Slashdot Mirror


Senate Passes Anti-Spam Bill

Zendar writes "Yahoo! is reporting that the 'U.S. Senate passed the first national anti-spam bill on Wednesday, giving momentum to an issue that has riled consumers almost as much as dinnertime phone calls.' However, the bill, referred to as the 'Can Spam' bill, is unlikely to pass the House and be signed by the President. Senator John McCain sums it up: 'The odds of defeating spam by legislation alone is extremely low, but that does not mean we should stand idly by and do nothing about it.' CNN also has the story."

81 of 350 comments (clear)

  1. Politicians for Ya by jazman_777 · · Score: 5, Insightful
    Senator John McCain sums it up: 'The odds of defeating spam by legislation alone is extremely low, but that does not mean we should stand idly by and do nothing about it.'

    Meaning, 'What we do has no effect, but we need to look like we're doing something useful.' And of course there _shall_ be unintended consequences, which will require yet another government "fix".

    --
    Slashdot: Failed Car Analogies. Amateur Lawyering. Anecdote Battles.
    1. Re:Politicians for Ya by stanmann · · Score: 5, Insightful

      The battle on spam must be fought on all available fronts, and providing penalties which can be levied against the company that hired the spammers is an important front. Granted, at this point there is no provision for a regulatory/investigative body to investigate and punish it... but one step at a time...

      --
      Food not Bombs is a nice platitude but it breaks down when you notice that the Bombees are usually well fed
    2. Re:Politicians for Ya by CelloJake · · Score: 4, Insightful

      I agree with you. If the bill will have no effect then why waste important senate time with it.

      Next he can pass a bill that will ban breast cancer. The odds of defeating breast cancer by legislation is extremely low, but that does not mean we should stand idly by and do nothing about it.

      I think the statement would make sense if he were choosing to not promote the bill and instead try to do something else. Just because legislation won't stop the problem doesn't mean we have to sit idly by. Even a senator has other resources available than legislation to help with a problem.

      -Jacob

    3. Re:Politicians for Ya by kfg · · Score: 2, Interesting

      'The odds of defeating spam by legislation alone is extremely low, but that does not mean we should stand idly by and do nothing about it.'

      Ummmm, yes, that's exactly what it means.

      Spam is a social, and perhaps technological, issue. Please stop wasting my tax dollars and your time on promoting legislation which you yourself admit is pointless and go handle some issues for which legislation is the actual remedy.

      If you really need some useful "makework" and a politically advantageous cause how about going through the books and finding existing law that shouldn't be there and rescinding it?

      Or would that be too sensical for a congressman to handle?

      KFG

    4. Re:Politicians for Ya by arthurs_sidekick · · Score: 5, Insightful

      The key to the post at the top of this thread is the mention of unintended consequences. We've already seen how laws dealing with technical subjects get misinterpreted by the courts; what exactly is going to count as spam under this law? What forms of communication will it affect, and how? Damn straight, I don't want to go to jail for making a programming or configuration mistake that sends out a bunch of unsolicited email and somehow falls under the legal definition, or judge's interpretation thereof, of "spam." { I don't want to make that sort of mistake at all, but if I do, there are other ways of dealing with me }.

      --
      "Oh, I hope he doesn't give us halyatchkies," said Heinrich.
    5. Re:Politicians for Ya by kiatoa · · Score: 3, Informative

      Yup, all available fronts is good. Now, how about as many folks as possible start using the Active Spam Killer? I've been using it for a month or two and it seems great. If enough people used it then the wind would be taken out of the spammers sails (sales?) so to speak and the problem of spam would go away. Why spam if the message ain't getting through. So, hop over to sourceforge and download/install a-s-k, and do your part in the war against spam.

      --
      90% of the wealth is in 2% of the pockets. Bummer to be in the majority.
    6. Re:Politicians for Ya by gpinzone · · Score: 3, Interesting

      Conisdering this quote came from John McCain, I'd translate it as, "Look, legislation isn't a 100% cure, but we can at least do something that's within our power under the Constitution to minimize the onslaught of spam."

    7. Re:Politicians for Ya by Steve+B · · Score: 4, Interesting
      The battle on spam must be fought on all available fronts

      A legal front that ought to be opened is the application of existing computer-crime laws to certain spamming techniques. The deployment of trojans to create open relays and even outright spamboxes is an obvious example.

      Additionally, the use of forged headers, munged words, etc to evade spam filters is arguably a form of cracking in and of itself -- what is it, if not a deliberate attempt to use someone else's computer without the owner's permission, and indeed against the owner's express prohibition?

      --
      /. If the government wants us to respect the law, it should set a better example.
    8. Re:Politicians for Ya by Bendebecker · · Score: 2, Funny

      We shall fight on the beaches,
      We shall fight on the landing grounds,
      We shall fight in the fields, and in the streets,
      We shall fight in the hills;
      We shall never surrender,
      --Winston Churchill

      --
      There's a growing sense that even if The Future comes,
      most of us won't be able to afford it.
      -- Lemmy
    9. Re:Politicians for Ya by schon · · Score: 2, Insightful

      The battle on spam must be fought on all available fronts, and providing penalties which can be levied against the company that hired the spammers is an important front.

      Agreed - but an even more important front is the official recognition that spam is not acceptable behaviour (which a properly worded law would be.) Remember - a lot of spammers hide behind the "I'm not doing anything illegal" mask - a law against spam would remove that excuse from their arsenal, and give the average person some assurance that their feelings about spam are justified.

    10. Re:Politicians for Ya by no+reason+to+be+here · · Score: 2, Insightful

      No, what it means is that the odds of defeating through legislation only are very low. The odds of defeating spam through other means combined with legislation makes the fight against spam that much easier.

      going through the books just to find laws that shouldn't be there but aren't enforced is completely useless. If they're not enforced, then they technically don't exist (a bit of trivia, marjuana is, in fact, illegal in the Netherlands, but no one gives a rat's ass, and the laws are never enforced, so it is essentially legal, or so it was explained to me by the owner of a hash bar in Amsterdam)

      the laws that shouldn't be there, but are enforced get enough attention (PATRIOT Act, anyone?) that congressmen don't need to go looking for them; their constituents will let them know.

