; if he's wrong, he's fucked. So if he answers, 4 things can happen, and 3 of them are bad.

    4. Re:Scelson, as all spammers, is a liar by LordKane · · Score: 4, Informative
      Now I KNOW the /. crowd is a haven for anti-spam vigilantes. You spout total anti-spam crap and get modded up for it like mad. Your making statements as if they are defined fact and there are no two ways about it. You show you know very little about spam, or even AOL for that matter.

      Let's start with AOL. You say there is no way AOL sells their info. Well, I know 3 local businesses here who bought AOL member addresses from AOL, buying only the sections of our local town even. AOL will not only sell you their members, they will offer targeted selections.
      Now, I doubt AOL puts this on their site next to their member sign-up, but from what I have seen, they sure do sell your addresses. In fact, I'll bet you did not know AOL tracks where their users go on the web for marketing purposes. Yup, if you visit a mortgage site, they immediately sell your info to their list of mortgage lead buyers. By morning, you will have several offers for mortgages in your inbox. And this happens for all kinds of businesses. I mean, they control your email and your net connection, why not market accordingly. I'm sure a few of you AOL users have experienced this before, or perhaps could try it?

      Now, as far as all spammers being liars, I see you are just one of the anti-spam flock, spouting propaganda. It's disappointing no one on /. actually reads the articles, or can remembers ones from a few weeks ago. You might remember a bit on Spamhaus showing the top 200 spammers causing 90% of the spam. Well, I know 2 of those people. I know one because they live 3 towns over from me, running a small PC shop in Halifax, MA. If you email me, I'll send you their business address, directions, even their home info. :) The other one I met because of them. I can tell you they are unscrupulous, a bit dumb, and have no troubles telling lies. The ones I know are total dicks. The issue is the remaining 90% of small time spammers, some of whom who are actually ok guys.
      Granted, they should be paying for their use of email, yata-yata. Case in point, the 3 shop owners I know locally who bought those bits of AOL's lists. They offer honest products, they try and target locally, so they don't send people who can't possibly use their service an ad, and they honor remove requests. They even offer their shop info in the email so they can be contacted directly. The system could be better, but at least they try. They do not fit your bill of the evil spammer. Some really are pretty bad. Some are not. Your sweeping statements of ignorance and promises of murder at the end are totally unwarranted.

      I will be sure to remember to offer to murder you next time I disagree with the way you do business. How you got modded +5 for this steaming pile of flaimbait is beyond me, but I'll certainly burn some karma to put out an opposing statement. I guess that is what public forums are all about. ::drinks a little more distilled Usenet post evil:: Cheers.

      --
      "Victims, aren't we all?"
  15. Let the punishment fit the crime by Anonymous Coward · · Score: 2, Funny

    He should be slapped lightly on the wrist with a rolled up newspaper once for every time he pissed someone off.

    True story: I broke the trigger on my water pistol by fantasising I had a gun pointed at a spammer's genitals.

  16. Return to sender! by st0rmshad0w · · Score: 4, Interesting

    I think I have it. If we get the spammer's postal address, and the postal address of those who hired him, maybe we should just print out all the spam we get and sent it to the one who hired him postage due. :)

    As an added bonus use the spammer's postal address as the return address.

  17. Wanted email? by Metasquares · · Score: 2, Insightful

    "Now the individual has lost his right to get any e-mail he wants," Scelson said. So now I want to receive free viagra from jryaixz@yahoo.com? Quite the contrary; with proposed antispam laws, users are finally gaining the right to get only the email they want.

  18. How early can you drop? by rxed · · Score: 2, Interesting

    8th grade dropout? How early can you drop?

  19. Install TMDA now! by TheSync · · Score: 2, Informative

    In the few days I have been using TMDA, I have been exceedingly satisfied. It is a much better solution than SpamAssasin. You should try to whitelist most of the people you expect to receive email from ahead of time, but I haven't had any complaints from people having to respond to a message bounced back to them for authentication.

    That, in combination with qmail's revokable dash-addresses (howard-amazon@cow.com, howard-slashdot@cow.com, etc.) make it an excellent solution not just for avoiding spam, but for tracking its sources as well.

  20. 1-2 percent? by BenjyD · · Score: 2, Insightful

    If he's sending 240 million emails a day and getting 1-2 percent return, even if he only make a few dollars off each sale that's a profit in the order of billions a year. Do you get the feeling he's lying to the senate?

    1. Re:1-2 percent? by clonebarkins · · Score: 2, Insightful
      If he's sending 240 million emails a day and getting 1-2 percent return, even if he only make a few dollars off each sale that's a profit in the order of billions a year. Do you get the feeling he's lying to the senate?

      No. "Response" and "sale" are clearly two different things. Of the 1-2% responses, probably less than 1% of those (i.e.,

      --

      "The evil of the world is made possible by nothing but the sanction you give it." -- Ayn Rand

  21. Lots of good info here... by johannesg · · Score: 5, Interesting
    "People still buy this stuff," he said, claiming that his clients get a response rate to his e-mail of 1 to 2 percent.

    Let's say 10 million emails per hour (lowest), 1% response rate (lowest), that's 100,000 responses per hour! That means that over the course of a year, we are talking about 876 million responses. Divide that by the 165.75 million internet users in the US, and we learn that each and every one of you respond to him 5 times per year!

    Well, maybe he spams the entire world. I have no idea how many internet users there are in the world, but let's say it is something like one billion. That means everyone responds to him almost yearly! Amazing! Now I only have one question: those responses, are they sales or deaththreats?

    1. Re:Lots of good info here... by Dunark · · Score: 2, Informative

      I think Scelson greatly overstated his response rate. I've seen web pages offering spamming-for-hire services, and the response rates they claimed were generally in the range of 50 to 100 responses per 100,000 sent.

      Also, I never saw any statements about the kinds of responses. I'm inclined to think the spammers-for-hire count all kinds of responses (including the death threats) to make their numbers look better.

    2. Re:Lots of good info here... by vidarh · · Score: 5, Insightful
      1% response rate is extremely unlikely. Normal direct (snail) mail tend to get response rates of 1-2%. Double opt in (where a verification message have been sent, and the user have responded to it to confirm they want to sign up) e-mail campaigns can easily get as low as 1 in 10.000 or 1 in 100.000 if the list is unqualified and not in the right target group. Spam would likely be much worse than that. So he's probably lying through his teeth.

      Of course, as you suggest, he could be counting death threats as responses as well :-)

      Still, with todays bandwidth prices, and an estimate of 10kb per e-mail, if he's sending 10 million messages an hour, he'd be sending around 100GB an hour at around $50 an hour (likely less, given the volumes and since it's mail traffic where he doesn't need to pay a premium for low latency connectivity). A product with a reasonable markup and he might be able to recoup the cost of those 10 million messages with a single sale, possibly even making a nice profit.

      And that's why asking people not to buy from spammers won't be enough to get them out of business.

    3. Re:Lots of good info here... by Fweeky · · Score: 3, Insightful

      He doesn't need to recoup anything; he can just get his client to pay up front, regardless of the actual response rate.

