Slashdot Mirror


Spamhaus Guru Steve Linford Profiled

BenLev writes "The New York Times has an article profiling Spamhaus Project director Steve Linford. The feature goes behind the scenes at Spamhaus, 'one of the leading groups that is trying to make the world safe from junk e-mail', showing that it operates from Linford's houseboat on the Thames near London, spammers don't like him, and his volunteer corps likens itself to the X-Men."

45 of 191 comments (clear)

  1. good idea. by waitigetit · · Score: 3, Insightful

    I like the idea of the do not spam registry that they mention in the article. But it seems like a real pipe dream considering how much trouble there has been getting the do-not-call registry up and running.

    Also, most telemarketing is done from in-country because of LD charges. Not so with e-mail. It's pretty hard to enforce US laws on a Taiwan spamhaus.

    Ah well, every little voice against spam warms me a little at least.

    --
    I could care less, but not without a lobotomy
    1. Re:good idea. by Phroggy · · Score: 4, Informative

      I like the idea of the do not spam registry that they mention in the article. But it seems like a real pipe dream considering how much trouble there has been getting the do-not-call registry up and running.

      Compared to spammers, the sleaziest telemarketers are shining pillars of ethical perfection. Telemarketers will not abuse the Do Not Call list - if nothing else, than because they REALLY fear the FCC (and FTC or whoever winds up administering it). They run legitimate, legal businesses, and can't afford to run the risk of breaking the law.

      Spammers, on the other hand, care not for such things. If there ever were a Do Not Spam list created, and it was done in such a way that the list itself would not be published, you can bet somebody would write a script to randomly generate billions of e-mail addresses, check every one of them against the Do Not Spam list, compile a list of every e-mail address that matches, and sell it as a list of confirmed opt-in e-mail addresses on CD-ROM for $500.

      --
      $x='S24;r)>63/* h@<5+oZ)32"5cz';$me='phroggy'x$];
      $x=~y+ -xz+\0-Tx+;print$_^chop$me for split'',$x;
    2. Re:good idea. by waitigetit · · Score: 3, Insightful

      If the only reason they don't call you is fear for punishment, that does not make them ethical.

      I think a more important difference is that it costs them money to call you. So, basically, a Do Not Call list saves them money because they do not need to call people who hate telemarketing.

      --
      I could care less, but not without a lobotomy
    3. Re:good idea. by ThereIsNoSporkNeo · · Score: 2, Insightful

      Not that I'm advocating Capital Punishment, but let's look at this another way...

      Let us suppose that 500 million people have access to email.

      Let's say that they spend 20 seconds a day dealing with it.

      That's 10,000,000,000 seconds,
      166,666,666 hours
      6,944,444 days
      19,013 years
      271 lifetimes (Given 70 year life)

      That's per day.

      --
      With my dying breath, I curse Zoidberg!
    4. Re:good idea. by jpetts · · Score: 2, Informative

      I think a more important difference is that it costs them money to call you. So, basically, a Do Not Call list saves them money because they do not need to call people who hate telemarketing.

      I've spoken to the husband of a friend who works at a telemarketing place, and actually telemarketers hate the DNC list, since it allows people who have problems with saying no and confrontational situations - vulnerable people who are one of the telemarketers' main targets - to say no anonymously, with no conflict.

      If (and only if) such people didn't contribute large numbers of $$$ to the telemarketers' profits, then the latter would love the DNC list.

      --
      Call me old fashioned, but I like a dump to be as memorable as it is devastating - Bender
    5. Re:good idea. by riffer · · Score: 2, Insightful
      Absolutely correct. Spammers don't use their own money and resources they criminally hijack server space, bandwidth and more in order to perform their "business".

      Plus the majority of spam is either totally fraudulent (i.e. 491 Nigerian crap, MLM schemes, etc) or 80% fraudulent (herbal viagra, weight-loss pills, etc... People who order that shit usually get something in the mail but it's not going to work as claimed).

