Slashdot Mirror
In (Sort Of) Defense of Spammers
CowboyRobot writes "Eric Allman of Sendmail has a rant in which he looks at the economic forces that have led to the spam problem: 'The sad point of all of this is that I'm going to (sort of) defend the spammers and point out that they are responding to basic economic forces that we all respond to at one level or another. As long as spammers can take in more money than it costs them, they will continue to spam. This is "rational" behavior in the economic sense.'" Otherwise known as the Willie Sutton principle.
Drug dealers and people who commit fraud aren't going to go away becuase they can make money ding what they do. We still despise them and send them to jail when we find them.
unzip; strip; touch; finger; mount; fsck; more; yes; unmount; sleep
Kill all the Marketing Majors.
Good quote, too many chars. Seriously, the slashdot 120 char limit sucks!
Happy Trails!
Erick
http://www.busyweather.com/
We've known this all the time. Spammers spam because it makes them money. Didn't we have a /. article a while back showing how big of a house a big-time spammer had, and giving all sorts of stats, e.g. foreign servers in China, Russia, etc spewing spam, three T1 lines, a network of computers in his basement, etc?
Yes, spammers spam to make money. But that doesn't make it legal. Robbers rob to make money, but stealing is illegal.
As long as spammers can take in more money than it costs them, they will continue to spam. This is "rational" behavior in the economic sense.'"
I don't follow. Responding to "market forces" (and God knows I'm an ESR-esque capitalist) doesn't give you the right to invade my privacy. Arguably, the mafia responds to market forces. Extortion is "rational behavior in the economic sense." Your point being?
I have discovered a truly marvelous
Plenty of crimes (Drug dealing, fraud, plain 'ol theft) make sense. That doesn't mean they're morally acceptable.
If your theory is different from practice, then your theory is wrong.
But what about mailing lists and whatnot operated by small organizations? Obviously they can't afford to pay 0.1 cents/email. I subscribe to the IETF mailing lists; those servers must send hundreds of thousands of emails a day. I doubt they would want to pay so much to provide a free discussion service, and then there's mailing lists operated by nonprofit orgs, charities, etc.
I have a mailing list with 30000 people. Do I have to pay 0.01 cents an email ?
Iraq: war to save the U
"So you want to send me advertising, and you're going to pay me $0.10 per message you email me? Send all you want, dude!"
But if that $0.10 per message just falls into the "Big AOL Pot O'Money(TM)", the whining would be louder than it is today.. "What, I'm paying for email and I STILL get spam? You said it'd be gone if I paid!!!"
John
I am sorry, anyone who responds to penile-enlargement ads, or nigerian scams, or any sort of other spam is a complete and utter moron.
I dont know why anyone out there would do this, especially given the poor quality of the advertisements sent out via email by the spammers....
Ahh..but as Monsieur Barnum said, "A Sucker is Born Every Minute"....it was true then and it is true now, there are people out there too stupid to live!
And in response to a previous post, at least drug dealers and embezzlers require a modicum of intelligence, the haphazard style of the spammers indicates they have none.
Post apocalyptic gaming goodness
Willie "The Actor" Sutton was a bank robber. His claim to fame is that someone asked him "Why do you rob banks?" and his answer was "Because that's where the money is."
Dear Slashdot: next time you want to mess with the site, add a rich-text editor for comments.
If you charged .01 cents an email
Sure, 0.01 cents today.
Tommorrow, who knows how much. Once the infrastucture is in place, what is to prevent the price from going up?
Don't say competition, because just like gasoline, there will be a steadily increasing cost across all providers.
- - - - - - - - - - -
I am a programmer. I am paid to produce syntax not grammar. Deal with it.
Well... I RTFA and that article didn't go anywhere.
/. postings and personal experiences.
He says there's a spam problem (no kidding?) and that the economics of it are viable (Well, no kidding? Is that why we continue to receive spam?) and there's no way to stop it without incuring an overhead in transmission (either through permission based, authentication or challenge and response) - well... we already knew that through 100's of
So what was the point of the article? To just rehash the same old situation?
We need a solution, not a restatement of the problem. The solution is going to involve more overhead, because the fundamental problem with SMTP is the touted low overhead itself. There's no real authentication and anyone can send anything to anyone else. THAT is the problem, so of COURSE we are going to have to have more overhead in a "new" SMTP protocol of some sort if we want to affect a change. This is just a given.