      I personally think it's not only the spammers which need hefty fines; it's the people hiring them. I don't think jail time for fraud and many counts of unauthorised computer use (and paying someone to do these things for you) is a bad idea either.

      Never mind crap like "spammer gets $100,000 fine, sells one of his ferrari's to pay for it"; I want to see "spammer gets $100,000 fine, 3 year jail term, and all assets potentially paid by or related to spamming confiscated. Companies responsible get $1,000,000 + 1 year profit fine each".

      Then I want to see Bush announce a War on Spam; out of the country? No fines for you, we'll just blow you up with a Predator Drone.

      Sadly I doubt much less than this would have a significant impact on the problem. And blowing people up might be taking things a little far ;)

    4. Re:Lots of good info here... by Just+Some+Guy · · Score: 2, Interesting
      1% response rate is extremely unlikely.

      I agree. Some loser just used one of my domains in the forged From: headers for a batch of spam. After seeing a bunch of "User unknown: kim@mydomain.com" entries in my maillog, I set up aliases for all of the usernames that the spammer(s) used just to see what kind of stuff was coming back.

      Out of about 20,000 incoming emails to those fake accounts (I wish I could find the sonofabitch that sent that batch), only about 2 or 3 were from real people, all of whom were writing to threaten a boycott of my domain if I didn't quit spamming (heh!).

      --
      Dewey, what part of this looks like authorities should be involved?
  22. Another bad Slashdot analogy by JSkills · · Score: 4, Interesting
    Yes - many people use analogies to make their point on Slashdot - so here's mine.

    People need to guard their email addresses in the same way they practice safe sex. Don't go sticking your email address just any old place ...

    Ok, that was bad. The exceptions are cases where your ISP screws you and sells your name (like those sorry AOL customers had happen to them) or people who use brute force address guessing algorithms.

    Although I think the legislation being considered is a good first step --

    The Burns-Wyden bill would make it illegal for bulk mailers to forge their sending location, have deceptive subject lines or prevent users from removing their names from e-mail lists. Owners of networks would retain the ability to block mail, and the legislation gives Internet providers legal standing to hunt down and sue spammers.

    The committee also heard from Sen. Charles E. Schumer (D-N.Y.), who advocates a nationwide do-not-spam registry similar to a newly created do-not-call telemarketing list, plus an international treaty on spam.

    Nothing really beats good filtering. I put together a server side filtering process using a Mail::Audit. I support several end users who can administrate their mail rules (e.g. block if subject has "viagra" or if sender is spamboy@jizzmop.com, etc.) using a web based interface and MySQL back-end. People can share rules as well. It's working pretty well for everyone. Additionally, Mail::Audit allows you to tap into the RBL which essentially will give you an "unlisted number" - only those you have expilicity granted permission to recieve from can reach you. Sounds extreme, but I get ZERO spam.

    1. Re:Another bad Slashdot analogy by Exedore · · Score: 5, Funny

      People need to guard their email addresses in the same way they practice safe sex. Don't go sticking your email address just any old place ...

      Special offer for JSkillsWui$d3g6Yert! Email address too small/not performing to expectations? Now you can enlarge your email address the natural way! 100% safe and effective! Get the email address performance you've always dreamed of having!

      --

      I take drugs seriously.

  23. SPAMHAUS Record on Scelson by tbmaddux · · Score: 5, Informative

    ... is here. He must not be doing all that well if he can't scrape together the dough to get his fat ass out of Slidell, Louisiana, a town I had the misfortune of driving through a year ago and whose only redeeming feature is the Lake Ponchartrain bridge/causeway leading out of it and to New Orleans.

    --
    Can't you see that everyone is buying station wagons?
    1. Re:SPAMHAUS Record on Scelson by Steve+B · · Score: 2, Funny
      there was a horrid sulfer / rotten egg smell blanketing the whole town

      OK, that's eyewitness (nosewitness?) confirmation that Scelson does indeed live there.

      --
      /. If the government wants us to respect the law, it should set a better example.
  24. Re:Spam is just good business by no+reason+to+be+here · · Score: 2, Insightful


    I would rather trust a spammer than a lazy computer programmer to get a job done, that's for sure. It's not about being nice, it's about being a hard worker. Stupid isn't forever, but lazy is.


    How, exactly, is writing a few scripts to send out a huge batch of e-mail every 12 hours or so, with minimal input from the user, hard work?

    Sounds to me like the spammer is the lazy one, but, maybe I'm missing something. Please enlighten me.

  25. Re:Spam is just good business by FrEaK7782 · · Score: 2, Insightful

    Spam is a business because there are actually people out there that fall for this crap!

    I maintain that if the general public would just wise-up, spam would go away rather quickly. The article points out that he gets 3% response. If it was 0%, we would be out of business. It's that simple.

    So the solution is this: Educate those less computer-wise around you to NEVER respond to a spam e-mail. And definitely don't give them money!

  26. What a spin he puts on it. by grub · · Score: 3, Insightful


    "..and that he has no choice but to resort to forging the sender information in his bulk e-mail so he can be anonymous and maintain his connection to the Internet."

    In other words: "I have to lie, cheat and steal to use resources on mail servers illicitly."

    Asshole.

    --
    Trolling is a art,
  27. Where's the personal info, it's been 20 minutes. by Ravensign · · Score: 5, Funny

    Lol.

    This article is 20 minutes old, I am suprised his home address, phone number, ssn, shoe size and EQ account info aren't already posted.

    --
    "Sig free in '03!"
  28. Here's an idea. by Greg@RageNet · · Score: 4, Interesting

    Here's a proposal, as it seems like the world is moving closer to 'whitelist' (reject by default) method of spam combatantcy. Perhaps there should be a global whitelist set up, where a user signs up, and must verify their mail address, then the mail address is MD5 hashed and stored in a database. Recipients recieve an email from this sender they simply hash the from address and check to see if the hash exists in the database. If it's present the mail is accepted, if not, rejected. Solves the problem of invalid from addresses always used in spam, as well as solving the problem of preventing data-mining of such a 'whitelist' database by spammers (as it contains only checksums).. And it solves the problem of being able to recieve messages from people you haven't personally explicitly whitelisted; ie. old friends from highschool, aquantances with new email addresses, etc..

    Whaddya think?

    -- Greg

    --
    Slashdot, would a spell-checker for posting be too much to ask? It's not rocket science!
    1. Re:Here's an idea. by Afty · · Score: 2, Insightful

      What's to keep a spammer from just using a known valid email address as the from address on his spam? Then the hash check will succeed and the mail will go through. The spammer doesn't have to register the address himself, he can just use any address that he knows is on the whitelist.

  29. one less spammer by mikeee · · Score: 2, Interesting

    Isn't it a felony to lie in congressional testimony?

  30. Well overhere by Anonymous+MadCoe · · Score: 2, Interesting

    In my wonderfull country (!= US). We have a systenm where you can put an official sticker (free at townhall). on your mailbox that you don't want Junk Mail, and you don't get any (mistakes excepted, but hey once a year or so). The same stickers also allow you to differentiate between "Junk mail" and "local advertisements papers" (Which can be handy if you want to know what's going on in your local community). If a similair system could be implemented for email (I doubt that, at least any time soon). then I would not mind electronic junkmail (allthough I would opt-out). Now I object since I have no means of opting out and be done with it.

