Slashdot Mirror


Stronger Anti-Spam Law Proposed

NumberField writes "The fight against Spam is making for some strange bedfellows. A new bill sponsored by Senator Charles Schumer (D-NY) and the right-wing Christian Coalition that would let individuals sue spammers for $1000 per message. What isn't clear is how they will define spam broadly enough to outlaw it, but narrowly enough to avoid making it a bonanza for lawyers. For more information, see Schumer's fact sheet (PDF), or his press release." Update: 06/13 14:20 GMT by M : The draft bill (pdf) is available.

40 of 291 comments (clear)

  1. Why bother by kamukwam · · Score: 5, Insightful

    You can propose all the anti-spam laws you want. But if you keep it restricted to one country, you won't go very far. Spammers will use other locations to send their spam from. So it only works if you have an international law.

    1. Re:Why bother by the_bahua · · Score: 5, Insightful

      I think what the poster said about it being a bonanza for lawyers was an understatement. This, if it pans out, will create a whole new basis for practice for many lawyers.

      Funny thing is, it still won't end spam.

    2. Re:Why bother by jkrise · · Score: 4, Insightful

      "But if you keep it restricted to one country, you won't go very far"

      Huh... about 70% of all internet traffic happens in ONE country. Contrary to public posturing, this ONE country houses most spammers. Most anti-spam s/w firms operate in this ONE single country, and they make profits. Most porn also originates from this SINGLE country.

      There can be a simple solution to spam originating from outside - a penalty on the beneficiary of the spam (not the conduit). Confusing the issue further only delays a meaningful solution.

      Incidentally the SINGLE biggest software firm operating in this SINGLE country OPPOSED anti-spam legislation. This firm also acquired an anti-virus firm, instead of writing virus-resistant code. Food for thought?

      --
      If you keep throwing chairs, one day you'll break windows....
    3. Re:Why bother by Library+Spoff · · Score: 2, Insightful

      >>a penalty on the beneficiary of the spam (not the conduit).

      so If i wanna screw my business competitor I just send lots of spam out advertising his/her company?

      --
      Acid House saves Souls
    4. Re:Why bother by jkrise · · Score: 5, Insightful

      " If i wanna screw my business competitor I just send lots of spam out advertising his/her companny?"

      Watch it! Since you seem to be interested in competing using such sly techniques, your competitors products might actually succeed...

      You'd do better improving and selling YOUR product, than screwing competition. One Microsoft is enough for One World.

      --
      If you keep throwing chairs, one day you'll break windows....
    5. Re:Why bother by Pharmboy · · Score: 3, Insightful

      Funny thing is, it still won't end spam.

      What is MAY do is help reduce new startups for spam, since the potential for lawsuits and charges will reduce the appeal to new spammers. If this narrows down the field, it gets easier to find the hardcore professional spammers.

      One of the more important things that I think it accomplishes is psycological. It finally establishes a legal basis that spam is bad. Many people see spam as an irritant only (ie: my mom, Joe Sixpack, etc.), but once the common perception finally sees that it is a crime that robs resources and costs us ALL money, you will see changes in attitude from ISPs, access providers and rack services. This won't happen overnight, but it IS key to eventually reducing spam from 1/2 to 3/4 of all mail, to just background noise. A small, but necessary start.

      --
      Tequila: It's not just for breakfast anymore!
  2. Assuming you can identify the spammer.... by apdt · · Score: 5, Insightful

    That's all very well, but for a large chunk of spam, identifying the spammer if difficult, and to it in a way that would hold up in court would be even harder..

    --
    I lay awake last night wondering where the sun had gone, then it dawned on me.
  3. How about sanctions instead? by Max+Romantschuk · · Score: 4, Insightful

    I propose the following:

    1. Get local spam under control.
    2. Start sanctions agaist countries / ISPs from which spam originates.

    Not sure this makes any sense though, but if countries like China find themselves at a disadvantage due to a handful of local spammers I would think they would be more motivated to deal with the problem.

    I'm not proposing any tehnical solutions though... anyone have ideas on that?

    --
    .: Max Romantschuk :: http://max.romantschuk.fi/
    1. Re:How about sanctions instead? by Anonymous Coward · · Score: 1, Insightful

      Start sanctions against countries...

      how very american of you... throwing sanctions left and right. who died and make your country own the world?