The focus needs to be on coming up with a system to track the responsible parties (for good or ill) - and that will cost overhead. We'll have to suck it up, but it's the way it's going to have to be, unless we want to continue on the road we are on now.
Charging for email without securing the email infrastructure is a bad idea.
Spammers don't send mail from their computers, they send from your computer. Who gets the money from this micropayment? If its the recipient, guess what? All of the spam will be directed to the spammers from the hijacked computers. Instant Powerball jackpot winner. If the ISP gets it, guess what? All of the spammers will become ISPs.
Adding a new market force just changes the dynamics, it doesn't eliminate the crime.
Yes, but you forgot an important factor. If the person is truly rational, they will use the following formula:
Expected Gain = (Gain from burglary) - [(Probability of being caught) * (Estimated monetary cost of penalty)] - (Opportunity Cost)
Opportunity cost is important - my opportunity cost is high, for example, since the next best option for me is my current job, which pays well, has health beenfits, etc. For someone with only a GED, though, it is significantly lower.
the estimated monetary cost being caught is a value assigned to the penalty (i.e., how much is it worth to me to stay out of jail).
Given that formula, a truly rational person will burgle whenever the Expected Gain is greter than 0.
Well, the main health insurance company here has a helpful service that will send a text message to your mobile phone to remind you to take your contraceptive pill. My only regret was that 6am was the earliest time you could select for that reminder...
Yup.
;) It's too evil to not happen.
Ok, now guess who the government would put in charge of implementing this postage system? The U.S. Postal Service has lots of experience with postage...I'm willing to bet they'd get the job.
So, watch as they slap on a small postage fee per email. And then, mark my words, watch them offer a bulk rate for large mailings, just as they do now with snail mail.
...
I can see SPAM killing itself in the not-to-distant future. SPAM is a numbers game, and it used to be that they could get very small response rate and still make money if they sent out a large volume of mail.
Now, everybody is assaulted with countless email messages, mostly peddling the same products. As people get more and more SPAM, the response rate will inevitably drop lower and lower, and I believe it will eventually bring in too little money to justify the costs that spammers incur to send it out.
My public email address will have 100% junk email on some days. I read 0% of those emails beyond the subject line. 3 years ago, when it was only 10-20%, I at least had a chance of actually viewing the message as I was sorting my mail.
As long as spammers can take in more money than it costs them, they will continue to spam. This is "rational" behavior in the economic sense.
I don't follow. Responding to "market forces" (and God knows I'm an ESR-esque capitalist) doesn't give you the right to invade my privacy. Arguably, the mafia responds to market forces. Extortion is "rational behavior in the economic sense." Your point being?
His point being "The problem is that our approach to the solution has also been short-term thinking. We have to think long-term. We have to make the spammers pay more than we do." I know, I know, reading the WHOLE article is very hard. Congratulations on your +4 Insightful.
I have a lot of opinions about Cyborgs and Architects
that you don't understand the premise.
"In the economic sense" means you look at the problem purely from the economic standpoint. Not the legal, not the ethical, not the moral - the economic. Just the economic.
Think of it as functioning in a world of just economics without outside forces like law and morality. Things that make sense - i.e. that will make money - are good, period. However, these ideas tend to lose their appeal when acted on by outside forces - i.e. the aforementioned law and morality. You rolled law and morals into your assessment of a model that does not address them.
I want to drag this out as long as possible. Bring me my protractor.
I still think that mailservers should use the PKI structure. Each new mailserver would require a public/private key pair. Each key could be signed by a prevoius key, leading up to one person (I'll vote Alan Cox, cause that guy knows his shit!).
He signs a bunch of keys, then those keys sign a bunch, and so on and so forth. Lookups would just simply walk the tree. You set the depth at which you'll receive e-mail from, and can elevate keys to top-level if you want, to avoid the headache of having subdomains or backup mail servers faulting for domains on the fringe.
Now spammers will have to get keys from trusted sources, which can be identified. Too many bad certs, and wham, lop the branch of the tree!
I have a strong suspicion that most of the little-guy spam email factories are really just suckered into an industry with the same structure as Mary Kay Cosmetics, Herbalife, Tupperware, Avon, and many other multilevel marketing systems (aka MLMs).