    11. Re:Politicians for Ya by Short+Circuit · · Score: 2

      Since two sides have to argue in order for there to be a court case, you'd be biasing the court in one direction or another.

      At least, in the plaintiff's eyes.

    12. Re:Politicians for Ya by Short+Circuit · · Score: 2, Insightful

      So, if my box gets rooted, and exim starts pumping out spam messages, then I have to prove I didn't set up the software to send out the junk mail in the first place?

      Proving that would require showing how I got rooted in the first place, and I might not be able to find out. Especially if it's a Windows box. (But then, if it's Windows, I'll have statistics on my side.)

      Screw the "unintended consequences" mantra, that's just plain dangerous legislation!

    13. Re:Politicians for Ya by kfg · · Score: 2, Funny

      Senator Foo Bar stated today that, "I realize that legislation alone won't do much to stem the tide of the cold virus, but we can't just sit by and do nothing while this virulent and potentially deadly virus infects millions of Americans."

      Arrest of "distributors" is imminent.

      The AMA issued a somewhat puzzled statement, claiming that while they appreciated any aid in the quest to find cures for viral infections they were clueless as to how outlawing said virii in any way constituted such aid.

      Alone or otherwise.

      KFG

    14. Re:Politicians for Ya by clacour · · Score: 2, Funny
      "The battle on spam must be fought on all available fronts..."

      I disagree. There is only one front that spam can be fought on successfully, and that is economic.

      When spam is no longer profitable, spammers will give it up voluntarily. As long as it is profitable (especially as profitable as it is right now) people will continue to do it, regardless of one law or a thousand.

      Each law passed to try to stop it restricts someone's freedoms, and it's pretty much unavoidable that the law will restrict some who do not deserve such restriction. If that would eliminate spam, that might be considered a reasonable tradeoff. Since it will not, each and every law passed solely on the basis of "We've got to DO something!" is a bad idea.

      The best thing I've seen so far is A Plan for Spam. I tend to agree with the author's assesment of how likely it is to work, specifically because it destroys the economics of spam.

      I think most of our collective energy should be going to integrating things like "A plan for Spam" into common email programs, possibly extending it to allow people to join anti-spam clubs, so they don't have to label the thousand or so emails the thing needs to train with themselves.

      Simply having a button that says "Spam!" will help a lot of people deal with the frustration involved with spam, and if it is pitched to the general public as "Every time you kill an email as spam (instead of just deleting it) you're helping to put spammers out of business," you're going to have to beat them off with a stick. People would love to have a way to get back at spammers.

    15. Re:Politicians for Ya by volkris · · Score: 2, Funny

      The battle on spam must be fought on all available fronts,

      Why?

    16. Re:Politicians for Ya by t0ny · · Score: 2, Interesting

      All of this could have been avoided if the idiots in the Judicial Branch would have allowed existing 'junk fax' laws apply to email.

      --

      Manipulate the moderator system! Mod someone as "overrated" today.

  2. Fuck 'em. by InterruptDescriptorT · · Score: 4, Insightful

    It's not going to help the influx of spam from China, Taiwan or Russia, which is where I seem to receive most of my spam.

    I think the Senate, as usual, passed a do-nothing measure that will have not an ounce of effect on the literally 350 spams I receive a day. (Yes, I do use spam filtering.) Congress would be better off to provide tax credits for companies producing filters, starting a massive education campaign on how you can stop unwanted e-mails using these filters, and investing heavily in research projects to improve filtering.

    But this is a bunch of more fucking useless bullshit--par for the course for this Administration.

    --
    Karma: Excellent Birds (mostly as a result of listening to Laurie Anderson)
    1. Re:Fuck 'em. by aborchers · · Score: 2, Insightful
      It's not going to help the influx of spam from China, Taiwan or Russia, which is where I seem to receive most of my spam.


      No, it won't. But with a national policy with force of law against spam, all we (as admins) have to do is block mail from countries that refuse to abide by similar policies. If those countries want to communicate with the US, they will address their own spam problems.

      I do not like the idea of Balkanizing the Net, but spam is an unsupportable catastrophe of scale that has to be stopped even if the surgery required is invasive. As long as the law criminalizes behavior rather than technology, I'm all for it...

      On another point you made: subsidized or not, filters from commercial companies are bullshit. I should not have to pay to not receive crap I don't want.

      --
      Trouble making decisions? Just flip for it.
    2. Re:Fuck 'em. by Salgak1 · · Score: 2, Insightful
      One point:

      But this is a bunch of more fucking useless bullshit--par for the course for this Administration

      The Sponsor of the bill is Sen. Charles Schumer (D-NY). He's not exactly a part of the Administration. . .

  3. Drat by hrieke · · Score: 2, Interesting

    It doesn't allow for mobs to tear the spammers limb from limb, lynching, or any other fun group activities.

    (Grim) Humor aside, the only thing that I can see this doing is forcing spammers to move off shore, open shell companies in spam havens, and generally make things harder to do.

    Hate to say it, but I think it is time to move beyond email.

    --
    III.IIVIVIXIIVIVIIIVVIIIIXVIIIXIIIIIIIIVIIIIVVIIIV IIVIIIIIIVIII...
    1. Re:Drat by Anonymous Coward · · Score: 4, Insightful

      It has one thing that's really needed. Jail time. These spammers get caught from time to time, but just file for bankruptcy, so they have little fear of the government. A threat of jail time would end lots of spam even without enforcemnt.

    2. Re:Drat by DougMelvin · · Score: 3, Funny

      Hate to say it, but I think it is time to move beyond email.

      Such as... telepathy??

      --
      Reality is in the mind of the beholder - me 1996
    3. Re:Drat by webtre · · Score: 2, Funny

      Soon to come in 3004:
      damn! a teenager on the street gave me another thought advertisement for some penis enlargment product

      --
      litigious bastards
      suck it sco!
  4. Might want to think about changing the name.. by DrEldarion · · Score: 3, Interesting

    The name of the bill is a little bit misleading. When I first read it, I read it as "[you] can spam" as opposed to "can (get rid of) spam".

