Slashdot Mirror


Stronger Anti-Spam Law Proposed

NumberField writes "The fight against Spam is making for some strange bedfellows. A new bill sponsored by Senator Charles Schumer (D-NY) and the right-wing Christian Coalition that would let individuals sue spammers for $1000 per message. What isn't clear is how they will define spam broadly enough to outlaw it, but narrowly enough to avoid making it a bonanza for lawyers. For more information, see Schumer's fact sheet (PDF), or his press release." Update: 06/13 14:20 GMT by M : The draft bill (pdf) is available.

71 of 291 comments (clear)

  1. Why bother by kamukwam · · Score: 5, Insightful

    You can propose all the anti-spam laws you want. But if you keep it restricted to one country, you won't go very far. Spammers will use other locations to send their spam from. So it only works if you have an international law.

    1. Re:Why bother by the_bahua · · Score: 5, Insightful

      I think what the poster said about it being a bonanza for lawyers was an understatement. This, if it pans out, will create a whole new basis for practice for many lawyers.

      Funny thing is, it still won't end spam.

    2. Re:Why bother by jkrise · · Score: 4, Insightful

      "But if you keep it restricted to one country, you won't go very far"

      Huh... about 70% of all internet traffic happens in ONE country. Contrary to public posturing, this ONE country houses most spammers. Most anti-spam s/w firms operate in this ONE single country, and they make profits. Most porn also originates from this SINGLE country.

      There can be a simple solution to spam originating from outside - a penalty on the beneficiary of the spam (not the conduit). Confusing the issue further only delays a meaningful solution.

      Incidentally the SINGLE biggest software firm operating in this SINGLE country OPPOSED anti-spam legislation. This firm also acquired an anti-virus firm, instead of writing virus-resistant code. Food for thought?

      --
      If you keep throwing chairs, one day you'll break windows....
    3. Re:Why bother by Library+Spoff · · Score: 2, Insightful

      >>a penalty on the beneficiary of the spam (not the conduit).

      so If i wanna screw my business competitor I just send lots of spam out advertising his/her company?

      --
      Acid House saves Souls
    4. Re:Why bother by jkrise · · Score: 5, Insightful

      " If i wanna screw my business competitor I just send lots of spam out advertising his/her companny?"

      Watch it! Since you seem to be interested in competing using such sly techniques, your competitors products might actually succeed...

      You'd do better improving and selling YOUR product, than screwing competition. One Microsoft is enough for One World.

      --
      If you keep throwing chairs, one day you'll break windows....
    5. Re:Why bother by SlashdotLemming · · Score: 3, Funny

      SINGLE country

      Nigeria?

    6. Re:Why bother by Pharmboy · · Score: 3, Insightful

      Funny thing is, it still won't end spam.

      What is MAY do is help reduce new startups for spam, since the potential for lawsuits and charges will reduce the appeal to new spammers. If this narrows down the field, it gets easier to find the hardcore professional spammers.

      One of the more important things that I think it accomplishes is psycological. It finally establishes a legal basis that spam is bad. Many people see spam as an irritant only (ie: my mom, Joe Sixpack, etc.), but once the common perception finally sees that it is a crime that robs resources and costs us ALL money, you will see changes in attitude from ISPs, access providers and rack services. This won't happen overnight, but it IS key to eventually reducing spam from 1/2 to 3/4 of all mail, to just background noise. A small, but necessary start.

      --
      Tequila: It's not just for breakfast anymore!
  2. Assuming you can identify the spammer.... by apdt · · Score: 5, Insightful

    That's all very well, but for a large chunk of spam, identifying the spammer if difficult, and to it in a way that would hold up in court would be even harder..

    --
    I lay awake last night wondering where the sun had gone, then it dawned on me.
    1. Re:Assuming you can identify the spammer.... by Mr+Smidge · · Score: 2, Interesting

      That's all very well, but for a large chunk of spam, identifying the spammer if difficult, and to it in a way that would hold up in court would be even harder..

      And hence it would have to be a spammer very confident in his/her anonymity to risk it.

      It might be difficult in court, but it sounds to me like this law would act majorly as a deterrent too.

  3. There will be no lawyers by jabbadabbadoo · · Score: 3, Funny
    Sorry, but if this ones goes through, all lawyers will be busy for a couple of months.

    They too get spam, you know (or they'll make sure they'll get it.)

    1. Re:There will be no lawyers by Talez · · Score: 5, Funny

      To: happy@public.com
      From: david@ironico.com
      Subj: Spammed? You MAY be intitled to compensation!

      Dear Potential Customer,

      Have you been spammed lately by some legimate business owner offering you endless underage pornography, ways to enlarge your small penis and those plans that can make you a millionare overnight?

      If so then call us now! Ironico: Spam Attourneys at Large promises YOU a BIG CASH SETTLEMENT for every spam mail you've receieved. Act now to get this free jar opener!

      Thank you for your attention

      David Mirkoff
      Ironico: Spam Attourneys at Large

  4. How about sanctions instead? by Max+Romantschuk · · Score: 4, Insightful

    I propose the following:

    1. Get local spam under control.
    2. Start sanctions agaist countries / ISPs from which spam originates.

    Not sure this makes any sense though, but if countries like China find themselves at a disadvantage due to a handful of local spammers I would think they would be more motivated to deal with the problem.

    I'm not proposing any tehnical solutions though... anyone have ideas on that?

    --
    .: Max Romantschuk :: http://max.romantschuk.fi/
    1. Re:How about sanctions instead? by $alex_n42 · · Score: 2, Informative

      I'm not proposing any tehnical solutions though... anyone have ideas on that?