It starts with shit-on-a-stick advertising. You know, the handbills and placards on street corners, or on your company breakroom bulletin board. Somebody reads this junk and thinks they can finally have a job which doesn't require much time and lets them raise their rugrats too. The advertising doesn't say what it IS, it says a lot about what it ISN'T. No selling. No parties (unless you want). No data entry. Use the computer you've got. Some will mention MLM pyramid buzzwords, like "grow your organization," and "get your friends involved with your new company."
Now, in many fraudulent MLMs, you have to pay a fee for a starter kit from your advertising contact. The only difference between a legal MLM and an illegal Ponzi investment scheme is the "product." If you actually schlep skin-cream or candles, you *theoretically* can make back your starter investment without growing a downline organization of other suckers.
You can buy other aids from your advertising contact if you find yourself floundering. Buy a CD-ROM with more email addresses. "Validated." Finally, if you don't think you can possibly sell that much product personally, the only way to escape without major losses is to put out some cheap advertising on your own, asking your friends to get into the act. That's right. Sucker other people to join the organization, so they can share in the same bad investment you originally made.
Spam email "product" would just be the opportunity advertising space itself, which marketing majors will tell you is seen as inventory. The fun thing about email "advertising space" is that it isn't really accountable. You can just run spiders to comb more databases to create more advertising space. Those who get some technical savvy will figure out how to work around a spam filter, and then you can start to build your own library of "validated" addressing space, ready for delivery.
The only way to break apart an illegal MLM is to find the organizing agents of each illegal MLM, and pound them into the dirt legally. Upper tiers are usually found to be defrauding their downline agents, through misleading buy-in advertising. Then prosecute every downline until the roots are too small to grow back on their own. Of course, if they legally have a "product" like "advertising space," and they're careful about how they phrase their recruiting pitches, it's going to be hard to prosecute effectively with today's laws.
[
carefully-target unsolicited email (aka spam) was an essential part of our business plan
..
He's a spammer! I'll grab the tar, someone get feathers and pitchforks..
then there's mailing lists operated by nonprofit orgs, charities, etc.
Speaking as one such (we're not an IRS-endorsed nonprofit, we just don't charge anything *or* serve ads), I have to say... at this point, charging for email isn't going to make a difference for us. We're already looking for alternative methods of serving our content... e-postage isn't going to ruin things any *more* than spam already has.
The Phoenyx spends a great deal of "staff" time and server horsepower (successfully) trying to keep spam off the mailing lists, but it's reaching the point where it's a losing fight... we have no time to add features, etc. because we're constantly tweaking settings to achieve that balance between making administration and usage easy for our users, detecting spam, not getting caught in users' spamfilters, and staying off blacklists (we were on Spamcop's blacklist a few hours yesterday despite all that).
So we're basically giving up. The Phoenyx has served email in one form or another since 1986, and we're not going to stop just yet... but we're going to offer all the alternatives we can (for the same content): a private NNTP server, a web forum (and despite being here, I despise web forums), and so on.
I predict that within a year, we'll have no email subscribers left. Definitely none among nontechnical folks.
Of course, that just means the fight will turn to trying to block web forum spammers, but it's easier to set up authentication on web forums, at least.
Slashdot's token middle-aged housewife
Spamming is an ethical issue at its heart. Using open relays, using individuals' computers to forward mail, and other uses of bandwith that the spammers aren't paying for is at the least dishonest, and moreso argueably theft.
There is also the consideration that freedom of speach by definition includes freedom from speach, so we shouldn't have to be subjected to the spam in the first place.
Responding to economic forces does not in any way exempt anyone from being subject to moral and ethical evaluations.
If I mug people for money and manage to get away with it, that doesn't constitute a defense of any substantive kind. Yes my behavior can be *explained* motivationally by economics, but for someone to therefor be emotionally conflicted as to whether or not I should be condemned for it would be - to put it kindly - absurd.
Now if the alternative for spammers was to starve to death, that would cast this in a different light. But that's not the case. Spammers are people who could have chosen to go to work doing something useful, and instead decided to pollute the commons.
- First they ignore you, then they laugh at you, then ???, then profit.
This is something that's bothered me for a long time. If spam largely is fraudulent (direct ripoff) or advertising fraudulent products (real product, doesn't work), or even criminal (selling drugs illegally), why don't we ever hear about prosecutions for this?