    It's a shame that they think it won't go anywhere, though...

    -- Dr. Eldarion --

  5. Best Spam Recently by da3dAlus · · Score: 3, Funny

    A co-worker got one yesterday "Get Viagra - Half Off!". Kinda defeats the purpose, no? :)

    --

    Sometimes I doubt your commitment to Sparkle Motion.
  6. Stuck with Outlook? by rjamestaylor · · Score: 5, Informative
    If you're one of the many who doesn't really have a choice but to use Outlook on Windows, there is anti-spam help available in the form of an open source SourceForge project called SpamBayes.

    I downloaded and installed the latest version last night and am very impressed with this seemlessly integrated Bayesian Spam Filter (make sure anti-virus software is disabled before installing -- which can be difficult with McAfee as I discovered).

    Very much recomeeded.

    --
    -- @rjamestaylor on Ello
    1. Re:Stuck with Outlook? by gpinzone · · Score: 2, Insightful

      I'm very happy with Yahoo Mail and it's free spam filtering system However, I've heard their premium service will (or now does) offer a Bayesian spam filtering service. They're also going to offer a "spam gourmet" service that will allow you to give out an email that can be discarded after you're done with it.

  7. Well duh by Anonymous Coward · · Score: 3, Insightful

    Legislation alone won't solve the problem. Technology alone won't solve the problem. Technology combined with legislation can HELP.

  8. What they really need to do by andih8u · · Score: 5, Insightful

    Is go after the companies that sell ("rent") your information to the spammers. I know I didn't register for the national do-spam-me list, and I only gave my email out to "reputable" sights, so someone gave it away somewhere despite their privacy policy. You'd think there'd be a way to backtrack how these companies get this stuff.

    --


    slashdot, news for crazed liberal socialist zealots
  9. It's been said time and time again... by Sebby · · Score: 2, Insightful
    Technical problems require technical solutions; trying to solve a technical problem with a law is completely futile.

    Imagine trying to solve the powergrid problem with a law - people would simply laugh at that.

    --

    AC comments get piped to /dev/null
    1. Re:It's been said time and time again... by Steve+B · · Score: 2, Interesting
      Spamming is both a social (some people are sociopaths who are willing to live by theft) and a technical (it is difficult to reliably screen e-mail sent under the incumbent protocol) problem.

      In this, it is similar to the problem of burglary -- both better locks and better law enforcement have their place.

      --
      /. If the government wants us to respect the law, it should set a better example.
  10. Re:Finished Quote... by I8TheWorm · · Score: 2, Insightful


    Ah... but it's these same ridiculous laws that make cops stand by until it's legal to do something about it.

    --
    Saying Android is a family of phones is akin to saying Linux is a family of PCs.
  11. Funny how that works by Otter · · Score: 5, Insightful

    It goes to show you -- when it's clear that there's a real consensus, legislators don't hesitate to act, cynical sneering about "buying votes" notwithstanding. As soon as it became clear that the popularity of telemarketers with Americans was somewhere above Osama bin Laden and below Saddam, you've never seen any legislation move so fast. And now that it's dawning on them that spamers are about as popular (true, they don't bother you during dinner, but then telemarketers don't send bestiality pictures to your kids) they figure there are additional points to be scored.

  12. This is great! by apoplectic · · Score: 3, Interesting

    Until some local yocal judge from Oklahoma decides that the bill is unconstitutional, just like the do-not-call list.

    And, of course, I must unoriginally question just how they plan to enforce this? Perhaps we should just invade any country that originates more than .01 spams per capita? Sounds democratic enough. And, hey!, we'd expand to 60 states in no time! If expansion is good for the NFL, it is good enough for the U.S. of A!

  13. This will only momentarilly stop the hemorrhaging by Brainiac252 · · Score: 2, Insightful

    Great, now you've made it harder for "Joe Blow" to send spam. That's dandy, but over 70% of the spam in the world is accounted for by 20 or so people. Those 20 people also happen to be located offshore, and if they're not they'll be moving there shortly. I read an interesting story a couple of weeks ago that discussed the governments inability to stop spam from offshore. I don't know exactly what the answer is to spam but I know it's not legislation.

    On a side note, as an end-user, I've experienced success with a service called Shadango.com. I started using it after my hotmail address became practically useless due to the amount of spam I was receiving. It has kept my inbox junk-free, and it allows me to check both my hotmail address and students address all from the same interface.It's definitely worth checking out.

    Like I said this will only momentarily stop the hemorrhaging!

    Brian Jensen

  14. "CAN SPAM" = OK, you CAN SPAM at will by Steve+B · · Score: 4, Insightful
    A couple of the bad provisions of this bill, as reported by the Washington Post:
    1. Preemption of state anti-spam laws.

    2. Individual right of civil action against spammers is expressly denied.

    This should be called "The Spammer's Freedom Of Speach Charter"
    --
    /. If the government wants us to respect the law, it should set a better example.
    1. Re:"CAN SPAM" = OK, you CAN SPAM at will by SpaceLifeForm · · Score: 3, Interesting
      Then this bill is unconstitutional The Federal government can not take away rights from the states, nor can it prevent the citizens of those states from taking action against the spammers.

      Amendment X

      The powers not delegated to the United States by the Constitution, nor prohibited by it to the states, are reserved to the states respectively, or to the people.

      --
      You are being MICROattacked, from various angles, in a SOFT manner.
    2. Re:"CAN SPAM" = OK, you CAN SPAM at will by Zathrus · · Score: 4, Insightful

      I think you need to read up on your legal knowledge.

      Federal law trumps state law. Ammendment X is not applicable here, any more than it is for the Do Not Call list or the Fair Credit Reporting Act because this law is made under the auspices of interstate trade which the federal government is explicitly granted authority over in the Constitution. And spam is most certainly interstate... in fact, the state laws do little or nothing because enforcement ends at the state line. To a large extent it's questionable whether or not this law will do anything since enforcement will end at the US border, but if it's well designed (which is questionable) then it's at least a start.