      An earlier article about this. (google)

      But the best tactic is not having an email, period.

    2. Re:How about sanctions instead? by jkrise · · Score: 3, Interesting

      " I propose the following:

      1. Get local spam under control.

      Er.. how do you define 'local spam'. I got a Nigerian-type mail from a Hong-Kong based system on my Hotmail (More Useless Everyday). The Niegerian account is hosted by an American entity and the beneficiary seems to be an American as well.

      2. Start sanctions agaist countries / ISPs from which spam originates."

      How does one detet the origin of the spam? It could have been added as payload during a virus infection on a Windows PC. Since ALL countries in the world have Winows PCs, and even Microsoft's systems have suffered from spam and virus attacks, whom do you start sanctions against?

      --
      If you keep throwing chairs, one day you'll break windows....
    3. Re:How about sanctions instead? by wfberg · · Score: 2, Interesting

      Start sanctions against countries...

      how very american of you... throwing sanctions left and right. who died and make your country own the world?

      You know, backbone providers used to take sanctions against their customers if they allowed spam to flourish, and they in turn took sanctions against their customer's, etc. down to the individual spammers.


      A case could be made for requiring networks to take measures against spam, and to tax networks that do not, or that are connected to networks that do not (and so, become tainted). So if you receive 10% of your traffic from customers in, say, Korea, who rarely enforce anti-spam provisions, you pay spam-tax over 10% of the traffic you shift (the 'tainted' traffic) regardless of whether it is spam or not. Of course, where-ever you shift it to will have to count 10% of the traffic they receive from you as tainted as well.


      Independent third parties could certify networks as 'spam-resistant', paying particular notice to enforcement, ingress- and egress filtering of spoofed traffic, etc. Over time, statutory limits could be shifted to require that networks operating in the US be at least 10% spam-resistant (i.e. no more than 10% tainted traffic), then 20% then 30,50, up to 100 (at which point the tax can be lifted).


      Note that this won't happen. ;-)

      --
      SCO employee? Check out the bounty
    4. Re:How about sanctions instead? by Anonymous Coward · · Score: 2, Insightful

      We have 1 & 2, but spam continues to be a problem. Why do you think everybody is complaining about the respective rest of the world as the primary spam source? Spam is rarely sent from the recipient's country. "Local" spam is under control. We also have sanctions against ISPs from which spam originates: There are lists of known spam-friendly ISPs (and their IP blocks). Other DNS blocking lists address faster moving targets. Those are collective punishments against every customer of the listed ISPs. There are even people who block entire countries. You aren't thinking about "out of band" sanctions, are you?

  5. Not necessarily by cperciva · · Score: 5, Insightful

    If the law is drafted in a manner which allows authorities to go after the people benefiting from spam, rather than just the people actually sending it, then they could make substantial progress. Most of the spam I receive is for US-based companies, even if it was actually sent from China.

    1. Re:Not necessarily by SacredNaCl · · Score: 4, Insightful

      Most of the spam I receive is for US-based companies, even if it was actually sent from China.

      We have a law to deal with this kind of organized criminal activity, it's called RICO. I fail to see any legal reason that the federal government can not apply RICO laws to spam. It's an organized illegal activity, and the people who pay spammers to send it are just as guilty and in my view just and culpable as the spammer who sends it.

      Just draft a basis antispam law at the federal level -- make Ashcroft earn his money enforcing it. Tip ...Tell him most spam is pronographic in nature, he spent most of his career in Missouri hassling libraries and adult film/book stores.

      --
      Freedom is merely privilege extended unless enjoyed by one and all.
    2. Re:Not necessarily by the+gnat · · Score: 4, Interesting

      We have a law to deal with this kind of organized criminal activity, it's called RICO. I fail to see any legal reason that the federal government can not apply RICO laws to spam. It's an organized illegal activity, and the people who pay spammers to send it are just as guilty and in my view just and culpable as the spammer who sends it.

      RICO is not intended to be used this way. It was created to allow vertical destruction of a criminal organization, where the people at top insulated themselves from the crimes committed by the rank-and-file. This isn't quite the same. It's also rather hard to compare spammers to the Mafia- Alan Ralsky and Ronnie Scelson are shitbags, but until we find the RBL creators dismembered in the trunk of a Cadillac, spammers are still just petty crooks.

      Just draft a basis antispam law at the federal level -- make Ashcroft earn his money enforcing it. Tip ...Tell him most spam is pronographic in nature, he spent most of his career in Missouri hassling libraries and adult film/book stores.

      We have this troubling little thing called "The Constitution", which makes it difficult to pass a sweeping federal law like that. Ashcroft is currently busy trying to destroy the Constitution, but I see no reason to assist him.

      Get it through your head - the government can not help you here. Besides, do you really want our Congress micromanaging the way the Internet or technology in general is uses? That sort of mentality is what led to obscenities like the DMCA and the library filtering act. I'd rather keep bombing the spammers with catalogs.

  6. Won't work _in my opinion_ by termos · · Score: 4, Insightful

    let individuals sue spammers for $1000 per message
    I don't think many individuals would bother with this, it's easier to just the delete the spam mail than it is to risk loosing money on some lawsuit, and even if they did decide to sue them they would only have "defeated" one spammer (or his team or whatever it could be). 1 down 50000 to go.

    --
    Note to self: get smarter troll to guard door.
  7. Scary by Anonymous Coward · · Score: 3, Funny

    When right-wing religious groups start supporting something I believe in I always have to re-evaluate my belief.

    1. Re:Scary by mental_telepathy · · Score: 2, Interesting

      I think you're safe. I am pretty sure agreeing with them on children not getting spammed with pr0n doesn't make you a bad person.