Presumably the money trail is the easist thing to follow in a spam message, particularly with the scary new laws associated with money movement these days. It also seems that RICO statutes could be used to ensnare pretty much everyone involved as part of a corrupt enterprise. And then you go away for hard time, 10-20 and forfeit most of your assets to $100k+ fines.
Given that these laws are powerful and their penalties severe, it would seem that a couple of major RICO busts would put a serious dent in the overall spam business. It would not eliminate it completely, but serious jail time for some of the larger members as well as continuing prosecutions might make it much more scarce.
My own theory is that the government is loathe to prosecute fraud, simply because "aggressive marketing" is so entrenched in otherwise "legitimate" business. My tinfoil hat extension to this theory is that otherwise legitimate businesses are profiting immensely from spam (albeit at an arm's length), and have told FTC/FBI to go easy on it (naturally through their paid-up contributions to their favorite officials).
Although to this day, I'm still wondering why nobody seems to go to jail for selling bogus penis pills and Valium without a perscription.
"No one finds a briefcase full of crack on the street and asks, 'Hmm...how am I going to get rid of all this crack?'."
"It is seldom that liberty of any kind is lost all at once." -David Hume
Working for a living, even with those annoying advanced degrees, costs a significant amount of time and effort. I've seen claims that acquiring a single job through direct application costs close to $100. And that's not considering the 40 hours a week one must spend at the job. Doing a job that pays poorly is inefficient, so workers limit the number of jobs they do to the highest paying they can find.
But suppose it costs you essentially nothing to make a buck through mugging. Then your best strategy to maximize profits is to mug as many people as you can find. After all, if you're mugging mortgage financiers, there might actually be some money in their pockets. You would miss those potential money sources if you trimmed your list. Perhaps some folks who have expressed interest in designer beer mugs are also walking in your area. If you did the "rational" thing you and didn't hit them over the head with a sand-filled sock, you would miss them, and it costs you nothing, right?
The sad point of all of this is that I'm going to (sort of) defend the muggers and point out that they are responding to basic economic forces that we all respond to at one level or another. As long as muggers can take in more money than it costs them, they will continue to beat people senseless and take their money. This is "rational" behavior in the economic sense.
Mafia Don Announces New Anti-Spam Venture
As the NSA and FBI fear, traditional crime organizations have been incorporating high-tech communication into their organizations. Although Janet Reno was quoted stating "This is law enforcement's worst nightmare.", techies around the world are sure to be pleased with one New York Syndicate's new venture.
It all started when Don Dominiqi signed onto his AOL account last Monday morning. His inbox was filled with "Make Money Fast", "Viagra On-Line", and "Teenybopper Web Sex" ads. Lost amidst the drivel was an important note detailing a non-taxed shipment of Marlboros, which were later confiscated by the BATF. Little did he know, as he shouted "Bring me the left hand of this f*cking gutterslime!" what would become of it all.
Later that same day, Billy "Run!" Brutekowski and Larry "My Eyes!" Plucker cornered the pasty-faced offender of the Family in a small cyber cafe in Grenich Village. "This was by far the creepiest place the Boss has ever sent us." stated Billy, who only spoke on condition of anonymity. "Everyone in this place looked pale and sickly, like they had already been 'spoken to'. We asked for this punk, and several people quickly pointed him out. Most of the scum we find in gin joints aren't so quick to finger one of their own," Billy continued.
"He must not watch much TV, because this sh*t didn't even flinch when we came to the corner he was hiding in," Larry proceeded to relate. "We dropped this sheet of paper the Boss had given us on his table and he says 'So you guys want to make money fast, eh?' He puts out his and says to give him $20. This scrawny little dirtball tells me to give him $20!" Larry was quite agitated at this part in his story, and his description of how Sammy Spammer's hand fell off was quite garbled.
Billy continued, "Up till now, this was a routine visit. We was just being playful. The weird sh*t began when we tried to leave." "This pimply faced kid blocks the door as we try to leave, and I'm thinking to myself 'Great, a f*cking Karate Kid hero. He just stand there, and then he hands me a $5 bill." Billy pulls out the $5, and holds it like it is his first quarter from his favorite grandmother. "They lined up after that, and we had $175 in 'tips' when we left the joint."
Later that day the Don himself visited the cafe, unwilling to believe the story. Although the details are unclear, sources at the cafe indicate that the Don has hired them to build and host a new Anti-Spam site. Through a SSL transaction system, the site will accept spam complaints and credit card donations towards 'solutions to problems'. Multiple complaints against the same spammer are added to the total until an acceptable solution has been found.