      Sadly, nothing short of completely replacing SMTP with a more secure protocol, including authentication, is going to stop spam.

  15. Re:This will only momentarilly stop the hemorrhagi by Steve+B · · Score: 2, Funny
    over 70% of the spam in the world is accounted for by 20 or so people

    That could be a problem -- after Afghanistan and Iraq, I'm not sure if we still have 20 Predator-mounted Hellfires in stock.

    --
    /. If the government wants us to respect the law, it should set a better example.
  16. End users can no longer sue by realdpk · · Score: 4, Insightful

    From CNN:

    "State and federal law enforcers and Internet service providers such as EarthLink, Inc. would be allowed to pursue spammers, but individual users could not sue directly."

    That's majorly unfortunate. It basically means that spammers will be able to buy (through settlements) access to ISPs, and the customers will have no recourse.

  17. Re:Ledgislation is BAD by Chibi+Merrow · · Score: 2, Informative

    No, legislation is good if it's well thought out. CAUCE has always suggested expanding the TCPA Junk Fax provisions to junk email, and honestly that's a good solution. That lets civilians file their own legal action against spammers and the companies they advertise for $500 a pop instead of creating some huge worthless beaurocracy to deal with it.

    --
    Maxim: People cannot follow directions.
    Increases in truth directly with the length of time spent explaining them
  18. Other things the senate voted in by Bendebecker · · Score: 2, Interesting

    They also voted themsleves a new pay raise for the great and wonderous work they are doing in passing unenforceable laws. Aren't you just happy that while we're all getting canned and being forced to work at MickeyD's to put ramen noodle soup on your table, these asshats are giving themsleves raises. The argue its about increase of livimng since the average workers salary went up. I got news for you do, if your salary percent went up its cause either the number of lower salary people out of work is increasing hence giving a better percentage. If your personal alary went up, its becuase you actually did do a good job and got a raise. Note: DID A GOOD JOB. Last time i looked the economy was still in flush mode. So just remmeber that when you look at this law. This law, the time they wasted on it, and others like it is where your tax dollars are going. Gives you a whole a whole new perpective on this law now...

    --
    There's a growing sense that even if The Future comes,
    most of us won't be able to afford it.
    -- Lemmy
    1. Re:Other things the senate voted in by clifyt · · Score: 2, Insightful

      So what?

      It was a cost of living increase. I work for a public institution and we got shafted this year. We don't get merit increases and promotions are generally out of the question because every year more and more crap is shoved at you so that in all actuality, you are doing far more work than your job description asks for, as is everyone else, so its not in anyones best interest to do so.

      So, we get cost of living increases. This year was a 2%. Our work load went up probably 20 - 30% more than last year.

      I applaud the senate for taking their cost of living increases. They took a 2.2% raise. Is a shitty raise if you ask me.

      I don't care what the rest of the economy is doing, public service SUCKS. Given that each and everyone of us from elected officials down to the janitors that work in the conditions we do, I think a 2.2% increase is the least they could do. It sets an example and if we can't afford that as a country, something is wrong.

      I'm going to call my congressperson and ask that they take a 5% next year and vote that the rest of us get one too.

  19. SpamPal by Thuktun · · Score: 2, Informative

    SpamPal is good, too. It uses a plugin architecture that currently supports a regex-based body text scanner and Bayesian categorization. It also natively supports filtering of mail using DSNBLs for those of us who want to also use something other than content scanning.

  20. Follow the cash by RT+Alec · · Score: 4, Insightful

    Yes, the spam mostly comes from IP addresses outside the U.S. However, it is almost always advertising something sold by an entity in the U.S.

    This bill, if passed, can have an effect. If a company in the U.S. uses spam to advertise, and that spam has fraudulent headers, then the U.S. company can be prosecuted. That's the true origin of spam-- not the IP address of the sending machine. This allows for a non-technical approach to combat the true originators of the messages.

    Why do spammers use fraudulent headers anyway? To evade technical spam-blocking techniques (RBLs, whitelists, etc.). As the spammers start to reduce their use of such methods, the technical techniques used by many ISPs and end users will be more effective. No silver bullet, to be sure, but every little bit helps.

    1. Re:Follow the cash by Pieroxy · · Score: 4, Informative

      That's not the way spam works. An independant entity is doing SPAM and it is based in Russia. It will advertise "Get the lower rates for your mortgage" for example. Then, when someone respond to that and give its name/address, the Russian company will sell the personal informations collected to any company willing to pay $2 (or $n) for it in the U.S.

      See, the mortgage company is not involved in the SPAM at all! The mortgage company just buys the name/addres of someone interested by low rates.

      No one does anything wrong in the U.S. with this model.

    2. Re:Follow the cash by RT+Alec · · Score: 2, Informative
      That's not the way spam works

      That's not the way the particular spam you mention works, correct. But the online pharmacies, stock pump-n-dump schemes, porn, 'work-at-home' and other spam messages generaly have a U.S. component to them that gets the cash eventualy.

      If this bill could just eliminate spam for anti-spam software I would consider it a success.

    3. Re:Follow the cash by mrex · · Score: 3, Insightful

      That's not the way spam works. An independant entity is doing SPAM and it is based in Russia. It will advertise "Get the lower rates for your mortgage" for example. Then, when someone respond to that and give its name/address, the Russian company will sell the personal informations collected to any company willing to pay $2 (or $n) for it in the U.S.

      Maybe there are a few that work this way, but for the most part this is *not* how spammers operate. I will avoid posting a step by step, but its pretty easy to figure out what affiliate programs are really intended to do, and its damn obvious that all those dialup systems in other countries aren't owned by the spammers.

      Most spammers are in the US, as are most businesses whos products spam advertises. They use fake affiliates to deflect complaints away from themselves ("oh, affiliate XYZ spammed you? spamming is strictly against our policy, that affiliate has been removed!"...yeah right) and hand off credit card processing to shady merchants. The actual machines sending out the spams are mostly compromised always-on boxen in technologically developing countries, but don't let that fool you -- the spammers are still in the US and thus subject to US law.

      You do raise a good point though...an effective anti-spam law would prevent spammers from hiding behind complex organizational structures by exposing all the players to risk.