    2. Re:How about sanctions instead? by Anonymous Coward · · Score: 2, Insightful

      We have 1 & 2, but spam continues to be a problem. Why do you think everybody is complaining about the respective rest of the world as the primary spam source? Spam is rarely sent from the recipient's country. "Local" spam is under control. We also have sanctions against ISPs from which spam originates: There are lists of known spam-friendly ISPs (and their IP blocks). Other DNS blocking lists address faster moving targets. Those are collective punishments against every customer of the listed ISPs. There are even people who block entire countries. You aren't thinking about "out of band" sanctions, are you?

  4. Not necessarily by cperciva · · Score: 5, Insightful

    If the law is drafted in a manner which allows authorities to go after the people benefiting from spam, rather than just the people actually sending it, then they could make substantial progress. Most of the spam I receive is for US-based companies, even if it was actually sent from China.

    1. Re:Not necessarily by SacredNaCl · · Score: 4, Insightful

      Most of the spam I receive is for US-based companies, even if it was actually sent from China.

      We have a law to deal with this kind of organized criminal activity, it's called RICO. I fail to see any legal reason that the federal government can not apply RICO laws to spam. It's an organized illegal activity, and the people who pay spammers to send it are just as guilty and in my view just and culpable as the spammer who sends it.

      Just draft a basis antispam law at the federal level -- make Ashcroft earn his money enforcing it. Tip ...Tell him most spam is pronographic in nature, he spent most of his career in Missouri hassling libraries and adult film/book stores.

      --
      Freedom is merely privilege extended unless enjoyed by one and all.
  5. Won't work _in my opinion_ by termos · · Score: 4, Insightful

    let individuals sue spammers for $1000 per message
    I don't think many individuals would bother with this, it's easier to just the delete the spam mail than it is to risk loosing money on some lawsuit, and even if they did decide to sue them they would only have "defeated" one spammer (or his team or whatever it could be). 1 down 50000 to go.

    --
    Note to self: get smarter troll to guard door.
  6. And one more thing... by jkrise · · Score: 2, Insightful

    The ONE country affected and profiting from spam and anti-spam s/w is never known to suffer in silence when other countries cause economic harm to it. In other words, if outside spam was the real problem, this would have been solved a million times by now.

    --
    If you keep throwing chairs, one day you'll break windows....
  7. Do not Spam list not effective for ROW by EvilMike · · Score: 5, Insightful

    I don't see the point in having a 'do not spam' list for the US, when the majority of spam the rest of us are receiving on this planet comes from the US. Is the US govt seriously going to compile a list for all 6 billion of us?

    This proposal still makes it a civil matter for the recipient, having to sue the spammer for damages. What's needed is a federal US law making mass junk emailing a criminal offense. Instead they are just pushing it back onto the people to fight in civil courts. The only winners here are the spammers and lawyers.

    1. Re:Do not Spam list not effective for ROW by mrjb · · Score: 2, Insightful

      I'm not from the US, but it seems to me setting up a 'do not spam' list is pretty basic. Just put all the names on there. Anyone who doesn't want in, raise your hand and say 'aye'.

      --
      Visit http://ringbreak.dnd.utwente.nl/~mrjb/growingbettersoftware to download your free copy of the book
  8. Mission impossible by Rutje · · Score: 3, Insightful

    If they are able to legally define spam (not that easy), the spammers will immediately find an alternative which is not illegal...
    It's useless for the same reason P2P can't be wiped out!

    Long live the freedom of information!!

    --

    I want my karma, and I want it now!
  9. open to abuse? by maliabu · · Score: 2, Insightful

    would this bill be used to attack people you don't like rather than the real spammers??

    one would think that sexual harassment lawsuit is used when you're fired by your female superior, not when you're sexually harassed :)

  10. Not sure about the actual bill... by Goonie · · Score: 4, Insightful
    I haven't read the whole bill, just the fact sheet, but the proposed law isn't great. Here's my take, based on the fact sheet:
    • The first thing it doesn't do is ban unsolicited commercial email, as is the majority position amongst anti-spam campaigners.
    • It *does* create a national "do-not-spam" list. If you're on the list, and you get sent spam, it's a criminal offence. The list will be protect by "military-grade encryption", whatever this means. I'd like to see a few more details on how they ensure that spammers can't get addresses out of this database.
    • It makes it illegal to forge headers and to have misleading subject lines in commercial email. Sounds reasonable enough.
    • Requires be able to unsubscribe. Whatever. What happens when they shut down their fly-by-night company and sell the addresses on?
    • Bans dictionary attacks and "address harvesting". This one I'm not really all that keen on, particularly the bans on "address harvesting". It doesn't seem useful - what's to stop a foriegner doing the address harvesting and then selling the collected addresses to an American spammer? There's no mention of a provision in the bill banning the trading of email address lists. More to the point, it targets more activities than are necessary to stop spammers, IMHO.
    • Increases law enforcement resources and penalties. That's a no-brainer.
    --