Larry tells us that a typical $250 solution is a broken hand, and for $2000 all anyone ever sees again of 'the problem' are his shoes.
The URL is to be announced next week, and the cyber cafe's phones have been jammed with requests for more information.
I've posted this before, but it is still funny.
"It is a greater offense to steal men's labor, than their clothes"
I'm sorry, I just don't buy it. Screw economics.
The bottom line Allman is NOT addressing is SMTP IS A BROKEN PROTOCOL. Spamming happens because it is EASY TO DO and it takes more effort to stop it.
SMTP was designed in an era where internet hosts implicitly trusted each other (this same era gave us the horribly insecure TELNET and FTP as well). That era is LONG LONG GONE.
The reality is that SMTP headers are too easy to forge. We will NEVER be free of open relays--this is the fault of the protocol as much as the clueless admins. SMTP needs to be completely replaced.
Look--you can still get spam-free email. Just not over SMTP. Believe it or not, FIDONET still exists and guess what--I don't get any spam there. Why? Because the system would smash down anyone that tried rather quickly--the protocol works. I've been encouraging anyone who will listen to jump back on one of the many FIDONET or Citadel BBS systems available on the internet for decent, spam-free email.
It is quite easy to get rid of spam. This is what I do:
1. Receive Piece of spam regarding penis enlargement. Sent to junk mail, or doesn't go through my spam filter.
2. When I get a few minutes, and I'm rather pissed off at something, I pull up one of my default response templates. Ie, received E-Mail of Penis enlargement pill/patch/voodoo dance, and simply send an E-Mail back saying:
"Hi, I'm interested in your penis enlargement patch. Please send me some information on your product."
3. Wait for response to mail
4. Send another appropriate but stupid question to them, never actually purchasing.
5. Repeat step 3 if a further E-Mail has been sent to me.
Some interesting things I have noted:
1. My spam has decreased. The spammers are not all stupid and they blacklist my E-Mail address. (From 400 mails a day, down to about 50)
2. And this is the big one. It costs a small, tiny fraction of a cent to send out a generic spam advertisement. Therefore, easy or genuine responses are economically viable, as they only get a few a day.
Now just imagine, if we have the force of a fraction of a few dedicated /. readers. Perhaps about 100,000 of them sending on average 5 generic responses per day. That's 500,000 E-Mails to the evil inboxes of doom.
Let's say that 1 company gets 70,000 bogus E-Mails in a day. It still takes approximately 1-2 mins to read and respond adequately to a person if they want to make a potential sale.
Thats between 70,000 and 140,000 minutes a day. That's about 1,167 to 2,333 work hours a day to respond to the junk they get back to perhaps glean 100 real potentials from their campaign.
If you need to pay an employee just $10 an hour, that's still between $11,670 and $23,330 a day.
That's between $4,259,550 and $8,519,100 that the spammers have to pay in work hours.
Now, lets say that they make about $2,000 a day from the 100 e-mails they get that are legit. They are now running at a loss.
Reading only the subject lines and filtering out the 'non-genuine' responses will result in REAL reasponses being filtered out as well, making their profits drop.
As the article said, they are using basic market economic forces to make a profit. We can use basic market economic forces to reduce the spam.
Summary:
1. Responding to spam has reduced my Junk mail, probably due to blacklisting. (This is only me, and I am only stating what has happened in my case.)
2. If enough people respond with fake letters of interest, the spammers go broke, and it becomes non-profitable.
So a call to arms /. ers. You hate spam? Me too. Let's do something about it.
CRyACin
If life gives you shit, then sell fertiliser - Bayani Portier
Science advances one funeral at a time- Max Planck
urg, he couldn't have made this any more obvious. Imagine he was a company selling sendmail: what would they try and do? They'd try and make it look like they weren't the ones responsible for the spam, as they'd have money (in his case, ego) on the line.
The problem here is a fundamental flaw in smtp.
The solution here is to redesign smtp. Even something as simple as a 'trusted peer server' model would work and wouldn't need a complete redesign: each server is the trusted peer of several others (say 5, and all would have to be fqdn). After mail is sent, and before that mail is delivered, the server it is sent from is validified to be a peer (by doing a quick check on the 5 servers that it claims are its peers). If the server sent from doesn't have peers, then the mail isn't delivered.