  31. forging sender address by MORTAR_COMBAT! · · Score: 5, Insightful

    Why isn't this the same crime as handing someone an ID card which says you are someone you are not?

    He claims that he "has no choice but to resort to forging the sender information in his bulk e-mail so he can be anonymous".

    Isn't that a bit like saying that when I was 19, I had no choice but to resort to forging my driver's license so I could buy beer?

    --
    MORTAR COMBAT!
    1. Re:forging sender address by clonebarkins · · Score: 2, Insightful
      Why isn't this the same crime as handing someone an ID card which says you are someone you are not?

      While I hate spam as much as the next guy, this is not the same thing. Spam with modified headers is like somebody calling you up and saying their in Oregon when they're really in Nevada. That's not illegal, nor should it be.

      Your analog is more like forging (or stealing) secret PGP keys.

      BTW, I've always thought it funny that /. folks are so against spam, yet they're all for anonymity on the net. Weird.

      --

      "The evil of the world is made possible by nothing but the sanction you give it." -- Ayn Rand

    2. Re:forging sender address by MORTAR_COMBAT! · · Score: 2, Insightful

      BTW, I've always thought it funny that /. folks are so against spam, yet they're all for anonymity on the net. Weird.

      I'm all for anonymity. It's a shame that people are so willing to abuse that privilege to (a) spam, (b) crapflood, (c) flame, (d) post goatse.cx links, etc.

      When privileges are abused by a society, that society very very often revokes those privileges. See our current situation w.r.t. privacy protection in the US.

      --
      MORTAR COMBAT!
  32. Anonymous my ass by YrWrstNtmr · · Score: 5, Insightful

    he has no choice but to resort to forging the sender information in his bulk e-mail so he can be anonymous and maintain his connection to the Internet.

    Is that like bank robbers being forced to don a mask so they can remain anonymous and maintain their 'business operations'?

    I've had one of my email addresses used as a reply to: for quite a few spams. A real PITA. Not only did that address get the standard spam, it get bounces from nonexistent recipients. Sometimes in the hundreds per day, as the result of dictionary attacks on various ISP's. On top of that, you get the indignant replies from pissed off people.

    Blatant forgeries in commercial email headers should be made illegal.

  33. Re:So... by moorg · · Score: 2, Informative

    Might as well just link to where all of the information is.

  34. HERE HE IS, the bastard by Anonymous Coward · · Score: 5, Informative

    He has two addresses, (assuming these are both him).
    These were the only Ronald Scelson's in Louisiana and considering they are both in the same city I would say it's fairly certain.

    Ronald Scelson
    211 Martin Lane
    Slidell, LA 70458

    Ronald R Scelson
    1711 W Hall Ave
    Slidell, LA 70460

    Would the /. community like to show this guy what we consider spam?

    1. Re:HERE HE IS, the bastard by wiggys · · Score: 5, Informative
      The problem is you have to be REALLY sure this is him. What if an innocent person who shares the same name is targetted.

      That's the problem with vigilanti-style justice - it requires an assumption of guilt, and the victim rarely gets an opportunity to reply until it's too late.

      --

      Sorry, but my karma just ran over your dogma.

    2. Re:HERE HE IS, the bastard by garrulous · · Score: 2, Insightful

      "Wouldn't spamming a spammer defeat the purpose of defeating spam?"

      Its called poetic justice. While some will tell you that prison is "corrective", there is the underlying accepted premise in Western culture of the punishment should fit the crime.

    3. Re:HERE HE IS, the bastard by Tackhead · · Score: 2, Funny
      > The problem is you have to be REALLY sure this is him. What if an innocent person who shares the same name is targetted.

      Oh, that's easy!

      Dirty Harry: Well, punk, you've gotta ask yourself a question. What do you think of receiving exciting offe rs about products, as long as you can opt out at any time?
      Punk: What the fuck? I don't care if you've got a .45 Magnum pointed at my face! Fuck you, spammer!
      Dirty Harry: Oh, sorry, I got the wrong guy. You're free to go, son. Real sorry 'bout that. [puts gun away, pulls out wallet, hands punk $100 for a new pair of pants]

      ... Dirty Harry: Well, punk, you've gotta ask yourself a question. What do you think of receiving exciting offers about products, as long as you can opt out at any time?
      Punk: Fuck you, you spah... spuh... y-you ethical e-bidniz purfessnul!
      Dirty Harry: *BLAM* *BLAM* *BLAM* *BLAM* *BLAM* *BLAM* [walks back to the office, turns in his badge, and tells the Chief that it's cool, because even if the DA charges him with using excessive force against a suspect, no jury would ever convict]

  35. Hell Freezes Over by Tackhead · · Score: 5, Funny
    > "I'm probably the most hated person in this room," said an unapologetic Scelson,

    and several dimensions away, Satan scraped the icicles from his beard and once more begged God to turn the heat back up. "Okay, so a spammer told the truth, but it only happened once, and it was an accident, it's not my fault, can I please have some frickin' heat down here already?!?!"

  36. Re:Where's the personal info, it's been 20 minutes by jenkin+sear · · Score: 5, Informative

    According to Spamhaus:

    (http://www.spamhaus.org/rokso/search.lasso?evid en cefile=1070:

    ABUSERS: Ronald R. Scelson
    [Birthdate: 12-11-71 or 72, New Orleans, LA, married]
    avsrscelson@aol.com / cajunspam@aol.com / avsrscelson2000@yahoo.com / dff@yahoo.com
    Amy Hoolahan [wife/sister?]
    43 CYPRESS MEADOWS LOOP
    SLIDELL, LA 70460 US
    Home: (504) 646-2225
    Work: 504-649-6248

    PHONE NUMBERS: 888-365-0000 ext. 1648 / 800-242-0363 EXT. 2427
    888-724-3108 x5413752
    504 781 8117 / 504-957-1037 / 504-847-1232 / 504-649-7751
    504-781-6615 / 504-649-6248 / 504-781-6655 / 504-831-1595
    504-646-2225 / 504-641-0876
    FAX: 504 641 0810 / 504-456-0995 / 504-781-6615

    MORE INFO: Connelly sues to keep spamming:
    http://www.frc.org/legal/lf99j05.html
    http://www.freedomforum.org/speech/1999/10/20laspa m.asp
    http://www.mediainst.org/digest/fall1999/pa ge8.htm l
    Wife Florence Fox sued for Nu-Skin Pyramid Scheme:
    http://www.attorneygeneral.gov/press2/mon ths/Feb98 /feb23pr1.htm

    Me, I'm thinking some letters of marque and reprisal are the answer...

    --
    What a strange bird is the pelican, his beak can hold more than his belly can.
  37. A modest proposal by John+Harrison · · Score: 3, Interesting
    We should designate some day in the near future as "Everybody is a Spammer" day. On that day, everyone will send as much spam as possible to every email address they have. Since 8th graders are capable of spamming effectively I would guess that a significant percentage of the population is as well.