  8. And one more thing... by jkrise · · Score: 2, Insightful

    The ONE country affected and profiting from spam and anti-spam s/w is never known to suffer in silence when other countries cause economic harm to it. In other words, if outside spam was the real problem, this would have been solved a million times by now.

    --
    If you keep throwing chairs, one day you'll break windows....
  9. This would stop it by daniel_howell · · Score: 2, Interesting

    How about the spammer gets 1 minute in jail per recipient for any unsolicited commercial email they send?

  10. beyond reasonable doubts by maliabu · · Score: 5, Informative

    do we need to prove that those emails suspected of spamming are truly unsolicited? how do we prove that we never subscribed to a certain mailing list? can spammer 'fake' subscriptions?

    and with the "Do Not Spam" registry of e-mail addresses, wouldn't it make it easier for spammers to request such do-not-spam list and spam it??

    If you outlaw guns, only outlaws will have guns. like the article stated, it might endanger legitimate Internet services.

    1. Re:beyond reasonable doubts by aug24 · · Score: 3, Insightful
      Here's the start of a plan - or a 'kernel' if you will :-)

      1) Automatic loss of suit if return/reply address is faked/unreachable or there is no unsubscribe address
      2) Recipient must reply requesting to be removed from list or mail unsubscribe address to become eligible.
      3) If Recipient receives more mail after 28 days have passed then suit is proven.

      Seems easy enough to me. Do it!

      J.

      --
      You're only jealous cos the little penguins are talking to me.
    2. Re:beyond reasonable doubts by Phroggy · · Score: 3, Insightful

      and with the "Do Not Spam" registry of e-mail addresses, wouldn't it make it easier for spammers to request such do-not-spam list and spam it??

      Yes, absolutely. This is the biggest problem with the idea. Even if the list is only provided in the form of one-way queries (look up a particular address to see whether it's listed, without seeing the whole list), spammers outside the US would be able to brute-force the list and get a list of confirmed e-mail addresses. They'll figure their success rates should be pretty high, since these people aren't getting other spam from the US to distract them from whatever crap they're peddling. And of course once this is done, the resulting list will be for sale for about $500 per CD, and we'll get spam offering to sell it to us.

      --
      $x='S24;r)>63/* h@<5+oZ)32"5cz';$me='phroggy'x$];
      $x=~y+ -xz+\0-Tx+;print$_^chop$me for split'',$x;
    3. Re:beyond reasonable doubts by silas_moeckel · · Score: 2, Interesting

      1) this is doable but when a lot of these places are fly by night it might work when they send the mail but not 2 days later and what about an address that suddenly works when you got to court. You would need some impartial third party to verify this.

      2) this just gives them a validated list of addresses for the next round.

      3) A lot of spam companies play shell games with companies making a new company for every ISP they try abuse. 28 Days is a LONG time to legitimatly spam from a front.

      How about this:

      1) Automatic loss of suit if anything forged.

      2) Require an ADV tag like CA is doing this makes filtering spam just way to easy and as this is a company requirement for the actualy product seller it becomes more usefull.

      3) Make opt out lists be virial, require them to percolate up the the seller and all other companies the address has ever been sold transfered etc. This stops the shell company game.

      4) Require that Opt outs function quickly like a few hours from the direct sender. Anything that takes days will just allow them to get a verified address and abuse it as much as possible.

      5) You need some sort of verification system at to the insure seller actualy being associated with the spammer otherwise the dirty tricks squad is going to fire up spam houses against there competition and hope people litigate them to death.

      In the long run I can see the use of having a whole US led tax on spam. This would make them have to register file paperwork and generaly be easier to track and patrol. If spammers had to pay some tax like a cent an email sent to the gov thats a tax on something people dont want to see aka a good tax for most of the people.

      --
      No sir I dont like it.
  11. Do not Spam list not effective for ROW by EvilMike · · Score: 5, Insightful

    I don't see the point in having a 'do not spam' list for the US, when the majority of spam the rest of us are receiving on this planet comes from the US. Is the US govt seriously going to compile a list for all 6 billion of us?

    This proposal still makes it a civil matter for the recipient, having to sue the spammer for damages. What's needed is a federal US law making mass junk emailing a criminal offense. Instead they are just pushing it back onto the people to fight in civil courts. The only winners here are the spammers and lawyers.

    1. Re:Do not Spam list not effective for ROW by mrjb · · Score: 2, Insightful

      I'm not from the US, but it seems to me setting up a 'do not spam' list is pretty basic. Just put all the names on there. Anyone who doesn't want in, raise your hand and say 'aye'.

      --
      Visit http://ringbreak.dnd.utwente.nl/~mrjb/growingbettersoftware to download your free copy of the book
  12. Definitely goodnews.... by botzi · · Score: 4, Funny
    Tomorrow I'm planning on start a lawsuit each of the M. N'boko Kiganya, Queen S'tlaka etc.....

    Dude, I feel the Nigerian spammers already trembling;o))))....

    --
    1. No sig. 2. ???? 3. Profit!!!
  13. I'm just a Bill on Capitol Hill by mental_telepathy · · Score: 4, Informative
    Schumer can sponsor a Bill. The Christian Coalition, at least until they are elected as a body to a senate seat, can only support a bill (And drop fat checks on people to get it passed.)