  21. Smoke & Mirrors by TrollBridge · · Score: 2, Interesting
    'The odds of defeating spam by legislation alone is extremely low, but that does not mean we should stand idly by and do nothing about it.'

    "...but we'll pacify the ignorant public with the appearance of trying to combat spam. That will get us elected to another term, at least!"

    --
    There's a Mercedes gap too. I want one and can't afford one, but it's not government's job to do anything about it.
  22. Problem with a do-not-spam registry by SeanTobin · · Score: 5, Insightful

    The major problem with a do-not-spam registry is not that it would only affect domestic spam.. The major problem is that there will be a huge list of validated e-mail addresses that spamhauses can buy, send overseas, and spam all day and all night from offshore.

    The only reason this isn't happening with the telephone do-not-call list is that the cost of international calls is still prohibitave... but I think VoIP might make this option attractive at some point. I'd just love to get a sales call from some guy in India trying to sell me a new car windshield. Also, phone numbers are published anyway, so there is no real need to harvest the do-not-call list.

    I think the way this should be implimented is a national list of MD5's of the addresses. Make it illegal to email any address whose md5 matches one on the list (converted to lowercase so that capitalization is not a loophole). This would prevent address farming, and have the same integrity as the proposed do-not-spam list.

    (BTW, consider this prior art in case anyone goes patenting md5's of email addresses... /me smacks the US patent system)

    --
    Karma: SELECT `karma` FROM `users` WHERE `userid`=138474;
  23. this bill by codepunk · · Score: 4, Insightful

    The only legislation that is really needed is to make it unlawful to send mail with forged mail headers. They could pin them with computer and interstate commerce fraud.

    --


    Got Code?
  24. Do Not Email List == Loss of Privacy == Abuse by Ron+Bennett · · Score: 3, Insightful

    According to the article, there would be a "Do Not Email List" component to the law...

    A "Do Not Email List" would cause a further loss of privacy...government (and its contracters, some of which are sketchy) would be able to associate email addresses with IPs and possibly other information...

    If implemented, it's very likely one would be asked to not only supply the email address(es) they wish to add, but would also asked for their real name, postal address, and phone number too.

    Now anyone who thinks that information will remain confidential is kidding themselves. Did you know most U.S. states sell driver license information, including DL pictures to private entities...even those states that have laws against such actions share the information too due to various loopholes in their respective state laws; information also shared with other government agencies, including the Feds (don't think for a second it's not).

    Ok, got on a tangent there, but to make a point...

    If the government were to compile a "Do Not Email List"...the following will *likely* occur...

    * Email and associated collected information would be stored and added to other unrelated government/private databases too.

    * Government and other private entities will use the list to help track/monitor people - ie. "Deadbeat Dads" ... while one can debate the issue of child support, the fact of the matter is that much privacy is being lost in the process; an excuse to further erode the rights of all Americans.

    * The email addresses and likely their related information will be used by politicians for sending out spam...yep, there's likely an exception for that; there is for the national do not call list.

    * Various private entities, mostly offshore, will obtain the "Do Not Email List" and use it in the exact opposite way for which it was intended...that is they'll send spam to those addresses.

    Opt-Out doesn't work for email; its debatable whether it works for phone numbers either, but that another topic for another day.

    Bottom line is that any decent anti-spam bill should NOT have a "Do Not Email List" component, but rather instead require companies, non-profits, politicians, etc to use double-verified OPT-IN email lists for sending ubsolicited email.

    Ron Bennett

  25. Real Solutions by mabu · · Score: 3, Insightful

    This is yet another toothless waste of time of a bill. Toss it on the pile.

    Now let's get real:

    It's important to realize that there are certain characteristics of most spam:

    1. Most "legitimate" promotional mail comes from a static, traceable source (i.e. mailing lists or a specific web site such as amazon.com) The more legitimate spammers, due to their visibility, are forced to maintain more responsible mailing practices or else they will be blocked or blacklisted.

    2. The vast majority of spam comes from rapidly rotating sources difficult to trace and lock down (random IPs on the Internet that are either unauthorized or compromised SMTP servers). Regardless of the nature of the spam message content, most of these spam sources involve one or both: violation of the ISP's terms of service (which most disallow smtp relaying from direct client IPs), or an illegal exploitation of third-party computers.

    #1 is easily dealt with. Any centralized operation that doesn't perform responsible mailing (opt-in/out, non-forged headers, published contact info, etc.) can be dealt with. We know who these people are and how to reach them; they are large, targetable operations.

    #2 is the real problem and the major source of spam online. All the penis-enlargement, Nigerian scams, online pharmacies and home mortgage solicitations are promoted through the use of an ever-changing network of computers, most of which are broken into by spammers or otherwise re-routed through a plethora of foreign ISPs.

    The key to solving the spam problem is nailing down #2. I believe that most of the rotating spam sources involve illegal computer exploitation and compromises. We're talking criminal activity - not civil wastes of time. This is the angle law enforcement should use. Go after relay hijacking and enact punitive damages on ISPs who have demonstrated a consistent disregard for the control of their IP blocks. If we go after the spammer-criminals, they will be forced to settle with spam-friendly ISPs or face criminal prosecution. At that point they either clean up their act, or their ISP will become blacklisted. So the solution is straightforward: go after the spammers who take over third-party SMTP servers and client machines. These are criminal offenses which the authorities have yet to actively enforce.

    My solution to the Spamedemic:

    Believe it or not, solving the Spam problem is really easy and practical. It does not involve infringing on freedom of speech. It does not involve denying ANY business interest the freedom to use e-mail for marketing.

    1. FORM A DEDICATED CYBERCRIME ENFORCEMENT AGENCY. Populate the agency with well-trained IT people who know the laws and the nature of the problem. This agency does not need to encroach into areas covered by US Customs or the FTC (i.e. not be concerned with the content of spam, but merely focus on computer/network-tampering/exploitation). The FBI is not adequately equipped to fight cybercrime. A new agency separate from the other law enforcement organizations should be created.