    What would the result of this be? Email would be totally unusable that day and perhaps for many days afterwards. Not only would it get government officials to take notice, it would cause even the spammers to see the evil of spam. Those that are capable of seeing it anyhow, most of them are probably blind to it.

    Also, everyone that became a spammer for a day would Profit!

  38. Re:are you kidding? by sqlrob · · Score: 3, Insightful

    Junk Mail != Spam.

    If those CDs were shipped to you postage due, then you can call it spam.

  39. Re:Spammers killed my Parents by Angry+White+Guy · · Score: 2, Funny

    Not early enough.

    --
    You think that I'm crazy, you should see this guy!
  40. Scelson is right by abde · · Score: 4, Insightful
    Scelson said he supports anti-spam legislation. But while committee members were clearly intrigued by his story, they gave little weight to his proposed solution: Pass a tough spam law, but then prevent any Internet provider from blocking e-mail from bulk marketers that abide by the law.

    The Burns-Wyden bill would make it illegal for bulk mailers to forge their sending location, have deceptive subject lines or prevent users from removing their names from e-mail lists. Owners of networks would retain the ability to block mail, and the legislation gives Internet providers legal standing to hunt down and sue spammers.


    (emphasis mine) I think it's a brilliant suggestion. If the Burns-Wyden bill is passed, then I can easily filter my mail to stop spam I don't want to see. I don't think that my ISPs should be blocking email that may be spam but follows these rules. The filters in Eudora and Outlook Express are powerful enough to stop all spam I am not interested in receiving if I know for a fact that the forged header problem vanishes. I think it's a great compromise.
    --
    Don't blame me - I voted for Howard Dean. http://dean2004.blogspot.com
  41. Slashdot is big..but /. the Washington Post? by ERJ · · Score: 2, Funny

    Aren't we getting a bit cocky to think we can /. the Washington Post?

  42. Spam is not good business by Elkman · · Score: 5, Insightful

    If you want to get your slogan and company name out there fast, it makes sense to use the Internet and email systems.

    If you want to attract and retain a loyal customer base, it absolutely doesn't make sense to use spam or other annoying methods of advertising on the Internet.

    As an example: I work for a company that owns one of the major online travel sites. A few weeks ago, we had an all-company conference call, and one of the members in my group pointed out that another online travel site had recently stepped up its advertising via popup ads on web sites. He asked why we weren't annoying the consumer with popup ads. The leader of the call replied, "I think you just answered your own question." He explained that while popup ads may be effective, they don't make any friends among consumers and they don't build loyalty.

    If popup ads have such a negative impression, don't you think unsolicited commercial E-mail has a much more negative impression on the Internet population? Here's a hint: The spammers who sell Viagra (r), Viagra substitutes, penis extension pills, mortgages, and other spamvertised products almost never reveal their real business name. They hide behind throwaway e-mail addresses and make themselves untraceable to their audience.

    Would a business concerned with consumer loyalty really have to hide themselves? My local grocery store doesn't have to hide from me. Neither does Target, Borders, Best Buy, or any number of bricks-and-mortar retailers. Amazon.com doesn't have to hide from me, nor do any of the online travel sites. Yet the spammers pushing penis pills don't dare reveal who they are, where they work, how I can contact them, or anything traceable.

    I would rather trust a spammer than a lazy computer programmer to get a job done, that's for sure. It's not about being nice, it's about being a hard worker. Stupid isn't forever, but lazy is.

    I think you're trolling here, but in case you aren't: That "hard work" relies on hijacking other people's resources. It relies on deception and lies to push a product to people.

    (Disclaimer: This is not the opinion of my employer, of course.)

  43. Making a Statement by nuggz · · Score: 4, Insightful

    An officer of a company should not make a statement without ensuring it is correct. Or taking reasonable means to ensure it is correct.
    When a specific claim is made, like this there are a few options.
    1. No statement at this time, or no comment.
    2. Suggest that this didn't happen. This is against our standard policies.
    3. Investigate the statement, and then comment on it's accuracy.
    4. Say we did no such thing, without checking. This is reckless, and a responsible person should not do so.

    I know it sounds weaselish, but you MUST not make a statement when you do not have the information to justify it. You can get in a lot of trouble for lying.

  44. client filtering is just wrong approach by MORTAR_COMBAT! · · Score: 5, Insightful

    Because most of the actual monetary cost of sending the spam has already been incurred by the time you filter at the client. The message has already been transmitted from client to server to server to server to client over the internet, consuming bandwidth. It has already occupied disk space. Even the end-of-the-server-chain, pre-client filters like SpamAssassin only alleviate the last link in that bandwidth-bonanza (to-client).

    That spam email should never be sent, period. It should not ever proceed across the internet whose bandwidth is being paid for by millions of users, providing benefit to the sender. It should never touch the hard disk of a server.

    In addition, it simply takes too much sophistication for the VAST majority of email users to properly set up filters. A simple [ADV*] -> Trash filter would delete some email that quite honestly some users want -- special coupons from Amazon.com for repeat customers, for example. Those emails would by (proposed) law have to have the [ADV] tag on them. So then you add another filter above the Trash filter to allow ADV from Amazon through... and so on, and so forth.

    Pretty soon the hassle of organising your filters has exceeded the hassle of having to just click 'delete' to spam (for the average email user). I can easily enter a new expression in my .procmailrc to deal with all kinds of situations, but Joe Schmoe email user shouldn't have to learn complex regular expressions.

    --
    MORTAR COMBAT!
    1. Re:client filtering is just wrong approach by raju1kabir · · Score: 2, Funny
      Because most of the actual monetary cost of sending the spam has already been incurred by the time you filter at the client.

      % telnet example.com smtp
      Trying 192.168.3.48...
      Connected to example.com
      Escape character is '^]'
      220 welcome
      helo spammer.com
      250 hello spammer.com
      mail from: <makemoneyfast@spammer.com>
      250 ok
      rcpt to: <user@example.com>
      250 ok
      data
      354 ok
      Subject: [ADV] grow three more penises
      Connection closed by foreign host.
      %

      --
      "Patriotism is your conviction that this country is superior to all other countries because you were born in it." -- GBS
  45. Carrier protection by nuggz · · Score: 2, Insightful

    But then when you start filtering data on content, you are not an impartial conduit.
    You might then be taking responsiblity for the content you do let through.
    I think ISPs are more scared of that than spam.

    ISP's should let you opt out of their default mail filtering policy, then these spammers lose a big part of the arguement.
    Either opt in spam filtering and opt in bulk email.
    or
    Opt out spam filtering and opt out bulk emial.

  46. Re:are you kidding? by MORTAR_COMBAT! · · Score: 2, Insightful

    Junk Mail != Spam

    Both consume limited storage space. Junk mail can fill up your postal mailbox and you'll then get a note, "You can pick up the rest of your mail at the post office." How fun. Spam fills up your email inbox until the sender of the next message gets "MORTAR_COMBAT!@slashdot.org's email is full".