      Since spammers are now willing to unleash whole new virus schemes just to generate the open relays/zombies needed to do their dirty work, I think we're approaching the point at which only physical action will have a lasting result. Be it confiscation of the spammers business, assets or straight-forward horse-whipping.

      And no, I don't think violence is always a solution, but it's a rpetty basic human trait. You piss enough people off long enough, eventually you get your ass kicked...

      --
      In the darkness of future past, The magician longs to see. One chants between two worlds, "Fire, walk with me!"
  2. Adding info to DNS servers by Space+cowboy · · Score: 4, Interesting

    What happened to that proposal to add records (as comments, so the DNS protocol wasn't broken) to the DNS saying that a domain was authoratative for the envelope 'From ' header ? That sounded like a good idea, so long as the MTA's took it up...

    Simon

    --
    Physicists get Hadrons!
    1. Re:Adding info to DNS servers by The+Famous+Brett+Wat · · Score: 5, Informative

      There are quite a number of such proposals. For instance...

      ...among others. The Internet Research Task Force Anti-Spam Research Group (IRTF ASRG) currently has a sub-group specifically dedicated to the unification of these proposals. This is a relatively recent initiative (only about a month old). You can find archives of the discussion at gmane.org.

      --
      proof, n. A demonstration that a conclusion is implied by certain premises and axioms.
    2. Re:Adding info to DNS servers by sorlov · · Score: 2, Insightful

      This discussion (at gmane.org) clearly shows that the main problem is not technical but social. All proposals are good enough to make spammers' life harder. But people can't work together. That is why the unification fails, the is why SMTP can't be replaced in the near future, and that is why a simple SMTP sender authentication will take year to be implemented worldwide.

  3. These guys block pretty large blocks. by ron_ivi · · Score: 3, Interesting
    Few weeks ago, much of my email was blocked because because spamhaus.org was blocking a huge (69.64.32.59/20) range that contains our address.

    My particular server (a dedicated box) was innocent, but my hosting facility had spammers on other dedicated boxes.

    Isn't blocking a /20 like swatting flys with a hand grenade?

    1. Re:These guys block pretty large blocks. by Indy1 · · Score: 5, Interesting

      /20 isnt that agressive. Probably your isp kept moving the spammers around and spamhaus said fuck it and plonked a bigger range. Stop blamming the blacklists and start yelling at your isp to stop hosting spammers. If your going to live in a crackhouse, dont be surprised when your friends refuse to visit you.

      --
      Lawyers, MBA's, RIAA? A jedi fears not these things!
    2. Re:These guys block pretty large blocks. by ron_ivi · · Score: 2, Interesting
      I didn't say I felt it was "wrong" that owners of networks can block whatever email they want. I agree with their right to do so whether it's because some blacklist says it's IP address is within a few hundred of a spammers, or whether it contains keywords suggesting it's pr0n.

      I'm just pointing out that there are quite a few false positives when large IP ranges are blocked.

      Any low-cost hosting (in this case, an under $50/month dedicated linux server) that offers the users the ability to run whatever services they like may attract spammers. My hoster does have policies to stop spammers, but with affordible single-dedicated-system hosting spammers come and go. IMHO, blocking large ranges doesn't much affect the spammers or the hosters in this case - it just causes a minor inconvenience to others on the same ip address blocks who have to temporarily route their email through their DSLs for a while.

      Note I'm not saying this policy is "wrong" or "right"; and I agree organizations can block whatever they want. I just think blocking large address ranges does as much to create false-positives than to block spam.

    3. Re:These guys block pretty large blocks. by Anonymous Coward · · Score: 2, Informative

      I just think blocking large address ranges does as much to create false-positives than to block spam.

      The point is that if your ISP has repeatedly ignored the problem, then there are no false-positives.

      Until your ISP cleaned up their act, you were (indirectly) gaining a benefit from the spam, in the form of cheaper hosting.

    4. Re:These guys block pretty large blocks. by frankie · · Score: 3, Informative
      spamhaus.org was blocking a huge (69.64.32.59/20) range that contains our address.