    How to fund this new agency? How about a small fee for domain registrations? I think most people would be willing to pay an extra $5/year per domain to ensure that the Internet is more secure and spam-free. In any case, there's plenty of frivolous spending that could be repurposed to fund this very useful agency.

    2. ENFORCE CRIMINAL PENALTIES for computer exploitation: mail-relay-hijacking, trojan horse, worm, virus and vulnerability exploitation. There are already laws on the books criminalizing these activities, but since Americans like laws and have a short attention span, it wouldn't hurt to pass a new law which exclusively, specifically addresses the issue of computer/network/communications exploitation by third parties, and levies very intimidating CRIMINAL penalties. There should be no threshold of monetary damage before criminality is triggered: that only punishes diligent admins to catch attacks before extreme damage

  26. 5 year prison terms by andy1307 · · Score: 3, Funny

    Spammers please note: Spammers will get 5 year prison terms. Trying to sell tool enhancement therpies in prison is not a good idea..you'll get to know what "choke her with your large johnson" really means.

  27. Problem with "opt out" legislation by polymath69 · · Score: 3, Interesting
    I have an unlimited(?) number of valid email addresses. The 'opt-out' provision would require me to generate as many of them as I could and then deliver them to the spammers -- and then, if the spammers could think of ones I missed, then it would be OK for them to spam me at those addresses. Need I point out that this is a flawed proposal?

    I've thought of generating a bunch of legal addresses and putting them on a CD-ROM, to show to my congresswoman with the message 'Here are 60 million of my legal e-mail addresses. This disk is full. How many more should I make?'

    I'm glad that this bill is unlikely to pass, though it makes up something like 70% of my mail. We need opt-in legislation, and we need it with teeth. Large and increasing fines, individual grounds to sue, and possibly even the death penalty after some number of convictions; maybe 10?

    --

    --
    I don't want to rule the world... I just want to be in charge of mayonnaise.
  28. How about this idea .... by pjrc · · Score: 2, Interesting
    .... what if they introduce a bill that allows anyone who receives a spam to launch an attack to disable the sender's computer, without any judicial oversight. But in the rare event of a misguided attack or collateral damage, the victim(s) could ask the attorney general for permission to sue their attacker.

    Hell, the RIAA got such an absure bill introduced. Just imagine if anti-spammers had that kind of back-door infuence on the congressional process.

  29. Who Can Prosecute? by schnarff · · Score: 3, Informative

    After reading about this in the Washington Post, where they noted that only e-mail providers or government entities could bring suit, I decided to look up the actuall bill to see if I, as a private e-mail administrator, could bring an action against someone under this bill. The text in question, however, said only "A provider of Internet access service adversely affected" could bring action. So I wrote my Senators to find out if they meant this to be only those who provide actual ISP service, or if people like me who run private e-mail servers could bring complaints. Should be interesting to find out what they say.

  30. Penile, Boob enlargement pills email on cellphone by flyingace · · Score: 2, Interesting

    Lets see if this deters the the penile or boob enlargement pill spams that I get everyday on my cellphone..

    Personally, I like to see that the government is doing something.

    On my desktop :

    Spam has become a work of art these days that even my bayesian filters have a hard time keeping up.

    1) First I used email address to block spam.. they came at me with different email addresses.

    2) Then I marked emails with certain words as spam. They changed that too. Started spelling viagra "vi-agra". Lost again.

    3) Installed spammunition and stopped spam based on context. They started to remove all words from spam and started adding jpegs with the ads.
    Even the jpeg names are different each time.. grrrr..

    All these spam emails get sent, about 30 emails get sent over weekend.

    Feels like the battle at Helms deep !

  31. For those of you interested... by Misch · · Score: 4, Interesting

    For those of you interested, the bill is S.877

    CAUCE (Coalition Against Unsolicited Email) opposes this bill.

    The bill isn't "Can Spam" in terms of canning spam. It's "Can Spam" in terms of "You Can Spam. Sure. Go ahead." It's opt-out, not opt-in. Prepare to have your mailbox flooded. Legally.

    Sec. 105 (a):

    (4) PROHIBITION OF TRANSMISSION OF UNSOLICITED COMMERCIAL ELECTRONIC MAIL AFTER OBJECTION- If a recipient makes a request using a mechanism provided pursuant to paragraph (3) not to receive some or any unsolicited commercial electronic mail messages from such sender, then it is unlawful

    (5) INCLUSION OF IDENTIFIER, OPT-OUT, AND PHYSICAL ADDRESS IN UNSOLICITED COMMERCIAL ELECTRONIC MAIL- It is unlawful for any person to initiate the transmission of any unsolicited commercial electronic mail message to a protected computer unless the message provides--

    On the other hand, Sec. 105 (b) (1) (A) (i) and (ii) make it illegal to use address harvesters or dictionary attacks to send spam.

    I'm also worried that Sec. 105 (e)'s restrictions on sexually explicit advertising will be struck down as unconstitutional, and may have adverse effects on the rest of the law.

    --

    --You will rephrase your request for me to go to hell. Goto statements are not acceptable programming constructs
  32. Musings on how this might work by Daniel+Zappala · · Score: 3, Interesting

    Clearly, you can't just give this database to a spammer and say "here, don't send these people email." What a great recipe for getting more spam.

    Instead, the list would need to be secret, and a spammer could send a query: "Is joe@yahoo.com on the list?".

    You need to avoid the naive solution, where the list-keeper says "yes" if the address is on the list and "no" if it is not on the list. Otherwise, a spammer could just do a dictionary-type attack on the list to discover as many email addresses as she could. "How about joeb@yahoo? joec?"

    You need to instead say "yes" if the address is on the list and then randomly choose "yes" or "no" otherwise. This way if a spammer gets "yes" she doesn't know whether she has a real email address or not.

    Ah, but more problems. If the response is truly random, then a spammer can make a repeat request for all the addresses that the list-owner said "yes" for. The ones that actually aren't on the list will have a chance of coming up "no" a second time. Repeat as many times as you want to get a higher certainty that you have obtained usable addresses.