    Any sufficiently advanced technology is indistinguishable from a rigged demo
    --Andy Finkel (J. Klass?)
    1. Re:Not sure about the actual bill... by Phroggy · · Score: 3, Insightful

      It *does* create a national "do-not-spam" list. If you're on the list, and you get sent spam, it's a criminal offence. The list will be protect by "military-grade encryption", whatever this means. I'd like to see a few more details on how they ensure that spammers can't get addresses out of this database.

      This is a BAD IDEA.

      1) Take an existing list of 500 million e-mail addresses. While you're at it, guess a few billion more at random.

      2) Check all of these against the super-duper military-grade heavily encrypted top-secret opt-out list. This does not require decryption of the list. Save the results.

      3) Compile a new list of every address you found that's in the opt-out list. Burn this to CDs.

      4) Send out spam, advertising your confirmed opt-in CDs for $500 each.

      5) ???

      6) Profit!

      --
      $x='S24;r)>63/* h@<5+oZ)32"5cz';$me='phroggy'x$];
      $x=~y+ -xz+\0-Tx+;print$_^chop$me for split'',$x;
    2. Re:Not sure about the actual bill... by blix5 · · Score: 2, Insightful

      If they're serious about this, I'd like to see them require the "[AD] in the beginning of the Subject" rule that I've heard about countless times.
      That way, email filters would catch more unwanted messages.

  11. Re:Spam by spakka · · Score: 4, Insightful

    The press release is only about Porn targetted at children, shouldn't that be unwanted email targeted at everybody??
    As they stand, the proposals seem to target all spam, not just porn, although it's clear that the christians are in it to stop the porn. It makes me uneasy when reasonable people ally themselves with crazy people, even if the end is good. How long before some of the christians realise that the bill does nothing to combat the exchange of pornographic materials between consenting adults?

  12. Re:beyond reasonable doubts by aug24 · · Score: 3, Insightful
    Here's the start of a plan - or a 'kernel' if you will :-)

    1) Automatic loss of suit if return/reply address is faked/unreachable or there is no unsubscribe address
    2) Recipient must reply requesting to be removed from list or mail unsubscribe address to become eligible.
    3) If Recipient receives more mail after 28 days have passed then suit is proven.

    Seems easy enough to me. Do it!

    J.

    --
    You're only jealous cos the little penguins are talking to me.
  13. Bad Idea by Dr.+Sp0ng · · Score: 4, Insightful

    It is not the government's place to tackle the spam problem. If they try, they'll just fuck it up, like they've fucked up so many other things in the past. Spam has all the telltale signs of a problem that legislation won't help. It's a relatively victimless crime (or rather, its victims, with the exception of those companies who run the huge backbones, are at most marginally impacted by the problem), it can be done in a relatively anonymous fashion, and any laws banning or regulating it will be very difficult to enforce. Problems like that (drug abuse and so on) are never helped by laws, and instead just get worse with each additional crackdown.

    The problem can never be fully solved by technical means, being a sociological problem, but technical solutions can do a much more effective job in curbing the problem than any legislative solution, and cause fewer additional problems in the process. Rather than try to get the government to pass ineffective feel-good laws, let's fix the problem from our end. It's time to replace SMTP with a less trusting protocol - the Internet is clearly a very different place than it was when SMTP was originally created, and we need a new mail protocol to match the times.

    Keep the government's laws off my Internet, people. It is a medium that spans the entire globe and is not under the jurisdiction of any one government anyway, so laws will never do the job. They'll just cause more problems and never solve anything.

    1. Re:Bad Idea by Ben+Hutchings · · Score: 3, Insightful
      It's a relatively victimless crime (or rather, its victims, with the exception of those companies who run the huge backbones, are at most marginally impacted by the problem)

      Tell that to the people whose genuine addresses have been used as return addresses by spammers.