      Are you absolutely 100% sure you were blocked by Spamhaus and not by SPEWS? Spamhaus generally tries quite hard to avoid "collateral damage".

    5. Re:These guys block pretty large blocks. by frankie · · Score: 2, Interesting
      Dammit, stupid non-optical mouse jumped and I hit Submit instead of Preview.

      Anyways, I meant to say that 69.64.32.59 is listed in SPEWS and it is not listed in Spamhaus. Given that the wider-reaching SPEWS only lists a /24 in that vicinity, I find it higly implausible that Spamhaus would drop a /20.

      Instead, I am starting to consider the notion that there is a pro-spammer astroturf campaign being waged against blocklist sites.
  4. Yadda yadda yadda by Phroggy · · Score: 5, Informative
    --
    $x='S24;r)>63/* h@<5+oZ)32"5cz';$me='phroggy'x$];
    $x=~y+ -xz+\0-Tx+;print$_^chop$me for split'',$x;
  5. Bullcrap by Raul654 · · Score: 4, Informative

    1) That's 3 clicks per email * the rate at which you gets spams. It adds up after a while

    2) There's always the chance of a type 2 error - you could lose (either through accidental blocking or unintetional deleteing) an important email.

    3) You pay for the bandwidth that they waste, in the long run. They are simply shifting the price of getting in touch with you from themselves to you. In effect, they are calling you on your dime.

    --


    To make laws that man cannot, and will not obey, serves to bring all law into contempt.
    --E.C. Stanton
  6. We've got all the laws we need by jmv · · Score: 3, Insightful

    I really believe that we currently have all (well mostly) the laws we need to stop spammers, if only they were enforced. Even if SPAM is still not illegal in most places. What most spammers do is illegal. Instead of fining a spammer for sending Nigerian scams, jail him for fraud. Instead of fining a viagra spammer, jail him for cracking in other people's computers in order to send the spam. Much more effective I think. Why go for "minor" civil offense when the spammer is actually guity of a criminal offense. I know not all spammers commit crimes, many do.

  7. Actually, you don't by simong · · Score: 4, Insightful

    You get email from someone pretending to be Spamhaus in order to discredit them.

  8. Re:Lucky me? by Burb · · Score: 2, Interesting
    One reason might be that spammer's can't guess your email address by dictionary searching. Case in point: my wife set up an email account some years ago and used a name based on a "Peanuts" character. For various reasons she didn't use the account and I'm fairly sure she did not sign up for any mailing lists etc. so the name was not published. Then all of a sudden she gets 20-30 porn messages a day into the account, because some spammer decided to try

    --

  9. Re:epitome of laziness by ctr2sprt · · Score: 2, Interesting
    I get about 180 spam mails a day. Now I can get Mozilla to block all but 2 or 3 of those... but it also classifies every NON-spam message I get as spam. So I have to weaken the filters, and now about 20-30 messages a day get through. And unfortunately that's still over my limit of how much I can effectively filter mentally. As much as I stress to people that any emails they send me with generic subject lines (like "Hello" or "Last night") are going to get thrown in the trash by accident, they still do it. And I still space out when manually filtering out spam and delete their messages.

    It still only qualifies as an annoyance because I seldom do anything important over email. But the reason I don't do anything important over email is because I know spam makes it unreliable. Bit of a Catch 22 there. Seems like the reason spam is an annoyance and not a serious issue is that it's increasing fairly gradually. If there were this much spam back in '95, there'd be riots. (Among the nerds, which I guess means lots of really heated USENET posts about how Captain Kirk is so much better than Captain Picard.)

  10. This doesn't seem to be helping... by DeionXxX · · Score: 5, Informative

    I don't know about everyone else but lately I've been trying to find work and I have come across atleast 4 opportunities to make 1.5 times my normal rate if I do some development related to spam. Each time I've interviewed I've told the employer that spam was a bad way to go and that it'd be illegal soon etc... but it seems like they've all had past experiences where spam has been highly profitable.