    Both abuse a common carrier system, paid for at least partially by the recipients of the message. Junk mail is usually paid for using bulk pricing systems, subsidized by the rest of the postal audience. Oh yeah, and the USPS is a government program. Spam is paid for by the ISPs, who in turn charge their customers.

    If you think that receiving a 100-page glossy magazine from Abercrombie and Fitch doesn't cost you anything you are flatly wrong. It doesn't have to come postage due. When your kids spend your money at Abercrombie and Fitch, you've just funded the next round of that glossy magazine's arrival.

    --
    MORTAR COMBAT!
  47. How about a global "Do Not Call" list for email? by EmagGeek · · Score: 2, Interesting

    Why not just mandate what exists in many states for telemarketers? Establish a global blacklist that people can sign up for, and spammers must check that list before sending an email? The fines could be made substantial enough to be a deterrent - say 5 years in the pokie with a 300lb hairy "woman" named "Bubba" and siezure of all assets without forbearance of liabilities. That way, after 5 years of hell, they can get out of prison to a mountain of debt with no hope of ever climbing out.

    This might be a technical challenge, but so was landing on the moon...

  48. Re:One email a day - BS by EmagGeek · · Score: 2, Interesting

    The article claims he sends 120 to 180 million emails every 12 hours, so that's up to 360 million emails per day. At that rate, it takes approximately 18 days to email every man, woman, and child on the planet....

  49. 8th grade education ... by The+AtomicPunk · · Score: 5, Insightful

    I guess that explains statements like the following, that display his keen insight into our system of government:

    "But carriers should be held accountable when they submit to anti-spam groups. Terminating services to companies' such as my own without any legal reason to do so is not the democracy that we should all be living."

    Jackass, if you're reading:

    1) This is not a democracy. We're a democratic republic. There's a big difference.

    2) Forcing someone else to provide you a service is neither freedom, nor related to a democracy. In fact, that would be contrary to freedom.

    3) Claiming you're FORCED to forge email addresses because of "bullying tactics" is akin to claiming you were forced to break into my house and dump junk mail on my desk because I refused delivery.

    Apparently you think America is all about you, and that you somehow have a level of freedom that compels others to act according to your wishes.

    Rot in hell, dickhead.

  50. Even worse than being spammed by cmpalmer · · Score: 4, Interesting

    I've grown used to logging on in the morning, deleting 20-50 spams that made it through my ISP's filter, then reading the 1-10 valid messages.

    Until a few days ago...

    Then I started getting bounced messages showing up in the inbox. First a dozen or so, and now 300+ per day. Some unscrupulous bastard put my e-mail address as the return address on those damned "Penis enlargement" spams and sent out a coupla hundred thousand. All have a different name ("Buffy", "Steve", "Frank", etc.), but all with my e-mail address.

    I've had that address for nearly 10 years, which is the reason I put up with spam on it, but now I'm going to have to kill it all because some moron (the messages originated in China according the to headers) picked my name at random to hide behind.

    --
    -- stream of did I lock the front door consciousness
    1. Re:Even worse than being spammed by Anonymous Coward · · Score: 2, Informative

      This happened to me as well. The penis enlargement spam (indirectly) links to to pillsmedical.net

      Their billing is handled by paysystems.com, which is in turn hosted by akamai.

      Send your complaint messages (with the bounce messages included) to abuse@akamai.com and abuse@paysystems.com - these are legit companies that sometimes unknowingly provide support to spammers. They may terminate a spammer if they have enough evidence.

      Please send them the evidence. Please be polite. Please don't email them to yell at them for supporting spam. It won't help. Concrete evidence of a specific spammer will.

  51. New Distributed Computing Project : DDoS spammers by androse · · Score: 5, Insightful
    Or more accuratly, DDoS the spammers clients.

    I have been looking at the source of my spam lately, and, although the email addresses are always forged, the body of the messages nearly always point to some website.

    What we should do is have a way to automatize the slashdotting of these sites. The resource cost for every recepient is very small, but is very high for the target web site. If the site is run directly by the spammer, then that's great (he get's to pay the bandwidth bill). If it is run by the spammer's client, then that's even better. If it is hosted on a free non-commercial facility, it will wake them up and will make them find a way to make their users accountable.

    So how to do this in a very user-friendly and convenient way ?
    Make a distributed-computing application, very light-weight, that runs on every platform. You should be able to set the maximum bandwidth you want to use (the default could be very low, like 5kbps), when it should start and stop, etc.The app will go and fetch a list of URLs of images or HTML pages on the target servers, and start downloading them to /dev/null. The app should have a funny user interface, that let's you know when a target host becomes unavailable (victory ! another one bites the dust !), etc. The downloadable list of target hosts should be maintained by a trusted source (it could be GPG signed for example), maybe mailed to you though a MixMaster remailer to avoid spammer suing the originator.

    This could make all the Spam issue a lot more fun !

  52. DMCA by Zed2K · · Score: 5, Interesting

    "He boasted that in 24 hours he could crack sophisticated software filters designed to block spam."

    So isn't that in violation of the DMCA? Or am I stretching it? If he said he could get around them then its different but he specifically said he could crack them.

  53. Ronnie Scelson's Info, Courtesy of ROKSO by Anonymous Coward · · Score: 5, Informative

    The Registry of Known Spammers has his contact information, including emails, snail address, toll free phone numbers, etc. Lameness filter prevents posting the whole thing, but here's a peak at it.

    ABUSERS: Ronald R. Scelson
    [Birthdate: 12-11-71 or 72, New Orleans, LA, married]
    avsrscelson@aol.com / cajunspam@aol.com / avsrscelson2000@yahoo.com / dff@yahoo.com
    Amy Hoolahan [wife/sister?]
    43 CYPRESS MEADOWS LOOP
    SLIDELL, LA 70460 US
    Home: (504) 646-2225
    Work: 504-649-6248

    PHONE NUMBERS: 888-365-0000 ext. 1648 / 800-242-0363 EXT. 2427
    888-724-3108 x5413752
    504 781 8117 / 504-957-1037 / 504-847-1232 / 504-649-7751
    504-781-6615 / 504-649-6248 / 504-781-6655 / 504-831-1595
    504-646-2225 / 504-641-0876
    FAX: 504 641 0810 / 504-456-0995 / 504-781-6615

    MORE INFO: Connelly sues to keep spamming:
    http://www.frc.org/legal/lf99j05.html
    http://www.freedomforum.org/speech/1999/10/20laspa m.asp
    http://www.mediainst.org/digest/fall1999/pa ge8.htm l
    Wife Florence Fox sued for Nu-Skin Pyramid Scheme:
    http://www.attorneygeneral.gov/press2/mon ths/Feb98 /feb23pr1.htm

    AKA: RONALD SCELSON (NETBLK-FON-106771046442576)
    43 CYPRESS MEADOWS LOOP
    SLIDELL, LA 70460 US
    SCELSON, RONALD (RS928-ARIN) RSCELSON@AOL.COM
    5049571037

  54. 8th Grade Dropout? by hendridm · · Score: 5, Funny

    It shows

    And all this time I thought the bad english in the spam I get originated from Asia.