  14. Bonanza? by Anonymous Coward · · Score: 1, Insightful

    What's wrong with it being a bonanza for lawyers? And what exactly do you mean by bonanza? Surley you dont mean the television show from the 60's? why do you have to bring Mitch Vogel into this? Or Michael Landon for that matter?

    Seriously though, if the judgements are only $1000 I can't see this creating a lot of work for laywers. Besides whether you like lawyers or not they do have a place in society and to craft legislation based on whether laywers will get involved is retarted.

  15. Will it go beyond its purpose? by blix5 · · Score: 1, Insightful

    One scary thing about a federal spam law is that our national government tends to not know when to stop when it comes to 'protecting the rights' of the innocent.

    Add to this the variable of an extremist right-wing organization... this proposal could end up taking away more rights than it protects.

    Remember that fiasco known as the Communications Decency Act?

  16. Re:beyond reasonable doubts by Phroggy · · Score: 3, Insightful

    and with the "Do Not Spam" registry of e-mail addresses, wouldn't it make it easier for spammers to request such do-not-spam list and spam it??

    Yes, absolutely. This is the biggest problem with the idea. Even if the list is only provided in the form of one-way queries (look up a particular address to see whether it's listed, without seeing the whole list), spammers outside the US would be able to brute-force the list and get a list of confirmed e-mail addresses. They'll figure their success rates should be pretty high, since these people aren't getting other spam from the US to distract them from whatever crap they're peddling. And of course once this is done, the resulting list will be for sale for about $500 per CD, and we'll get spam offering to sell it to us.

    --
    $x='S24;r)>63/* h@<5+oZ)32"5cz';$me='phroggy'x$];
    $x=~y+ -xz+\0-Tx+;print$_^chop$me for split'',$x;
  17. It probably still came from the U.S. by fmaxwell · · Score: 4, Insightful

    Most of the spam that I receive comes from South Korea, Russia and China, not the United States.

    If the spam is advertising goods or services sold by someone in the U.S., the spam came from the U.S., regardless of what physical server delivered it. As they say, "follow the money." I don't care that Alan Ralsky pays for his spam to be sent through Brazil. His spam still came from the United States. An effective anti-spam law will allow you to sue him for a significant sum of money ($1000 or more) and federal, state, and local law enforcement to prosecute him for a crime.

    Want to deal with overseas firms sending spam to U.S. citizens? Then handle it like the "war on terror." Pressure other countries to turn over spammers for prosecution for violating U.S. laws. This can be done with multiple tools, including threats to revoke a country's "Most Favored Nation" trading status, reduction in aide to countries where we provide same, tariffs, and even federally-mandated blocking of Internet traffic to and from that country.

    1. Re:It probably still came from the U.S. by khakipuce · · Score: 2, Insightful

      Yeah, if you just put the spammers in Guantanamo Bay with out trial or a release date, then America (land of the free?) would be much better off!

      --
      Art is the mathematics of emotion
  18. Re:Spam by AndroidCat · · Score: 2, Insightful

    It should be about consent rather than content. Creating two classes of spam is a bad thing.

    --
    One line blog. I hear that they're called Twitters now.
  19. Opt-out lists don't work by spakka · · Score: 4, Insightful
    A publically available database of addresses, all self-validated as belonging to real people in the world's richest country, will be prime spamming material to anyone outside the US.

    From the fact sheet:

    Anyone who sends spam to these addresses will be subject to stiff fines. The database will be protected by military-caliber encryption to ensure the protection of its contents.

    Nonsense. How can the database be encrypted if all potential spammers are deemed to have notice of every address on it?

    1. Re:Opt-out lists don't work by jpmorgan · · Score: 2, Insightful

      Nonsense? Pah. Easy. Only release a list of md5/sha hashes of the addresses.

  20. Bad idea by Skapare · · Score: 2, Insightful

    Such a provision would make it easy for anyone to cause harm to a company or individual by forging spam that appears to be benefitting them. It's a bad idea.

    --
    now we need to go OSS in diesel cars
  21. Re:Legislation is not the solution by fmaxwell · · Score: 4, Insightful

    Spam is so easy to kill: add authentication to SMTP and create a new email network of authenticated email. Servers won't accept email from unauthenticated sources, and spammers will be unable to hide their tracks.

    SMTP already supports authentication. My server won't send mail except from someone who has a username and password for it. How do you make everyone configure their mail servers that way? Hell, we can't even get everyone to turn off open relays.