    -- D3X

    My latest endeavour... truly free porn www.NeoX3.com 5 mins movies supported by only a 15 sec commercial. No-popups or membership or catches.

    1. Re:This doesn't seem to be helping... by Ryokos_boytoy · · Score: 3, Interesting

      We (the dev firm I work for) was approached to do spamming. I went apeshit and said I would quit and report it to the FCC but they were offering real money and my bosses were tempted. So I turned off the blacklists and let them swim in spam a few days till they came to their senses. When he had 100+ spams everyday, he saw the light.

      --


      If you don't say anything, you won't be called on to repeat it. -- Calvin Coolidge
  11. The end of spam by heironymouscoward · · Score: 3, Interesting

    I'm surprised no-one has thought through the logical conclusions of where we're going with spam.

    Spam filters work only for those able to configure them. For the vast majority of Internet users, they are just a dream.

    Spam blacklists are unsustainable in a world where most net connections come across DHCP, and most spam is/will be sent from owned home computers.

    Spam merchants will continue to harness the 'dark side of the force', paying crackes and virus writers to create the networks of owned machines they need to operate from... ... since there is nothing serious happening against any of these directions, the conclusion seems unavoidable. What I'd like to say is that
    the Net will split into two halves, an "infected" and a "clean" part, and every single transaction from the infected part will be treated with scrutiny and suspicion.

    But this is impossible too.

    Conclusion: the purity of the net is a thing of the past. We will come to understand that traffic is bad until demonstrated good. Emails will be 99.999% junk, virus, and trojan, and the art will come not from filtering out this junk but from detecting the signal within the noise.

    Clearly, whitelists are part of the solution but they are limited since you can't form a network of whitelists, it's a one-to-one solution that does not scale.

    I see only one solution that is scalable. Data clearing houses. You register with me, I'll vouch for all your data, and pass it on to those who need it, along with my signature. A trust network, if you like.

    Data clearing houses will rate each other, creating a system of moderation in which data is never guaranteed good, but at least you get a measurable index of confidence.

    --
    Ceci n'est pas une signature
    1. Re:The end of spam by McDutchie · · Score: 4, Funny

      Ah, here is another one who has found the Final Ultimate Solution to the Spam Problem.

    2. Re:The end of spam by taustin · · Score: 2, Informative

      Spam blacklists are unsustainable in a world where most net connections come across DHCP, and most spam is/will be sent from owned home computers.

      That was a problem solved several years ago. Many ISPs simply block any and all DCHP addresses that they can identify, and many specifically list their DHCP addresses with some of the block lists to make it easier.

      This is because nearly all email from DCHP addresses is, in fact, spam, and most of the rest is from someone violating their AUP in the first place, running a server on a consumer account.

      Don't give up your day job.

  12. this didn't happen by accident by RMH101 · · Score: 4, Informative
    your ISP or their upstream is spam-friendly and RFC ignorant. they've repeatedly ignored LARTS for spam, and this is the price they pay. Your mail is only blocked by ISPs who've voluntarily signed up with SPEWS/Spamhaus because it works for them. The idea is you and all the other guys it's pissed off will complain/take your business elsewhere and the ISP will be encouraged to behave responsibly. They've already ignored warnings, hence the voluntary block.

    1. Re:this didn't happen by accident by _Sprocket_ · · Score: 2, Informative


      Don't get me wrong, I'm by no means spam-friendly, and I do support efforts to tackle it. I just think that some of those efforts are a little too wide-reaching. By all means block IPs, but specific ones, not whole ranges; it's not fair on the innocent bystanders that inevitably get caught in the crossfire.


      Sure. Sounds great. Now - what do you do when the ISP in question just bumps the offending spammer to a new block of IPs? Or how about that one fast-burner marketing type at the ISP who's discovered that he can really pack his quota by tapping in to this market of "email-advertisers"? Do we all get another xK pieces of spam while everyone plays another round of whack-a-mole/spammer?
    2. Re:this didn't happen by accident by Dimensio · · Score: 2, Informative

      But they're not paying the price, the OP is.