    So you instead need some history -- always say yes to "fooxyz@yahoo" even if it is not on the list. And now your memory requirement becomes infinite. Sure you could keep a cache of your most recent responses, but this just delays the time it takes for the spammer to find out who is on the list.

    From this brief thought-exercise, I don't know if a "do-not-spam" list is doable. Maybe I'm missing something.

    What is clearly much easier to implement is a "please-spam-me" list. The memory requirements would sure be smaller. And no problem making this a publicly-available list. Likewise, it would be easy to prove you are not on the list when you get some spam. And hey, if 90% of uses don't want spam, why should we force them to say "no"?

  33. Re:Kiss Free Speech Good Bye by blizzardsoup · · Score: 2, Insightful

    If you CC'd me on an email containing your resume that you also sent to 99 other companies, I'd make sure that you never worked for my company you lazy git.

  34. Loopholes? by suwain_2 · · Score: 2, Interesting

    I actually oppose any anti-spam legislation, not because I enjoy spam, or even think people ought to be able to blast out spam, but because of the potential loopholes in the law.

    What I mean by that is this: the Do Not Call movement provided several exemptions; namely, politicians, charities, and anyone you've done business with in the past 9 months (?) is allowed to call you. What I fear is that similar loopholes in spam laws will actually make it harder to block certain spam. As it is today, I can forward spam to whoever owns the netblock it's on and request that they take action; network owners who don't often end up blacklisted, or at least shunned. Suddenly, however, it's harder to get people shut down. A _lot_ of spam comes from places that I've "done business" with in the past 9 months, even if doing business simply means giving my address to them.

    All of a sudden, this bill is giving spammers loopholes to hide under; spammers could actually use the legislation in their defense.

    --
    ________________________________________________
    suwain_2 :: quality slashdot p
  35. Re:Ledgislation is BAD by schon · · Score: 2, Insightful

    Passing a law to fix spam is a bad Idea

    First of all, this law doesn't "fix" spam - which would be pretty difficult, as spam isn't really broken.

    Second of all, a properly-worded anti-spam law is a great idea - it's a necessary step that will officially recognize that spam is both theft of service, and harrassment.

    Just let the technology fix its self.

    The problem is that the technology isn't broken. Spam exists because spammers want something for nothing, and don't care who they annoy or steal from. Technology can't "fix" that. We solve social problems with laws. Spam is a social problem.

  36. Buyer Beware! by Angram · · Score: 3, Informative

    I've said it before and I'll say it again: You have to make buying from spam illegal. You can't prosecute the international spam supply - you can target the domestic demand for spam, however. It's simple economics, people!

    --

    GL
    1. Re:Buyer Beware! by photomic · · Score: 2, Funny

      Hey, it worked for drugs, right?

      --
      sig under peer review

  37. Since when by bigjnsa500 · · Score: 2, Insightful

    Since when has legislation ever stopped anything before? Just another useless law on the books. If they really took a close look AT the spam they would realize its coming from outside the USA. Which we could never enforce the law, heck, we can't even enforce our own borders, what makes you think we can enforce this Spam bill on Joe Schmo?

    --
    This is a test. This is a test of the emergency sig system. This has been only a test.
  38. Re:Kiss Free Speech Good Bye by Spl0it · · Score: 2, Insightful

    Just an FYI. Most people who send out there resume do address it to a company member, do include valuable information, DO NOT try and sell products, and do not falsify the return headers. When the return headers are true, and your addressing a member of a company with a legitimate request/email (say a response to a post about job openings) no judge is going to charge you with spam.

    --

    No, this is
  39. What can it possibly hurt? by knautilus316 · · Score: 2, Insightful

    I see a lot of valid complaints about how effective this is going to be, but honestly, I don't see it having any reverse effects. The spam problem can't possibly get any worsek, so whatever is done is a step in the right direction, however token it may be.

    ~Knautilus

  40. There's ALWAYS a Way by LittleGuy · · Score: 3, Funny

    However, the bill, referred to as the 'Can Spam' bill, is unlikely to pass the House and be signed by the President.

    They should have called it something like "Mary Sue's Law for Liberty and Freedom". It would have been signed by dinnertime today.

    Also, have a link between spam, Bin Laden, Hussain, and peodphiliac drunk drivers.

    --
    Mod Karma -1: I sed bad wurds. If I cep my mouf shut, I wud be at riyses.
  41. Which is more practical? by mabu · · Score: 2, Informative


    A - "Do Not E-mail List"

    Every person on the planet has to sign up for this enormous database, which would also likely involve an extensive creation of an "IP identity system" whereby one central source would now know who is connected everywhere on the network. Now there is no such thing as true anonyminity online. This IP database has tremendous privacy-invasion potential.

    Furthermore, such a list would be a beast to maintain and place the administrative burden both on end users as well as the database maintainers.

    It ultimately wouldn't work because the majority of spammers are small, mobile operations that are already engaging in illegal activity with impunity, so why anybody thinks they're going to suddenly adhere to a do-not-email list is foolish.

    B - SMTP relay licenses

    Every ISP or company that maintains an SMTP server is "licensed". This puts no burden on end users and results in a dramatically smaller database of authorized mail relays. The end user can choose to use an ISP that accepts mail only from authorized relays. The entity maintaining the database sets specific standards mail servers must adhere to (no header forging, accurate contact info, proper message labelling, etc.)

    While I was writing this, I just got a spam.. the header says it's from yahoo.com but an IPWHOIS shows the source of the spam is from a mail relay in LATVIA; an IP with no reverse lookup defined.

    With the SMTP whitelist, we don't have these problems. If the Latvian ISP wants to e-mail the Internet proper, it registers the addresses of its mail servers and adheres to industry standards. If not, the mail systems and ISPs that are sick of spam who subscribe to the whitelist tell them to piss off. Problem solved.

  42. Just use a "+" by ClioCJS · · Score: 4, Informative
    There is. It's the plus symbol. This tends to only work on unix server, but anything after a "+" but before the "@" is ignored by your mailserver.

    So let's say my address is ClintXYZ@unix.org. I could sign up for something as ClintXYZ+ajkfdsjdfasjoifdoj@unix.org and the email would still be received by me.