While this wouldn't completely trap all spam, and some spam would certainly still get through from exploited networks, it would make the job of maintaining accurate RBLs much, much easier, and would functionally run spammers out of business, if (say) the next sendmail version were to impliment the feature, and people started using it.
~/ssh slashdot.org ssh: connect to host slashdot.org port 22: too many beers
His buildup is fine, but his conclusion is off by a mile and a half.
Firstly, he claims that our bandwidth and disk space aren't free... welp, he's right, but only barely. The marginal cost of the additional disk space, CPU cycles, bandwidth, etc is virtually zero, but certainly positive. Yet then he claims that a spammer's costs are zero. What about their computers? Email addresses? Bandwidth? Hard drive space? Those certainly aren't less costly than the same types of resources for each individual recipient.
But, more to the point -- why filters will make reduce spam by effecting the marketplace:
1. The filters have forced the spammers to degrade their own salespitch. By being forced to include extra characters, poor spelling, lousy grammar, etc in an effort to circumvent filters, they are serving to reduce their own credibility. By doing so, they are making their advertising less likely to attract any particular customer. Therefore, their response rate of the folks who might respond to spam is reduced, making spam less profitable.
2. By making spam filters more and more effective and easy to administer, they will find their way to more and more people's mail clients. For many of the new adoptees of filters, it won't be because the new users sought out the filter; it will be simply because the filter was part of the email program they happen to be using. Some of these folks are in the set of "spam-responders", that is, folks that might respond to spam. So, as filters proliferate, they will end up filtering spam away from potential customers -- again, reducing response rates and hence profitibility of spammers.
So, there's two ways where spam filters will reduce overall levels of spam by using the powers of economics against the spammer. Reduce the liklihood that somebody will respond to a spammed message by reducing it's quality, and reduce the liklihood that a potential customer will even see the email in the first place. Sure, the recipient will bear some costs in the short term, but the long term results will be less and less spam overall.
Support a few technologists in Washington.
What if an ISP did the following:
Email "light" - you can only send messages to up to 20 recipients - more than that will be met with an error message from the SMTP server
Email "plus" - $4.95 a month, and you can send mail up to 100 recipients at a time - again, an error message if limit is exceeded
Email "bulk" - you need to specifically call to enable this, and it allows you to send to as many recipients as you want, but every recipient over 100 people is $0.01 per person.
Thus, a spammer could not use a person's machine as a spam conduit because the person would be unable to send the spam! Now, the spammer could put a mailing list on their own server and then make a worm to send to that, but they'd still have to get and maintain a server for the mailing list, so what's the point?
Another nice note - it makes things a pain in the butt for people who want to send chain letters to everyone in their address book. People that do this are unlikely to either take the time to create groups of 20, and send the message several times, nor do I think they'll pay $4.95 for the ability to send junk messages.
I think the grandparent poster is absolutely right. Make SPAM cost something for the sender and then only people who can afford to pay will send SPAM, and the overall amount should decrease, probably dramatically.
Kevin
I can't find the story right now, but someone set up a bogus email account and replied to spam about a home loan.
.....).
He was contacted by big companies that had bought the "lead" from contractors (who bought it from sub-contractors who bought it from sub-sub-contractors who
The big companies say that they frequently purchase such leads from other companies and that if they receive complaints about those companies, then they drop them.
Of course, the spammer just opens a "new" "company" under a different name and starts selling to the big companies again.
Since the big companies don't "know" that they're dealing with a spammer.......
(Apologies to those who have seen this before.)
You advocate a
( ) technical (x) legislative (x) market-based ( ) vigilante
approach to fighting spam. Your idea will not work. Here is why it won't work. (One or more of the following may apply to your particular idea, and it may have other flaws which used to vary from state to state before a bad federal law was passed.)