  55. Blacklist AOL on your mailserver!!! by Medievalist · · Score: 4, Interesting

    After dozens of attempts to get AOL to implement the most rudimentary outgoing filters on their Email system, and getting ZERO response, I have regretfully informed our user base that we will no longer accept any Email emanating from any machine with an AOL.COM IP address.

    They are breaking the rules of the Internet (see: SMTP RFCs) by improperly implementing postmaster@aol.com (see rfc-ignorant .orgfor details) and their mail relays have sent hundreds of viruses into my domain.

    I have asked all AOL users at my site who wish to continue emailing their home addresses from work to get a new service provider and given them two months to do so. I have recommended several small local ISPs to them that I know provide good service and never allow easily detected virii like Yaha, Klez and SoBig to transit their mail hubs.

    We, fellow slashdotters, can use our enormous power as administrators of email hubs to get AOL's attention - since it seems more civilized methods are useless. The social contract of the Internet is simple; play by the rules (i.e. implement the required RFCs) or you are not part of the community.

  56. Re:are you kidding? by RazzleFrog · · Score: 5, Informative

    Junk mail is usually paid for using bulk pricing systems, subsidized by the rest of the postal audience.

    I'm afraid you have it backwards. Bulk mail, even at its reduced rate, is what allows you to send a letter at 39 cents. Bulk mail is presorted so as to make processing time for the post office almost nothing. Your letter with sloppily written address actually takes time to be read and sorted.

    ALso, the USPS is a government sponsored monopoly but it doesn't receive any tax payer dollars. It is self funding.

    Finally, large glossy catalogs are very expensive for companies and they are not typically sent to people who haven't shopped in the store before or requested the catalog specifically. They therefore are not in the same category as snail spam.

  57. Re:New Distributed Computing Project : DDoS spamme by Abm0raz · · Score: 2, Insightful

    I'm in.

    Suggestion: rephrase it and put it on Ask Slashdot

    -Ab

    --
    Nothing fails quite like prayer.
  58. Re:Where's the personal info, it's been 20 minutes by Tackhead · · Score: 2, Funny
    > Amy H........ [wife/sister?]

    It's Slidell, Louisiana, and we're talking about a spammer's family. Why not both?

  59. By his own logic by Vainglorious+Coward · · Score: 2, Funny
    problem is you have to be REALLY sure this is him. What if an innocent person who shares the same name is targetted.

    Well, if he hasn't opted out of our "special offer" to exact retribution upon him, then he must want us to do this.

    --
    My next sig will be ready soon, but subscribers can beat the rush
  60. you pay for bulk (snail) mail too by Travis+Fisher · · Score: 2, Interesting
    • In the case of bulk snail mail, 100% of the costs (if you don't include me physically picking up the mail, looking at it, and tearing the latest "Want a 0% interest credit card that jumps to 30% later?" envelope as cost) is payed by the sender.
    This is a common misconception. If you use the postal service to send letters with actual first class stamps on them, you are paying for bulk mail to be sent. Why? Because the postal service charges bulk mailers less than cost to send their junk to your mailbox. They make up for it with higher rates for first class customers.

    See for instance this statement from the former chief financial officer of the postal service.

  61. Re:Share Holders by RazzleFrog · · Score: 2, Informative

    I refer you to rule 14a-8 of the Securities Exchange Act of 1934. There are (at least) 2 reasons why your proposal would be excluded (see question 9).

    Reason 1 - "(5) Relevance: If the proposal relates to operations which account for less than 5 percent of the company's total assets at the end of its most recent fiscal year, and for less than 5 percent of its net earnings and gross sales for its most recent fiscal year, and is not otherwise significantly related to the company's business;"

    Remember that AOL is a very small part of AOL TW and the cost of the CD's would be way less than 5%.

    Reason 2 - "(7) Management functions: If the proposal deals with a matter relating to the company's ordinary business operations;"

    I think deciding on advertising methods falls under the "ordinary business operations."

  62. Re:are you kidding? by DunbarTheInept · · Score: 4, Interesting


    ALso, the USPS is a government sponsored monopoly but it doesn't receive any tax payer dollars. It is self funding.

    Not only that, but it's even older than the government. The post office was concieved under the Articles of Confederation, before the current government under the Constitution. And not only did it pay for itself, but it was once the primary source of revenue to fund the government.

    --

    Don't label something "offtopic" unless you know the topic well enough to tell what's on topic.

  63. A Somewhat Simple Solution by Iron+Chef+Unix · · Score: 3, Interesting

    I know this doesn't really address the problem of bandwidth, but we already have advertising legal models for printed material, why not apply some of this to email?

    For instance, in the case of newspaper or magazines, an advertisement must clearly be identifiable as an ad, otherwise the ad must contain a very visable "This is a Paid Advertisement".

    So, I figure spam is trying very hard to be indistinguishable from regualar email or email sent from a legitamate company with which you do business. Let's just make a law that says that any email that is an advertisement must contain ADVERTISEMENT in the subject and body.

    Sure, they can break this rule pretty easily, but this will allow the user and or government to identify which emails are not following the rule and find them.

    This also gives the user and software developer and easy route to dispose of spam. If you don't want it, just filter for the word ADVERTISEMENT and push it to an ads folder or the trash.

    Sure, there are still issues with this, but its a start.

    --
    Like puzzle games? Warehouse51 for iOS
  64. Comment removed by account_deleted · · Score: 3, Interesting

    Comment removed based on user account deletion

  65. Snailmail DoS by awptic · · Score: 3, Interesting

    I've already signed him up for every catalog in the first 6 pages of google search results for "free catalog" .. anyone wanna pick it up from here ?

  66. Re:are you kidding? by zsmooth · · Score: 3, Informative

    Ummm, USPS is NOT a private entity, it is still owned by the government (although it runs pretty independently). There's been talk of spinning it off as a private corporation, but it hasn't happened.

  67. Lies are perfectly legal; they're even protected! by Qrlx · · Score: 3, Insightful

    Sadly, fraudulently representing yourself is protected speech under the First Amendment to the Constituion. The Nike case in California is the biggest test to this in a really long time.

    I don't think things would be so different if corporations didn't have that right -- the actors, script writers, spammers, etc. working for corporations would still have the right to tell you lies, as individuals.

    (OT TIME) What pisses me off is when the *cops* are allowed to misrepresent the truth. Like alleged sniper guy John Malvo not getting a lawyer because he asked "Do I get to see a lawyer?" and the cops said "No." Then he started singing like a bird. The judge ruled the testimony should be allowed, since Malvo didn't explicitly ASK for a lawyer -- he didn't say "Can I see a lawyer?" But it's clear from his question that his intent was to see a lawyer, and it's also quite clear that the cops knew they could play word games with him, because everyone wants this kid to fry so jurisprudence goes out the window. Hmmm I guess it does piss me off that the cops lie, but it pisses me off even more that it now has a big fat stamp of approval, at least in Virginia. What a crock -- what if someone who doesn't speak English well (Malvo perhaps) is detained and can't formulate the specific grammatically correct sentence to request a lawyer? Oh, wait, that person is probably a terrorist or illegal immigrant, nevermind.