    If you'd like to see it passed, ask your Senator to cosponsor

  14. Press Release -- Text by zeekiorage · · Score: 3, Informative
    SCHUMER, CHRISTIAN COALITION TEAM UP TO CRACK DOWN ON EMAIL SPAM PORNOGRAPHY

    Christian Coalition endorses Schumer bill that would for the first time impose tough criminal and civil penalties on spammers; New law would create no-spam registry like highly-effective do-not-call registries that have stopped telemarketers

    Political odd couple find common ground protecting children from obscene emails

    Pornographic pictures appear in 1 out of every 5 spams; 1 in 5 kids are sexually solicited on the Internet; and 1 in 4 had an unwanted exposure to obscene pictures

    US Senator Charles Schumer and Christian Coalition President Roberta Combs announced today that the Christian Coalition is endorsing Schumer's Stop Pornography and Abusive Marketing Act (The SPAM Act), legislation aimed at cracking down on pornographic email spam that is sent to children. Internet and email use among children has skyrocketed over the last few years, with America Online and MSN reporting millions of child users.

    The avalanche of pornography being sent to kids by spammers makes checking email on par with watching an X-rated movie. Parents need to be able to keep offensive material out of the family room and I'm working with the Christian Coalition to do just that, Schumer said. The bottom line is that America's children have been under attack for a long time from violent TV shows, racy music videos, and now pornographic spam. The v-chip gave parents control of the TV. My SPAM Act will give them control over the computer.

    I stand side-by-side with Senator Schumer in the fight against pornographic email, Combs said. Parents need the ability to keep their children from being subjected to lewd material and Schumers legislation will do just that. I am proud to stand with Chuck on this issue and we will continue to work together until this bill is law.

    Purveyors of spam have exploited the popularity of the Internet and e-mail to gain access to millions of consumers from all sectors of the population, advertising everything from herbal remedies to get-rich-quick schemes to adult web sites. The traffic in explicit images is particularly acute according to the Federal Trade Commission (FTC), which reports that pornographic pictures appear in almost one out of every five emails that spammers use to advertise adult web sites. Many of these explicit images reach the in-boxes of millions of young e-mail users.
    In a June 2003 survey by the California-based Internet security firm Symantec, 47% of children reported receiving junk email with links to pornographic web sites. According to the National Center for Missing and Exploited Children, one in five kids between the ages of 10 and 17 are sexually solicited on the Internet, and one in four had an unwanted exposure to pictures of naked people or people having sex but only 40% of these children told a parent.

    According to a 2001 Department of Commerce study, 75 percent of 14-17 year olds and 65 percent of 10-13 year olds use the Internet. The same survey also found that forty-five percent of the population now uses email, up from 35 percent in 2000, including millions of children. As of November 2002, America Online had 16 million screen names limited by parental controls while MSN, the operator of the popular free e-mail site www.hotmail.com, had an estimated 3.6 million subscribers under the age of 18.

    Schumer and Combs said that the implications of these studies are disturbing: parents are not only powerless to prevent such imagery from being sent to their childrens in-boxes, they also often d

  15. Christian coalition by spakka · · Score: 3, Funny

    Why don't they just pray it away?

    1. Re:Christian coalition by flewp · · Score: 2, Funny

      Because god gets so much spam that their prayers might be missed in a sea of spam.

      --
      WWJD.... for a Klondike bar?
  16. Harvesting bots outlawed? by le_jfs · · Score: 2, Interesting

    (from the pdf linked in article):
    Prohibit Harvesting of E-mail Addresses and Dictionary Attacks:
    The bill will also prevent spammers from assembling e-mail lists through the practice of address "harvesting" carried out by software known as spam "bots" that mine web sites, chat rooms,


    I really wonder how one can prevent harvesting, and how that could be enforced without making non-spammers pay.

    --
    main(char O){O++&&(((O-291)*O+27788)*O-868020?1:putchar(O++) )&&main(O);}
    1. Re:Harvesting bots outlawed? by eclectro · · Score: 2, Interesting


      Maybe when spamming becomes a felony they can confiscate the spammer's equipment and perform forensic analysis too see if the were running spam harvesters.

      --
      Take the cheese to sickbay, the doctor should see it as soon as possible - B'Elanna Torres, "Learning Curve"
  17. Tax Spam by philipsblows · · Score: 4, Interesting

    Recently there was an article posted here about taxes on cable modems here, but it occurs to me that spam, like postal junk mail, could help pay for infrastructure just as easily.

    Not an original idea, but like a state sales tax (or one of several European VATs), the onus would be on the merchants, or in this case those relaying spam, to collect and pay up.

    Now, since American companies are being required to collect and disperse VAT for sales made in Europe, surely there will be some sort of reciprocity there, and in general America (or the states therein) would impose sanctions on countries that did not abide by these new spam tax laws.

    With spam in the news as much as it has been lately, surely some government types will take notice, that there is cash sitting in their inbox (or in their filtered spam folder if they're smart). And SpamAssassin catches a huge percentage of the spam I get lately, so if my mail machine has to do a little bit of filtering so that middle America can get cable modems and dsl, and so that maybe the last mile can be fiber someday, well, I'll bite the bullet, as long as I don't have to pay cable modem taxes or any other such things and get this spam.

  18. Mission impossible by Rutje · · Score: 3, Insightful

    If they are able to legally define spam (not that easy), the spammers will immediately find an alternative which is not illegal...
    It's useless for the same reason P2P can't be wiped out!

    Long live the freedom of information!!

    --

    I want my karma, and I want it now!
  19. open to abuse? by maliabu · · Score: 2, Insightful

    would this bill be used to attack people you don't like rather than the real spammers??

    one would think that sexual harassment lawsuit is used when you're fired by your female superior, not when you're sexually harassed :)

  20. Legislation is not the solution by ites · · Score: 2, Informative
    Hmmm, after the "war on crime", "war on drugs", what's next? A government department with a "Spam Czar" who sends the troops into muddy 3rd world countries because they allow spam?