    The problem with what you propose is that it is sender-side. How will you know if the sender and/or his server are to be trusted? Will your server ask theirs if the sender is to be trusted? Will yours ask if the e-mail address is valid? It would take spammers about 20 minutes before they had something that mimmicked a legitimate e-mail server.

    Or are you proposing something like the third-party system we have for secure web sites, where every person operating a mail server pay hundreds of dollars per year to Verisign (or a handful of other "trust" companies)? How would Verisign determine if a server operated by some guy in Argentina was to be trusted? Would you revoke his certificate if spam came from his server? What if it turned out to be a temporary configuration problem or a bug in his mail server that was exploited by a spammer? What if it was perpetrated by an ISP's customer -- one with legitimate access to that mail server? If I signed up for an AOL account and then started spamming from there, would AOL's mail certificate be revoked?

    It's not an easy problem to solve through technology. If it was, a technological solution would have been implemented five years ago.

  22. Sue the suppliers - not the spammers by Zog+The+Undeniable · · Score: 4, Insightful
    Making it illegal will be about as effective as the "Do Not Make Illegal Copies Of This Disc" label on software piracy. Spammers are already on the shady side of the law with a lot of the stuff they're trying to sell (e.g. hardcore pr0n and prescription drugs), so they're not going to be scared by this. Add to this the facts that most spam has its origins well obfuscated, preventing the culprits from being tracked, and we're onto a loser if we try and track them down.

    My suggestion is that the SUPPLIER of the advertised goods is fined, not the spammers. The supplier is, after all, paying someone to send the spam, and they're easily traceable (otherwise they'd have trouble fulfilling your orders for Viagra, septic tank cleaner and goat pr0n).

    --
    When I am king, you will be first against the wall.
  23. Re:First Amendment Issue? by Anonymous Coward · · Score: 1, Insightful

    I'm tempted to say, "Keep your nose out of our Constitution."

    We Americans do view the 1st Amendment as "Sacred Text" mainly because we don't trust today's politicians to amend anything in the Constitution. They would seriously fuck it up because of "political correctness".

    I (we) don't want to live in your socialist 21st century. And I'll keep my firearms just in case you want to force me.

    Our Constitution is what separates us from you and I'd just as soon go down fighting rather than give it up. In other words - it must truly suck to be you.

  24. As an internationalized US citizen by cybersekkin · · Score: 2, Insightful

    Spam--come on if the christian coalition (caps left off on purpose) want spam stopped so their children do not have to see t&a they should filter their email better and stop having their children sign up for the sex mailing list in the first place.

    As for spam in general. laws will not help but will just serve to allow lawyers, RIAA and others loop holes to screw over the internet. When it is time to err it needs to be in favor of the freedom of speech-take care of spam yourself with a good filter, deal with it the same as you do your mail box with postal mail-->the argument about spam being free is BS it has to be written and (maybe spell checked) and then has to be sent, it is just cheaper than postal mail. The government need to stop trying to legislate everything and let us live our lives freely.

  25. Re:Spam by capoccia · · Score: 3, Insightful

    How long before some of the christians realise that the bill does nothing to combat the exchange of pornographic materials between consenting adults?

    Most Christians aren't that naive. They know that kinky and perverted things go on between consenting adults every day. That doesn't mean that they want to see it. And if someone doesn't want to look at porno, why should you assault their conscience with it? Just like you wouldn't go to Egypt and start throwing sausage at every Muslim you saw.

    Doesn't freedom of religion grant them the freedom to go on blocking the crud coming at them as long as they are not impinging on the rights of others?

  26. Hmm... by LastManOnEarth · · Score: 2, Insightful

    Dont you think it's a greater violation of rights having spyware and adware on your system than just recieving unsolicited e-mail? I think spam is just a nuisance while spy/adware actually affects performance of your hardware, not to mention the fact that its broadcasting your private information to the world allowing you to recieve a large portion of spam (mmm...large portion of spam).It's like me parking my car on your lawn then setting up cameras looking into each of your windows. Unfortnately everyone that recieves spam is aware of it, unlike spy/adware. And hence, public is clamoring for spam to stop. Dont get me wrong I love charging the chumps that install i-mesh/kazaa/realplayer/etc. money for removing the crap that makes there brand new Dell run like a 486, but if your talking rights violations that takes the cake. I say that all of you not already using a spy/ad bot removal program should run one ...youd be surpised what youll find. PS. Dont forget the growing number of spam coming through windows own messenger service.