    So, I guess the overall arc of this post would be: don't come bitching about how horrible all these spammers are, they lie, hide behind secrecy etc. when that sort of behavior is exactly the same thing our legal system is doing with Malvo, and don't get me started on Ashcroft's tactics.

    And, what's the fucking problem with spam in the first place. C'mon people, I have had the same HOTMAIL account for like five years, and for a LONG time my email was listed with each post on SlashDot. I still don't get that much spam, maybe five a day, and I'm not so freaking busy that I don't have the FIVE SECONDS it takes to delete them. What's that, you say? You run a mail server and the spam has got you down? Well, that's why your job is to run that mail server. If it were easy, they wouldn't have to go out and hire a specialist.

  68. Re:A stupid analogy by Steve+B · · Score: 2, Insightful

    P2P networking is a technique which may be used legitimately or illegitimately. Spamming is, in and of itself, a violation of property rights, and thus has no legitimate use.

    --
    /. If the government wants us to respect the law, it should set a better example.
  69. has everyone missed the point? by maxpublic · · Score: 5, Interesting

    Do you honestly think Congress gives a good goddamn about spam? Congressman don't have to deal with this shit; their lackeys do.

    This issue isn't about killing spam - it's about using spam as an 'issue' to kill anonymity online. It's yet another attempt by the government to throttle what remains of our privacy, and spam is a very convenient complaint to base this sort of legislation on.

    Thanks but no thanks. I'll take the spam in exchange for privacy. My privacy is far more important than any government attempt to curb unwanted email, especially when it's just a ruse to eliminate what few rights I have left.

    Max

    --
    My god carries a hammer. Your god died nailed to a tree. Any questions?
  70. why not hit their web sites? by dougnaka · · Score: 2, Interesting

    With valid requests for the content.. so you can "cache" it proactively. Have the mail server query every http link and download whatever it is a couple times... but maybe your download script is accidently broken and just keeps sending the SYN requests, it could keep a list of "active" http requests to make ever few minutes or so. Of course you would want to whitelist some sites, and do some kinds of filtering to be closer to sure that it's an actual spam.
    As a seperate note, I've used popfile for a while now and I don't even notice the spam. anymore, my popfile is 99.6% accurate. Popfile is easy to use also, I setup 3 non-techies on it and they haven't called since the initial configuration. Spam is no longer the headache it used to be.

    --
    My Linux Command of the Day site : LCOD
  71. Super-DMCA by Elequin · · Score: 3, Interesting

    Holy *%&@.

    I just realized something. (Yes, I'm probably a bit behind, and just mod me redundant if this has been discussed before.)

    The Super-DMCA that's been going around basically makes it a crime to attempt to hide the destination or originating point of any communication with the intent to defraud a communications provider.

    This Super-DMCA has been passed a lot of places. Doesn't it pretty much already make forging headers for sending spam illegal?

  72. Does anyone really want Spam? by interstellar_donkey · · Score: 2, Insightful

    To read about this guy's testimony, you would think there are millions of folks out there who want spam. He tries to paint "legitimate" spammers as good, decent folks who have to resort to underhanded tactics to circumvent the evil ISPs who block their spam messages.

    Now, personally there are a few things that I'd want to receive that could be considered spam. There are some companies I go to where I want to hear about the latest deals (the weekend specials from the airline, for example). Sometimes these emails have an advertisement attached to it, which is fine. But the difference between what these companies do and what this scumbag testifying before congress does is I actually want to receive their bulk email. I had to go out of my way to be put on their mailing list, and in that process it was made quite clear that I would receive the bulk mailings.

    Of course, the emails I want to get aren't really unsolicited. The impression I get is spammers like this guy don't seem to see any difference. A line hidden in an AUP that says when you sign up for a service you will receive "valuable offers from partners" is not the same as going to a specific webpage and asking to be placed on a mailing list.

    So the question remains: Is there anyone who wants to receive coupons for $.40 off Lysol, offers to refinance their mortgage, discounted prescription drugs etc. on a regular basis? Does anyone think this is a valuable service? Would anyone be angry at their email provider for blocking those types of messages before they reach their inbox?

    To read about this guy, there are millions who do. Personal experience points to something altogether different.

    --
    The Internet is generally stupid
  73. A trend is emerging by cardshark2001 · · Score: 2, Interesting

    Have we seen a SINGLE article about a spammer here on Slashdot, EVER, where the spammer did not claim that they don't send pornography spam? Where the hell do I get it all from then? Santa?

    --
    WWJD? JWRTFA!
  74. What happens if... by RubberChainsaw · · Score: 2, Insightful

    ..I send out spam for your company maliciously? I send out forged-header spam advertising the product of a company I hate, causing that poor company millions in fines.

    --
    I welcome our new 99% overlords.
  75. Astonishing capabilities by Carnivorous+Carrot · · Score: 2, Funny

    > an eighth-grade dropout and self-taught
    > computer programmer from Louisiana, who claims
    > that he sends between 120 million and 180
    > million e-mails every 12 hours, that he can
    > break sophisticated software filters 24 hours
    > after they are deployed, and that he has no
    > choice but to resort to forging the sender
    > information in his bulk e-mail so he can be
    > anonymous and maintain his connection to the
    > Internet.

    And here you guys all thought Neo was one of the good guys.

    --
    "Has [being a kidnapped teenage girl, raped repeatedly for months] changed you?" - Katie Couric to Elizabeth Smart
  76. Open Relays and an Immodest Proposal by jefu · · Score: 3, Interesting
    I tend to try to turn problems around and see if there's not a fun backwards approach. (Like instead of trying to stop a bulldozer you find a way to lure it into a swamp.) It doesn't always work and often ends up with people pointing at me and laughing. So be it.

    In the case of spamming I've started to wonder about open relay blocking. Most sites that offer information about open relays to facilitate blocking (such as ordb.org) do not make the contents of their open relay lists public. And that made perfect sense to me until yesterday when (while looking into several spam filtering methods) I got curious and started looking for a list of open relays. I found at least one such - but it was clearly aimed at the spammers as it had incomplete information and a way to purchase a subscription.

    So, by making open relay lists private and secret, we're actually supporting the spam industry (not necessarily the spammers directly, but the folks who sell them stuff).