      Forgive me for not caring. The ISP is supporting criminal activity by hosting spammers. As such, there's no reason for me to want traffic from that ISP. If the OP wants his mail to get through, then he should find an IP address not owned by a bunch of sleazebags who openly support and encourage criminal activity.

      By all means block IPs, but specific ones, not whole ranges

      That has been tried. It failed. The spam-friendly ISPs just moved their spammers around to new IP addresses and moved non-spamming customers into the blocked ones. At least by blocking the entire ISP, the "innocents" hit can't complain that they're being unfairly branded as spammers (well, they do, but that's because they don't RTFF).

  13. Re:first by Rasta+Prefect · · Score: 3, Insightful
    I get spam emails from this company, telling me to use their software to eradicate spam .. Pot calling the kettle black?

    Try looking up Joe Job.

    --
    Why?
  14. Re:epitome of laziness by Halo1 · · Score: 4, Insightful

    Our university had two install 2 new mailservers just to be able to run all incoming mail through spamassassin. Do you think the spammers paid for that "small annoyance"?

    --
    Donate free food here
  15. Re:I'm worried about non-spam email being blocked by supersam · · Score: 2, Informative

    I quite agree that Yahoo! has a great system to filter out spam to the Bulk Mail folder. I've almost never had a spam mail delivered to my Yahoo! Inbox.

    Using custom filters in Yahoo! hampers the spam filtering mechanism and spam does manage to elude the Bulk Mail folder and ends up in some other folder.

    Attachments will not cause a mail to be filtered out. In your case, probably the person you sent the image used the whitelist feature in Hotmail and your mail id wasn't in it. Or perhaps a custom filter caused your mail (with attachment) to be delivered to the Junk Mail folder.

    Spam filters, firewalls, pop-up blockers are not perfect. They cannot ever claim to be (unless of course you have tiny little people inside your computer filtering out spam or pop-ups). They work by casting their nets wide. We have to grant them some leeway. Always check before clearing your Junk/Bulk mail folders so that you don't miss some important mail that might have got caught in the net! And be regular in cleaning your junk/bulk mail folders or you'll have a huge list of mails to scan before you're sure that none of your regular mail gets deleted alongwith the spam.

  16. Re:Using SBL from command line? by Zocalo · · Score: 2, Informative
    Supposed you have a suspect IP, "A.B.C.D". You start by reversing the octets: "D.C.B.A", then perform an A lookup, not a PTR, against the host "D.C.B.A.sbl.spamhaus.org". If it returns 127.0.0.2, then you have a win^H^H^H loser! To perform a check against other DNSBL providers, simply replace the "sbl.spamhaus.org" with the appropriate host, for example "bl.spamcop.org".

    Also, note that you do not have to query directly against the DNSBL DNS server because it's just another host in the DNS heirarchy.

    --
    UNIX? They're not even circumcised! Savages!
  17. Pay me... by Cygnus78 · · Score: 2, Interesting

    0.01 $ to get on my whitelist.

    Which spammer has the energy ?

    If you really want to mail me, you probably have the energy and the money, or if you really want I could pay you back :)

  18. SPF by KMSelf · · Score: 4, Informative

    SPF. Several proposals have been rolled up in this, under ASRG, including SPF, RMX, DMP, and related proprosals.

    --

    What part of "gestalt" don't you understand?

  19. Re:epitome of laziness by welsh+git · · Score: 2, Interesting

    > I think spam is not that big of a deal. It's just a small annoyance
    > that can be deleted in less than 3 clicks.

    I run my own server, and mailhost for a number of friends and family.

    In total, the server receives approx 10,000 spams a day which is not at all reasonable.

    Secondly, because of 'porn spam' my young niece can't have her own email address.

    Thirdly, lots of spam in a mailbox can sometimes make you miss important emails if you just delete them quickly.