    Spam is so easy to kill: add authentication to SMTP and create a new email network of authenticated email. Servers won't accept email from unauthenticated sources, and spammers will be unable to hide their tracks.

    --
    Sig for sale or rent. One previous user. Inquire within.
    1. Re:Legislation is not the solution by fmaxwell · · Score: 4, Insightful

      Spam is so easy to kill: add authentication to SMTP and create a new email network of authenticated email. Servers won't accept email from unauthenticated sources, and spammers will be unable to hide their tracks.

      SMTP already supports authentication. My server won't send mail except from someone who has a username and password for it. How do you make everyone configure their mail servers that way? Hell, we can't even get everyone to turn off open relays.

      The problem with what you propose is that it is sender-side. How will you know if the sender and/or his server are to be trusted? Will your server ask theirs if the sender is to be trusted? Will yours ask if the e-mail address is valid? It would take spammers about 20 minutes before they had something that mimmicked a legitimate e-mail server.

      Or are you proposing something like the third-party system we have for secure web sites, where every person operating a mail server pay hundreds of dollars per year to Verisign (or a handful of other "trust" companies)? How would Verisign determine if a server operated by some guy in Argentina was to be trusted? Would you revoke his certificate if spam came from his server? What if it turned out to be a temporary configuration problem or a bug in his mail server that was exploited by a spammer? What if it was perpetrated by an ISP's customer -- one with legitimate access to that mail server? If I signed up for an AOL account and then started spamming from there, would AOL's mail certificate be revoked?

      It's not an easy problem to solve through technology. If it was, a technological solution would have been implemented five years ago.

    2. Re:Legislation is not the solution by fmaxwell · · Score: 3, Informative

      Why exactly do we *need* OUTGOING SMTP servers? WHy can't mail clients pull the MX record for the destination domain on their own and just send it straight there?

      Obviously we don't "need" outgoing SMTP servers since many spammers already use the method you describe for sending e-mail.

      But there is a very good reasons to have outgoing SMTP servers: The ISP can block access to port 25 for their residential (i.e., non-business) subscriber base. This prevents the subscribers from exploiting open relays or directly sending spam using the method you describe above.

      Instead of hijacking open relays, spammers would need huge-ass pipes because they'd be stuck sending the mail themselves.

      Only partially true. If a spammer had 100,000 AOL addresses he was sending to, he would not need to send 10,000 messages. He could blind copy, say, 100 recipients on AOL at a time. Then AOL's servers would increase his effective throughput 100x. That's what most of the direct-to-SMTP spammers already do. It's only when the list of recipients are not clumped on ISPs and, are, instead, one or two to a domain, that the bandwidth limitations become an issue.

      By the way, that's one reason why you tend to see more spam on big ISPs than on little ones. If a spammer finds three addresses on a small ISP, he spends a relatively large amount of bandwidth sending to those three addresses than if he blind copies 100 users on AOL (assuming direct, rather than relay-rape, spam).

  21. Not sure about the actual bill... by Goonie · · Score: 4, Insightful
    I haven't read the whole bill, just the fact sheet, but the proposed law isn't great. Here's my take, based on the fact sheet:
    • The first thing it doesn't do is ban unsolicited commercial email, as is the majority position amongst anti-spam campaigners.
    • It *does* create a national "do-not-spam" list. If you're on the list, and you get sent spam, it's a criminal offence. The list will be protect by "military-grade encryption", whatever this means. I'd like to see a few more details on how they ensure that spammers can't get addresses out of this database.
    • It makes it illegal to forge headers and to have misleading subject lines in commercial email. Sounds reasonable enough.
    • Requires be able to unsubscribe. Whatever. What happens when they shut down their fly-by-night company and sell the addresses on?
    • Bans dictionary attacks and "address harvesting". This one I'm not really all that keen on, particularly the bans on "address harvesting". It doesn't seem useful - what's to stop a foriegner doing the address harvesting and then selling the collected addresses to an American spammer? There's no mention of a provision in the bill banning the trading of email address lists. More to the point, it targets more activities than are necessary to stop spammers, IMHO.
    • Increases law enforcement resources and penalties. That's a no-brainer.
    --

    Any sufficiently advanced technology is indistinguishable from a rigged demo
    --Andy Finkel (J. Klass?)
    1. Re:Not sure about the actual bill... by Phroggy · · Score: 3, Insightful

      It *does* create a national "do-not-spam" list. If you're on the list, and you get sent spam, it's a criminal offence. The list will be protect by "military-grade encryption", whatever this means. I'd like to see a few more details on how they ensure that spammers can't get addresses out of this database.

      This is a BAD IDEA.

      1) Take an existing list of 500 million e-mail addresses. While you're at it, guess a few billion more at random.

      2) Check all of these against the super-duper military-grade heavily encrypted top-secret opt-out list. This does not require decryption of the list. Save the results.

      3) Compile a new list of every address you found that's in the opt-out list. Burn this to CDs.

      4) Send out spam, advertising your confirmed opt-in CDs for $500 each.

      5) ???

      6) Profit!

      --
      $x='S24;r)>63/* h@<5+oZ)32"5cz';$me='phroggy'x$];
      $x=~y+ -xz+\0-Tx+;print$_^chop$me for split'',$x;
    2. Re:Not sure about the actual bill... by blix5 · · Score: 2, Insightful

      If they're serious about this, I'd like to see them require the "[AD] in the beginning of the Subject" rule that I've heard about countless times.
      That way, email filters would catch more unwanted messages.