    Maybe its time to think about releasing the lists. This could have several interesting effects (positive :) , neutral :| and negative :( ) :

    1. :| The organizations who collect open relay lists would continue to function as they do now, but sites that would like to use the lists heavily could download their own copies.
    2. :) The folks who sell open relay lists would find it harder to do that if the information were freely available. With a bit of luck they'd go out of business.
    3. :) it would become much harder for site admins to ignore open relays they control if everyone used them and the traffic went way up. This would be an incentive to close them. (Of course, it would be unethical to suggest that anyone else route their mail through the relays - that would amount to a denial of service.)
    4. :) As the relays got closed, the traffic on those left open would increase dramatically - thus increasing the pressure on those site admins.
    5. :) Knowing that a site has open relays might prompt users, friends of the site admins and so on to bug them into closing them. Currently it would require rather more work on the part of such buggers to determine that the buggee needing bugging.
    6. :) Eventually, with a bit of luck, the great majority of the open relays would be closed and spammers would end up using very slow machines. Indeed, it might become profitable for major sites to run a couple of open relays on (for example) an old 80286 on a 1200 baud serial line).
    7. :) Eventually, faced with a small pool of (slow?!) open relays, spammers would turn to spam support sites that could send the mail for them. And I'd be willing to bet that such sites would charge nicely for the service. And there's still nothing to prevent a user from blocking those sites.
    8. :( There would be a serious (but I suspect temporary) increase in spam. Current spam filters would not stop working.
    9. :( There would be problems with people forging open relay lists with machines of people they might want to annoy. (This could be handled by digitally signing such lists from trusted sites.)
    10. :) It would keep the congresscritters from meddling in things they dont understand - with what is almost certain to be disasterous effect.

    Maybe it wouldn't work, but the stuff written about the spam proposal before congress is seriously scary - it would essentially legitimize whole classes of spam and make it much harder to turn off such "legitimate" spam.

    1. Re:Open Relays and an Immodest Proposal by jefu · · Score: 2, Interesting
      The plusses and minusses of this have been wandering through my brain for a day or two now and a couple more facets of this kind of thing have surfaced and floated around long enough to be worth mentioning.

      Open relays could have interesting uses - both anti-spam and pro-spam.

      An organization wanting to curb spam could operate an open relay set to run very, very slowly. This has (I read it in /., so it must be true) been done.

      More interestingly, such a machine could forward only some of the spam moved through it. Maybe only one message out of a thousand. Spammers would still get a response, but the total amount of spam would be reduced substantially.

      Or, if the idea of dropping mail does not agree with you, the mail could be wrapped in another message, forwarded, with whois and contact information (to the extent it is available) from the originating host, and a message explaining that it is spam.

      This has the nice side effect of being able to also collect spammer origination IP addresses for use in future blocking. Or to collect spammer websites.

      But the most intriguing notion to me is that spammers themselves could do the same thing, dropping mail - which would make their spam service look better than their competitors. Better still, at the same time, it could be harvesting the email addresses for use in their own spam delivery. Such a machine could clearly cull out the "I'm trying every three letter id possible." email addresses.

      Or, you could do the wrapper thing above and.... but I've likely said too much already. ("You've yourselves to blame if its too long, you should never have let me begin.")

      So, any spammers out there want to confess? Is anyone doing that? Go ahead, be an anonymous coward and tell us. I promise (on behalf of all the /.'ers) that we won't use it against you.

      I'd wonder myself about the people who sell open relay lists - putting a machine or three to harvest emails on it could generate email address lists that they could sell as well.

  77. Not only !=, Spam is the opposite of bulk mailing by geekotourist · · Score: 2, Informative
    Starting with a definition: Spam is "bulk email from a stranger." Content (commercial, religious, political) doesn't matter: that is is both bulk and from a stranger is what causes the damage. (And you don't want to define Spam by content, because courts will be less likely to uphold laws based on that.) I'm using a definition written about in Brad Templeton's essays.

    Significant differences separate spam from bulk mail, making them opposites, not just non-equals. In short, bulk mail is a negotiated part of a public good, spam is an unnegotiated public bad that interferes with (or can ruin) a public good. Differences include:

    • Negotiations and trade:

      With bulk mail every step of the process involves trade and negotiations. This includes the last step- you receiving mail- because bulk mail subsidizes first class mail. Granted, this last step was negotiated as a group (all people in the US using the US postal service).

      Spammers don't negotiate and don't trade with the people affected by their actions- one doesn't hear of them sitting down to say "I'm going to use this stolen credit card to buy an account for $30 and then send out 5,000,000 spams that'll cost you 3 days of sysadmin time and a crashed hard drive. Deal?" or "I'm going to use your return address so that your email box fills every 2 hours with bounces, and you lose important emails from a prospective employer, in return for me not getting antispam complaints. Deal?"

    • Predictable prices and costs:

      Bulk mail is used by the USPS to have smoothed out, predictable costs and income- again, subsidizing first class mail. From the USPS's point of view, everything is known and predictable *within the system* with standardized costs i.e. "this week in this area we'll be paid $.15 per mail for an average of 200,000 deliveries of ads. If someone wants to send 2x the ads they'll pay 2x the old total. We'll also be paid $.37 for about 20,000 first class mailings. Each postal worker will carry about 20 lbs of mail, except at holidays where it is 30 lbs..." Same from the user's p.o.v. "6 days a week a postal worker'll come by the mailbox. It'll take about 4 days for a letter to arrive, 7 during holidays, and about 1/100,000 will go astray (or whatever the error rate is).

      Because spam isn't negotiated and because of the fake return addresses, etc, you have unpredictable and unknown costs, i.e. "every day I'll send an average of 5 mails, receive 10 mails from non-strangers (including annoying ones, but I voluntarily gave my cousin or Microsoft my address), and at random times get horrible pictures, be flooded by bounces or have my ISP crash or be blacklisted." Those costs are externalities- costs (or benefits) that accrue to entities outside of the negotiation process.

      I've seen arguments that say that because of peering agreements, ISPs or users should think of a flood of spam bouces the way an 'All-You-Can-Eat' restaurant thinks of Sumo wrestlers: an expensive but expected cost. No, because the wrestler still fits on the bell curve the restaurant uses to predict eating habits, and what the wrestler does is legal. No human can fill their stomach with more than about a gallon of food, and the contract with the restaurant is that it is "All YOU can eat HERE", you don't get to feed two people on one ticket or bring food home using rubber pockets. Spammers cheat- its like one person paying and letting 10 people sneak in the back door. And they break the contract- those peering agreements / contracts usually say no spamming.

    • Unrecoverable costs and opportunity costs:

      spammers cause damage far in excess of the money they put into the system. Its like the flu, a computer virus, forest fire or a traffic accident- the money paid into recovering from it is nowhere near the total damage it caused- you get a net loss to society because it happened. Spam also causes opportunity costs- all that time and money spent recovering from spam could have been spent in more productive ways. Money spent merely to restore you to where you were before is money wasted compared to being able to invest in the future.

  78. Re:Uhhh..Does it work with the IRS by GnarlyNome · · Score: 2, Funny

    every year they send me an obscine bill.

    --
    Diplomacy is the art of saying "Nice doggie" until you can find a rock. Will Rogers
  79. .GOV by mabu · · Score: 2, Insightful

    One way to address the spam issue is to open the .GOV TLD to every day people. Let us all get a .gov e-mail address and then we'll either not get spam, or the spammers will stop filtering .gov from their databases and clueless politicians and government people will begin to get an idea of how counterproductive not prosecuting these spammers can be.

    1. Re:.GOV by GuNgA-DiN · · Score: 2, Insightful

      I had another plan.... just set up SpamAssassin and then forward all your filtered spam directly to your Congressmen. And, just for good measure, you can CC president@whitehouse.gov too. If everyone in the USA did this there would be new anti-spam laws passed by next week.