    Finally, no-clicks at all... GUI mailers are too slow :-)

    --
    Sig out of date
  20. Re:Just a matter of time until we get secure email by Analysis+Paralysis · · Score: 3, Interesting
    What Spamhaus does that is different in that they provide information on the worst spammers on their ROKSO list - including names, addresses and phone numbers where known. For some reason, spammers do not like being "outed" (I wonder why?) and this has, in one case, caused a spammer to cease business.

    I doubt that any progress will be made in fighting spam until Microsoft/Apple include authentication options in their default mail applications.

    Unfortunately, authentication is unlikely to do much to stop spam unless people use it with a personal whitelist of permitted senders. It is currently straightforward to track a spam email (SpamCop can do this if you paste the email in with full header information) but nowadays it typically comes from a cable/DSL user whose machine has been hijacked.

  21. Re:The guy is a nut by ag0ny · · Score: 3, Informative

    Break the Internet? Something tells me that you don't know very well what you're talking about. Spamhaus (or ORDB or any other black list service) cannot block anything if you (or your ISP) don't want anything blocked.

    It's the email server's administrator choice to use such a blacklist or not. In other words: if you're running an email server, you can choose whether you want to block these IPs or not.

    You could argue that you're a customer of an ISP that's using Spamhaus or ORDB to block spam and you cannot do anything about that. And I would agree with you on that: you should have the choice to use the blacklists on your email account(s) or not. But that, from the system administrator's point of view, is not a simple task, as of now.

  22. Re:epitome of laziness by anaplasmosis · · Score: 2, Interesting

    You're an idiot. I get 6 or 7 *hundred* spams a day and 1 or 2 hams. If I was deleting this stuff manually, it would take hours a day. I cannot recommend ASSP strongly enough; http://assp.sourceforge.net

  23. education of the people buying the stuff by martin · · Score: 3, Insightful

    The problem isn't so much the spammers, it's the people buying from them.

    If people didn't buy the spammers wouldn't have a market and would go away.

    The issue is to educate the general internet populus that are are merely encouring the spam by purchasing from the advertisers.

  24. Re:DNS servers is not the way to go. by musicmaster · · Score: 2

    Well start thinking about things anonymous phonecalls are used for: tips to the police, tips to newspapers, situations where your personal e-mail is irrelevant because you send the mail on behalf of some organisation.

    Think too about how many people have their phonenumber shielded so that no one can see it.

    And last but not least: posting this as an Anonymous Coward doesn't add to your credibility on this subject;-)

  25. You give spammers too much credit... by Dimensio · · Score: 2

    ...they wouldn't bother checking against the "do not spam" list. Spammers are, by nature, sociopaths with absolutely no regard for the law. Further, they tend to define "spamming" as anything other than that which they do.

    The only sure-fire solution to the spam problem is brutally and publically torturing spammers to death.

    1. Re:You give spammers too much credit... by Phroggy · · Score: 2, Interesting

      You misunderstand. I meant, they would check the Do Not Spam list to get a list of valid e-mail addresses (if somebody bothered to list them, they must be valid), then sell that list to other spammers as a confirmed opt-in spam list.

      --
      $x='S24;r)>63/* h@<5+oZ)32"5cz';$me='phroggy'x$];
      $x=~y+ -xz+\0-Tx+;print$_^chop$me for split'',$x;
  26. NOT a chance by Craig3010 · · Score: 2, Funny
    I heard he had one of

    these puppies on board...

  27. It sucks, but... by falsified · · Score: 2, Interesting
    People are going to have to stop using email. With the vast majority of internet users using some sort of instant messaging program, it's easy to get ahold of a person on the internet. In the instances that a more formal message must be sent, we can use radical new solutions such as the postal service. Fixing SMTP won't work, a new protocol won't work, banning spam won't work, a tax on email is uncollectible and WON'T WORK.

    In an unrelated rant, my username is a normal English word and my domain is a popular email domain. I get five or ten spams a week. The solution? Completely fake information when I sign up for things. The New York Times knows me as Pablo Rodriguez from River Forest, Illinois. My email for them is hotsexy69696969696969@hotmail.com. I suggest you all do the same.

    --
    HI, MY NAME IS ISAAC.