    Come up with a system, like ClintXYZ+yahoodotcom@unix.org. Then, if a spammer ever harvests your address, and doesn't cleanse out the extra characters, and then spams you, you will know it was yahoodotcom that did it. [This is just an example; don't sue me Yahoo.]

    This has worked at least once for me (After doing it for a few years). A yahoo store violated yahoo privacy policy by doing this, and I reported them to yahoo. Never followed up though.

    It's also good for mailfiltering. ClintXYZ+slashdot@unix.org for example if I wanted to filter everything that came from slashdot into its own filter.

    Beware of webforms that don't allow +'s in the email addresss. It's a grey area of email address validity.

    --
    -Clio
    Karma: Bad (mostly from not giving a fuck)
    Blog: http://clintjcl.wordpress.com
  43. Read what McCain actually said by fiannaFailMan · · Score: 2, Insightful
    Why oh why are there so many people here with reading difficulties? Here is what McCain said:
    "The odds of defeating spam by legislation ALONE is extremely low."
    The keyword here is ALONE . This bill is one of many tools being used in the war on spam. If we all took the attitude of "well this action isn't going to be a magic quick-fix cure-all therefore we shouldn't bother with it" then everyone would give up and we'd be getting thousands of v1agra ads in our inboxes every hour.

    Come on people! Credit where it's due! Every little helps! Spam filters alone are not going to kill spam. Legislation alone is not going to kill spam. Actions taken by ISPs alone are not going to kill spam. It is the combination of these efforts that is going to make the difference.

    --
    Drill baby drill - on Mars
  44. One unintended consequence by nahdude812 · · Score: 2, Insightful

    Non-US spammers buying the list for a big pile of confirmed email addresses. Of people who get lower than average spam perhaps (for a little bit?).

  45. Re:Finished Quote... by Fallen+Kell · · Score: 2, Insightful

    I think you posted to the wrong story. This time they're working against spammers i.e. bettering the lives of Americans. This isn't just another DMCA or something.

    And I am sure you will be the first to sign up for the national "Do Not Spam List" which will be little more then the ultimate SPAMMERS PARADISE! What more could they ask for then a huge list of legit email addresses. There is no way to enforce this law outside of the US, and thus, any and all spammers who's operations reside outside of the US have the perfect list of people to spam. For why else put your email on the list if you didn't actually use it to read email?

    --
    We were all warned a long time ago that MS products sucked, remember the Magic 8 Ball said, "Outlook not so good"
  46. 'Technology' Specific Laws by dismentor · · Score: 2, Interesting

    Well, I appear to have missed the boat on this one, but anyway: Does anybody else have a problem with Internet or Technology specific laws? Does the technological revolution raise any actual, new issues that require new legislation? It is my opinionv that most percieved problems can be equated to equivalent problems in 'real' life with appropriately fast and/or large communication system. Perhaps all that is needed is to establish how the 'old' system relates to the new and how we should move forward in enforcing it, without removing or negating any of the considered rights, checks and balances.

    For instance, I do not see bulk/direct messaging as a problem specific to the Internet; junk mail, junk faxes and direct telemarketing seem to be found just as much a problem. Wouldn't it be more sensible if we created a system that addressed all of hteses problems and hopefully may cover future communications environments? As someone suggested most spam is already criminal under fraud laws.

    Beating a dead horse here: DRM and TPM are a problem too, because in most countries, people can make non-infringing copies to non DRM enabled platforms; the infringing copies are already criminal by existing copyreight laws. Instead of creating a government mandated monopoly on information perhaps it would be a wiser idea to seriously fund, investigate, and run a program to expand the enforcement of laws on the new platform?

    Other examples I won't go into include Import and Export, Wireless Networks and property, Trespass; I welcome any conter arguments to any of these, so hopefully I can smack them down. :P Here's hoping for replies.

  47. List Cleaning by Detritus · · Score: 2, Insightful

    The registry does not have to give out their list to spammers. They can require clients to submit a list of email addresses, delete any addresses that are in the registry, and return the modified list to the client.

    --
    Mea navis aericumbens anguillis abundat
  48. Re:Finished Quote... by macdaddy · · Score: 2, Informative

    I think you're forgetting about one major and extremely important fact. 90% of the spammers out there are in the US. Do your homework and you'll quickly discover this. Some guy in Korea doesn't have any reason to spam me, a red-blooded redneck, about a good deal on a Korea supper-time delicacy. If they are spamming me about a US product then the US company that solicited that spamming is guilty of spamming. There's always a money trail and the vast majority leads right back here to the good ole US of A. Big list of email addresses or not, the US spammers can easily be caught.

  49. HOWTO: Get legislature to pass anti-spam bills by SlimFastForYou · · Score: 2, Insightful

    Screw root@127.0.0.1..... All you have to do is put in the email address of your representative whenever something on the Internet asks for an email address =). All you gotta do is get them on a few mailing lists... then the spamers will trade the addresses around =).

    Anti-spam country, here we come.

  50. This bill legalizes spam by Animats · · Score: 2, Insightful
    This bill legalizes spam. It's intended to head off California's new law, which has real teeth.

    First, the Senate bill is "opt-out", not "opt-in". After January 1, spam in California is simply a crime. You don't have to opt out.

    Second, the Senate bill has no private right of action. It can only be enforced by Government action, and only in Federal court. California lets any victim sue. You can sue in small claims court (which goes to $10,000 in California), and you can sue in a class action, so the usual ambulance-chasers can go for the business.

    Third, the California law lets you sue anyone who "sends, or causes to send" spam. "The true beneficiaries of spam are the advertisers who benefit from the marketing derived from the advertisements.", says the law. This lets you go after the advertiser, rather than the spammer. Just find out where the money goes when you put in a credit card number, and sue them. The Senate bill doesn't let you do that.

    Fourth, the Senate bill preempts stronger state anti-spam laws. No more private anti-spam suits, no "ADV:" requirement, etc.

    Finally, the Direct Marketing Association supports the weak Senate bill. As they put it, "Legitimate e-mail marketing is a promising vehicle for global commerce." That's a good reason to oppose it.