  22. Re:Spam by spakka · · Score: 4, Insightful

    The press release is only about Porn targetted at children, shouldn't that be unwanted email targeted at everybody??
    As they stand, the proposals seem to target all spam, not just porn, although it's clear that the christians are in it to stop the porn. It makes me uneasy when reasonable people ally themselves with crazy people, even if the end is good. How long before some of the christians realise that the bill does nothing to combat the exchange of pornographic materials between consenting adults?

  23. Bad Idea by Dr.+Sp0ng · · Score: 4, Insightful

    It is not the government's place to tackle the spam problem. If they try, they'll just fuck it up, like they've fucked up so many other things in the past. Spam has all the telltale signs of a problem that legislation won't help. It's a relatively victimless crime (or rather, its victims, with the exception of those companies who run the huge backbones, are at most marginally impacted by the problem), it can be done in a relatively anonymous fashion, and any laws banning or regulating it will be very difficult to enforce. Problems like that (drug abuse and so on) are never helped by laws, and instead just get worse with each additional crackdown.

    The problem can never be fully solved by technical means, being a sociological problem, but technical solutions can do a much more effective job in curbing the problem than any legislative solution, and cause fewer additional problems in the process. Rather than try to get the government to pass ineffective feel-good laws, let's fix the problem from our end. It's time to replace SMTP with a less trusting protocol - the Internet is clearly a very different place than it was when SMTP was originally created, and we need a new mail protocol to match the times.

    Keep the government's laws off my Internet, people. It is a medium that spans the entire globe and is not under the jurisdiction of any one government anyway, so laws will never do the job. They'll just cause more problems and never solve anything.

    1. Re:Bad Idea by Ben+Hutchings · · Score: 3, Insightful
      It's a relatively victimless crime (or rather, its victims, with the exception of those companies who run the huge backbones, are at most marginally impacted by the problem)

      Tell that to the people whose genuine addresses have been used as return addresses by spammers.

  24. It probably still came from the U.S. by fmaxwell · · Score: 4, Insightful

    Most of the spam that I receive comes from South Korea, Russia and China, not the United States.

    If the spam is advertising goods or services sold by someone in the U.S., the spam came from the U.S., regardless of what physical server delivered it. As they say, "follow the money." I don't care that Alan Ralsky pays for his spam to be sent through Brazil. His spam still came from the United States. An effective anti-spam law will allow you to sue him for a significant sum of money ($1000 or more) and federal, state, and local law enforcement to prosecute him for a crime.

    Want to deal with overseas firms sending spam to U.S. citizens? Then handle it like the "war on terror." Pressure other countries to turn over spammers for prosecution for violating U.S. laws. This can be done with multiple tools, including threats to revoke a country's "Most Favored Nation" trading status, reduction in aide to countries where we provide same, tariffs, and even federally-mandated blocking of Internet traffic to and from that country.

    1. Re:It probably still came from the U.S. by khakipuce · · Score: 2, Insightful

      Yeah, if you just put the spammers in Guantanamo Bay with out trial or a release date, then America (land of the free?) would be much better off!

      --
      Art is the mathematics of emotion
  25. Re:Spam by AndroidCat · · Score: 2, Insightful

    It should be about consent rather than content. Creating two classes of spam is a bad thing.

    --
    One line blog. I hear that they're called Twitters now.
  26. fighting spam by shione · · Score: 3, Interesting

    heres an article on what Australia along with other countries are doing to fight spam.

    http://www.smh.com.au/articles/2003/06/09/105501 09 20208.html

  27. TPS (Telephone Preference Service) by amembleton · · Score: 5, Informative

    I like the sound of this. Defining Spam would be a problem.

    If you could prove that there is either no way of requesting an end to the spam or that it didn't work when you clicked on the link then that might stand up in court.

    If you still get spam then you should be able to forward it onto some Government organisation who would deal with the company with an army of beurachrats.

    Here in the UK, we have a good system for stopping unsolicited phone calls and text (SMS) messages. It is called TPS (Telephone Preference Service). You basically register your number(s) with this organisation and marketeers aren't allowed to use that number. If they do you can report it, they can check phone records or something and fine them something like £5,000. This system does work.

  28. Opt-out lists don't work by spakka · · Score: 4, Insightful
    A publically available database of addresses, all self-validated as belonging to real people in the world's richest country, will be prime spamming material to anyone outside the US.

    From the fact sheet:

    Anyone who sends spam to these addresses will be subject to stiff fines. The database will be protected by military-caliber encryption to ensure the protection of its contents.

    Nonsense. How can the database be encrypted if all potential spammers are deemed to have notice of every address on it?

    1. Re:Opt-out lists don't work by jpmorgan · · Score: 2, Insightful

      Nonsense? Pah. Easy. Only release a list of md5/sha hashes of the addresses.

  29. Bad idea by Skapare · · Score: 2, Insightful

    Such a provision would make it easy for anyone to cause harm to a company or individual by forging spam that appears to be benefitting them. It's a bad idea.

    --
    now we need to go OSS in diesel cars
  30. Sue the suppliers - not the spammers by Zog+The+Undeniable · · Score: 4, Insightful
    Making it illegal will be about as effective as the "Do Not Make Illegal Copies Of This Disc" label on software piracy. Spammers are already on the shady side of the law with a lot of the stuff they're trying to sell (e.g. hardcore pr0n and prescription drugs), so they're not going to be scared by this. Add to this the facts that most spam has its origins well obfuscated, preventing the culprits from being tracked, and we're onto a loser if we try and track them down.

    My suggestion is that the SUPPLIER of the advertised goods is fined, not the spammers. The supplier is, after all, paying someone to send the spam, and they're easily traceable (otherwise they'd have trouble fulfilling your orders for Viagra, septic tank cleaner and goat pr0n).