( ) Spammers can easily use it to harvest email addresses
(x) Mailing lists and other legitimate email uses would be affected
(x) No one will be able to find the guy or collect the money
( ) It is defenseless against brute force attacks
(x) It will stop spam for two weeks and then we'll be stuck with it
(x) Users of email will not put up with it
( ) Microsoft will not put up with it
( ) The police will not put up with it
(x) Requires too much cooperation from spammers
(x) Requires immediate total cooperation from everybody at once
(x) Many email users cannot afford to lose business or alienate potential employers
( ) Spammers don't care about invalid addresses in their lists
( ) Anyone could anonymously destroy anyone else's career or business
Specifically, your plan fails to account for
( ) Laws expressly prohibiting it
(x) Lack of centrally controlling authority for email
( ) Open relays in foreign countries
( ) Ease of searching tiny alphanumeric address space of all email addresses
( ) Asshats
( ) Jurisdictional problems
(x) Unpopularity of weird new taxes
(x) Public reluctance to accept weird new forms of money
(x) Huge existing software investment in SMTP
(x) Susceptibility of protocols other than SMTP to attack
( ) Willingness of users to install OS patches received by email
(x) Armies of worm riddled broadband-connected Windows boxes
( ) Eternal arms race involved in all filtering approaches
( ) Extreme profitability of spam
(x) Joe jobs and/or identity theft
( ) Technically illiterate politicians
(x) Extreme stupidity on the part of people who do business with spammers
( ) Extreme stupidity on the part of people who do business with Microsoft
( ) Extreme stupidity on the part of people who do business with Yahoo
(x) Dishonesty on the part of spammers themselves
( ) Bandwidth costs that are unaffected by client filtering
( ) Outlook
and the following philosophical objections may also apply:
(x) Ideas similar to yours are easy to come up with, yet none have ever been shown practical
( ) Any scheme based on opt-out is unacceptable
( ) SMTP headers should not be the subject of legislation
( ) Blacklists suck
( ) Whitelists suck
( ) We should be able to talk about Viagra without being censored
( ) Countermeasures should not involve wire fraud or credit card fraud
( ) Countermeasures should not involve sabotage of public networks
(x) Countermeasures must work if phased in gradually
(x) Sending email should be free
(x) Why should we have to trust you and your servers?
( ) Incompatiblity with open source or open source licenses
( ) Feel-good measures do nothing to solve the problem
( ) Temporary/one-time email addresses are cumbersome
( ) I don't want the government reading my email
( ) Killing them that way is not slow and painful enough
Furthermore, this is what I think about you:
(x) Sorry dude, but I don't think it would work.
(x) This is a stupid idea, and you're stupid for suggesting it.
( ) Nice try, assh0le! I'm going to find out where you live and burn your house down!
Nathan's blog
Sigh. This is the short-sighted, disconnected view of drug abuse that seems to typify the "legalize drugs now" crowd. Nothing happens in a vacuum.
Right.
When somebody busts out the window of a car to steal a stereo to sell so that they can buy drugs with which to overdose
Doesn't seem to happen for alcohol. Why? 'Cause it's cheaper and legal.
Look, legalization isn't going to make drug abuse go away, but 30 years of wars on drugs hasn't either. And at best, the drug laws simply push most potential abusers to alcohol. Are teetotallers going to suddenly start mainlining heroin if it were no longer outlawed? I don't think so.
But legalization does get rid of many of the side effects of drug laws. Seagrams' distributors rarely shoot it out with the Johnny Walker guys. We aren't spending billions on imprisoning beer sellers. Alcohol dealers have an incentive not to sell to the underage. And the guy who drives the Budweiser truck isn't flashing his dough around the projects, making beer-selling look like a glamorous role to those with poor prospects.
Ooh, a sarcasm detector. Oh, that's a real useful invention.
From what I understand, a spammer selling, for instance, penis enlargement pills will sell three or four bottles from a spam run of 100 million spams. Let's say he makes $200 and assume it is pure profit (it is).
Let's further assume of the 100 million spams, 10 million made it to the Microsoft Outlook Inboxes of unique users. Let's say that each spam took 5 seconds to delete. If their time is worth $10/hour (assume half the victims are kids students etc, and half are professionals) the spammer cost them $100,000 of their time to make his lousy $200.
This does not take into account higher ISP fees, anti-spam program costs, credit card back charges, loss of business from lost legit emails, and the terabytes of wasted bandwidth for each and every spam run.
Spammers are conscious of this and their continuing to do it is an indication of sociopathic behavior.
i think a much overlooked fact is, that Spam is moving towards organised crime. Currently we have several trends working that way:
I think a lot of people look at Spam as a kind of nuisance. It is more. If the observed trends continue, we'll find Spam sent by those same friendly guys who offer the heroin to your kids. No joke or rethoric intended, i'm plain serious on that one. Take a look at Sobig, the backdoors it opened and what kind of Spam and how fast you got it.
Regards, Martin