    --
    When I am king, you will be first against the wall.
  31. An approach I haven't seen mentioned before, by Alex · · Score: 3, Interesting

    One thing spammers always get correct in spam, is the details of how to buy whatever they are advertising

    Why don't we ignore the spammers and punish the companies who's products are being advertised?

    Spam wouldn't exist if people weren't paying the spammers to spam.

    Target the advertisers contact details, like how BT disconnects numbers advertised on tart cards in London phone boxes.

    "Sure you can advertise by spam it'll cost you $10000 for 2^8 mails unfortunatly within 12 minutes of the 1st mail going out your contact email and website will be deleted."

    Alex

  32. Register how many addresses? by Skapare · · Score: 4, Interesting
    ... and create a Do-Not-Spam list of e-mail addresses similar to the FTC's new Do-Not-Call registry that has succeeded in a number of states in virtually eliminating unwanted telemarketing calls.

    How many of my email addresses will I be allowed to register? Let me see, assuming a maximum of 64 characters per username (it's probably more), and 36 different characters (actually there's more there, too), that would be potentially 40119919145476304800650533877024438126904024877418 12225955731622655455723258857248542161222254985216 addresses. Of course no one would have that many and no database could store them all. But spammers could dynamically generate random ones. As more and more mail services support tagged addresses, spammers will likely start adding random tags to make sure they have a defense of "no match in the do-not-spam database".

    I use a different email address for every mailing list I subscribe to. Should I register every one of them with the database? Most of them have already been spammed (probably harvested from online archives of those mailing lists).

    One possibility is requiring that tagged format address be matched with respect to the base address (tag characters usually being "-" and "+"). Another is registering a whole vanity domain making it applicable to every username possibility. I'm sure aol.com will get registered like that, as will just about every domain out there. Mine will be.

    --
    now we need to go OSS in diesel cars
  33. I don't think it's gonna work by asciimonster · · Score: 3, Informative

    Spammers are smart people. You are never going to get the definition of spam such that it will block out all the forms of spam. And if there is a hole, spammers will rush to take advantage of it.

    I'll illustrate with a snail-mail example:
    A few years back everybody could get a sticker (the yes/no* an no/no* stickers) which we could stick on our mailbox to prevent "unadressed mail" (read: yunkmail) from flooding your mailbox. Good initiative: saves paper, time, money and irritation. BUT: Suddenly all yunkmail got addresses prionted on them and we were stuck with the same pile of paper we didn't read and had to take out to the paper recycle bins.
    Nice initiative, didn't work. Wait, that's not entirely true; it still has a function: It blocks the local newspapers.

    * yes/no for local (free) newspapers; no for unadressed mail.

  34. Make Money Fast by neglige · · Score: 3, Funny

    IT WORKS!! BELIEVE ME!!!!!! Here is what you have to do: check your INBOX and look for unwanted mail, no matter who send it to you. AND THEN SUE THE PERSON WHO MAILED YOU AND SEND ME A MERE 1% OF THE AMOUNT YOU RECEIVE!!

    Everytime you do this, it adds $990 to your account. I couldn't believe it either until the $$$ started to flow my way! My wife does it, and now we have no more financial worries!!!!!!!!

    Don't feel left out, check your inbox today and start to make money!!!!

    By the way, this mail is not spam. No, Sir. Honest. It just a one-time mailing. Really. Trust me.

    --
    My cats ate my karma. They also wrote this comment.
  35. Spammers are Brain Dead by ajs318 · · Score: 2, Informative

    Spam merchants are brain-dead. Look carefully at my e-mail address {once you've sussed out the auto-munging that Slashdot has thoughtfully provided} and see what you notice about it. Then explain why I keep getting advertisements for products that are only available, or only work, in the USA. Like cable descramblers ..... British cable TV is digital, for crying out loud .....

    Spear the spam-merchants with this! It won't stop it altogether, but at least it'll give you evidence as to who is harvesting your address and how widely it is circulating.

    --
    Je fume. Tu fumes. Nous fûmes!
  36. Spammers resorting to illegal methods by Epeeist · · Score: 2, Interesting

    This article in the UK "Guardian" claims that the recent blitz of viruses was done by spammers trying to generate open relays.

  37. Re:Isn't it interesting how. . . by interstellar_donkey · · Score: 2, Funny

    You've just inspired me. I'm going to start up an Internet business using direct spam marketing to sell tin foil hats.

    Not only have you demonstrated there is a market for them, but that the target consumers are afraid of any laws to stop the messages.

    --
    The Internet is generally stupid
  38. As an internationalized US citizen by cybersekkin · · Score: 2, Insightful

    Spam--come on if the christian coalition (caps left off on purpose) want spam stopped so their children do not have to see t&a they should filter their email better and stop having their children sign up for the sex mailing list in the first place.

    As for spam in general. laws will not help but will just serve to allow lawyers, RIAA and others loop holes to screw over the internet. When it is time to err it needs to be in favor of the freedom of speech-take care of spam yourself with a good filter, deal with it the same as you do your mail box with postal mail-->the argument about spam being free is BS it has to be written and (maybe spell checked) and then has to be sent, it is just cheaper than postal mail. The government need to stop trying to legislate everything and let us live our lives freely.

  39. Re:Spam by capoccia · · Score: 3, Insightful

    How long before some of the christians realise that the bill does nothing to combat the exchange of pornographic materials between consenting adults?

    Most Christians aren't that naive. They know that kinky and perverted things go on between consenting adults every day. That doesn't mean that they want to see it. And if someone doesn't want to look at porno, why should you assault their conscience with it? Just like you wouldn't go to Egypt and start throwing sausage at every Muslim you saw.

    Doesn't freedom of religion grant them the freedom to go on blocking the crud coming at them as long as they are not impinging on the rights of others?

  40. It isn't a problem that can be solved by laws... by Metasquares · · Score: 2, Informative

    People say that spam is a social problem, not a technical one. However, it is a technical problem, moreso than a social one, and that is why laws such as this one are not going to work: You can't sue someone until you identify them. The reason that spam is such a problem in the first place is because a large percentage of spammers (or, more likely, the spammers' mass mailing programs) go through great lengths to disguise the origin of the message. Obviously, if the message had a reliable source address, it would be much easier to track down and stop spammers, since they would have a finite number of source addresses to work with. Yes, it would create pandemonium for ISPs, but if ISPs responded (by threatening them with a $1000 per message lawsuit) to complaints about spamming quickly, it would not be a problem for long. Of course, this wouldn't work as well overseas, since there would be no such law, but so long as a new system that prevents email spoofing is implemented worldwide, the problem would still be largely under control.

    The problem is actually replacing SMTP with something more reliable. It's like trying to implement IPv6... it's not going to happen in a day.

  41. A lot of my spam is FROM the Christian Coalition.. by cswiii · · Score: 2, Interesting

    ..or derivatives thereof.

    Back in 1999, I posted this message to NANAE, about getting spammed by a Jerry Falwell-backed ISP. Well, it has been a long time since 1999, and now I get a lot of messages from various CC-related organisations, most of whom are telling me to vote for various RNC initiatives.

    Curious.

  42. Hmm... by LastManOnEarth · · Score: 2, Insightful

    Dont you think it's a greater violation of rights having spyware and adware on your system than just recieving unsolicited e-mail? I think spam is just a nuisance while spy/adware actually affects performance of your hardware, not to mention the fact that its broadcasting your private information to the world allowing you to recieve a large portion of spam (mmm...large portion of spam).It's like me parking my car on your lawn then setting up cameras looking into each of your windows. Unfortnately everyone that recieves spam is aware of it, unlike spy/adware. And hence, public is clamoring for spam to stop. Dont get me wrong I love charging the chumps that install i-mesh/kazaa/realplayer/etc. money for removing the crap that makes there brand new Dell run like a 486, but if your talking rights violations that takes the cake. I say that all of you not already using a spy/ad bot removal program should run one ...youd be surpised what youll find. PS. Dont forget the growing number of spam coming through windows own messenger service.

  43. There ought to be a law about it. (Was: Bad Idea) by Doctor+Hu · · Score: 2, Interesting
    Good post. Can I take issue with you, however. You say:

    The problem can never be fully solved by technical means, being a sociological problem, but technical solutions can do a much more effective job in curbing the problem than any legislative solution, and cause fewer additional problems in the process.

    The problem I have is with the effectiveness of the technical solutions to date and the likelihood that they'll become much more effective in the medium-term future unless they're accompanied by legislation.

    It seems to me that the ongoing technology race between spam-blockers and spammers has been instrumental in accelerating the adoption by spammers of increasingly objectionable subterfuges for delivering of their unwanted material and obscuring its origins. The result has been that users of the Internet are incurring measurable additional costs for dealing with the sh*t and that despite this many people find that enough gets through to make the going through their email an activity, as the Economist observed in a recent article on the topic, about as alluring and attractive as sorting through raw garbage.

    To put it simply, the technological solutions deployed so far have not worked. Sorry, but I think it's high time for the 'Net community to get its collective head around this unpalatable fact.

    OK, laws currently on the statute books have not been noticably effective, either, despite their obvious applicability to much of the spam that's swilling around. Admittedly, the nature of many of the 'products' and 'services' being peddled in this way undoubtedly discourages dissatisfied customers from seeking redress by way of formal law enforcement. And unwilling recipients of the nastier types of material may also be understandably wary of requesting law enforcement involvement. That's a sociological problem in itself, of course, and while technical measures like providing means for forwarding anonymous tip-offs will help, what's really needed is for people to be able to feel confident they can report such stuff to the local police without coming under automatic suspicion themselves of being part of the problem. Intelligently-drafted legislation does have a role in promoting such a consensus.

    So I guess I have to put up and then shut up. Here are a few guidelines for legislation which I think could help shift the balance between profit and risk for spamming. Al Capone, remember, was eventually nabbed for tax violations.

    • The biggest problem at the moment is unsolicited commercial email. Email is cheap, costs are distributed between sender, recipient, and intermediate carriers, and there's currently no mechanism for allocating the costs to either of the end-parties (sender pays, or recipient agrees to accept - think call-collect between individuals, or toll-free phone lines). With such a medium, there is a large onus on senders not to abuse the sharing of costs for their own benefits. Spammers have demonstrated that good sense cannot be relied upon, therefore, all email communications that are promoting some product, or service, or cause must follow a strong opt-in model. NO EXCEPTIONS. Not even for charities, religious organisations, political groupings, human rights activists, etc.
    • Strong opt-in means that I make the initial contact with you. You can then contact me on the matter concerned for as long as I'm willing to receive your communications. If I decide to terminate the communications, then I tell you of this, and you follow my instruction. (OK, this is tricky to get right. Basically, the more that communications can be a nuisance, the higher the onus on making sure that they begin and continue acceptably. If I include my email address on a post to an online discussion board, it's reasonable to suppose that I'm willing to receive email responses on the topic concerned or on closely related ones. If I sign up to an email information list I've agreed to accept messages from it until I sign off. If I request inform