Slashdot Mirror


Gates on Spam

pvt_medic writes "Microsoft is proposing a new system that would require people to pay to send e-mails. Postage would be in the form of allowing others to use your computer to make calculations, similar to the SETi@home project. There are other systems being suggested that would include monetary stamps and people could decide on accepting an e-mail based off the value of the stamp. (story has great picture of Bill Gates as well)" Gates' proposed system will be Microsoft patent-encumbered, unsurprisingly.

70 of 608 comments (clear)

  1. Cha ching, reloaded. by monstroyer · · Score: 5, Interesting

    This has been discussed before, and i replied to this before. Allow others to make calculations on your computer, eh? Would those calculations happen to be the spam solution MS Research came up with? Why don't they stick to that solution?! Strap it to SpamAssassin like these guys do but replacing the C/R, it's gold!

    Similar to Seti@Home, sure... Except you pay Microsoft to have the calculations considered.

    Also, what is Gates holding in that picture? A joint? Is that was he's smoking thinking people will accept this idea as part of their daily email lives so that microsoft can make even more barrels of cash?

    1. Re:Cha ching, reloaded. by JUSTONEMORELATTE · · Score: 5, Funny

      Also, what is Gates holding in that picture? A joint?
      Shhh... It's an iPod mini

    2. Re:Cha ching, reloaded. by PedanticSpellingTrol · · Score: 4, Funny
      Looks like a candy bar to me.

      Wonder where he hid the baby?

    3. Re:Cha ching, reloaded. by Lawbeefaroni · · Score: 5, Funny

      He's smoking a wad of cash. If this is implemented, exploits in Windows and outlook that allow viruses to email copies of themselves will be making him money. "Let's um, hold off on that patch for a bit longer, shall we? Muwahahahahaha!!!"

      --
      "When it rains, it pours." --Morton's Salt
    4. Re:Cha ching, reloaded. by helmutjd · · Score: 5, Informative

      If you read the article, it's actually nothing to do with anything like Seti@Home, or any distributed computing application. The computation is simply there to consume time, so that it takes longer to send a message. The mail server knows the answer in advance, and if the client provides the correct answer, the message is relayed... if not, it's denied. That way, spammers HAVE to perform the expensive computation, which significantly slows their mass-mailing efforts. Typical users wouldn't even notice the delay (it could be done in the background or whatever, after the user clicks send). The results of the computation itself are meaningless... so nobody benefits from them, including Microsoft.

    5. Re:Cha ching, reloaded. by Sapwatso · · Score: 5, Insightful

      And how is it going to know the answer in advance?

      Just a guess, but maybe the mail server would know the answer in advance because it used the answer to calculate the question? Couldn't the calculation to generate the question from the answer be orders of magnitude easier than the reverse?

    6. Re:Cha ching, reloaded. by antientropic · · Score: 3, Informative

      You either have two choices -- either the mail server does the same computation, which will either bog the hell out of any high volume mail server

      Of course not. It will be the sort of problem that's easy in one direction and hard in the other - like factorisation. The server would just have to pick two large primes (relatively easy, although probabilistic), send the product to the client, have the client factor the product, and verify that the primes the client sends back are the right ones.

    7. Re:Cha ching, reloaded. by TheFrood · · Score: 4, Informative

      There are all kinds of problems that are much harder to do in one direction than in the other.

      Example: Factor 56,029,043 into primes. You're welcome to use Matlab, octave, xcalc, or whatever.

      Answer: 7 times 19 times 43 times 97 times 101.

      How long did it take you to solve? A lot more time than it took me to come up with the problem, because all I had to do was pick five primes and multiply them together. Obviously, a computer could factor that number trivially, but the concept scales easily to much bigger primes.

      TheFrood

      --
      If you say "I'll probably get modded down for this..." then I will mod you down.
    8. Re:Cha ching, reloaded. by Anonymous Coward · · Score: 4, Informative
      Couldn't the calculation to generate the question from the answer be orders of magnitude easier than the reverse?

      Its public-key crypto in reverse! Generate several big primes and multiply them together. Send the product and ask for the factors.

    9. Re:Cha ching, reloaded. by milkman_matt · · Score: 5, Insightful

      The mail server knows the answer in advance, and if the client provides the correct answer, the message is relayed... if not, it's denied. That way, spammers HAVE to perform the expensive computation, which significantly slows their mass-mailing efforts.

      Ok, I quickly read over the article, so I may have missed something... However I had to respond to this particular point that you make. If this is going to be 'expensive computation which significantly slows [spammers'] mass-mailing efforts', won't it do the same for legitimate mass-mailing efforts as well? Newsletters? Daily mailings? News updates? I can think of several legitimate mass-mailing systems that I myself subscribe to, and I like getting them, if this makes it expensive for mass-mailing, then I may just lose the stuff that I signed up for as well as the stuff that I didn't (spam). I don't think that's necessarily the best approach..

      -matt

    10. Re:Cha ching, reloaded. by ivan256 · · Score: 4, Informative

      You could whitelist those senders so they didn't have to perform the computation.

      Either way, a patent encumbered system is unacceptable, no matter how technologically sound it is.

    11. Re:Cha ching, reloaded. by macdaddy · · Score: 4, Insightful

      And what the hell are we providers supposed to do? We're already having to upgrade our mail system to deal with the unbelievable increase in infected email and spam. Now we're supposed to add computations to each and every message that passes through our boxes? Who the hell is going to pay for that? We're having to "absorb" the costs of the 3 new SMP boxes that will make up our new mail system. We can't afford to do this ever couple of months. That is unless YOU as a customer want to foot the bill. How would you like to pay an extra $10/month for your Internet access? I didn't think you'd like it. And who's going to pay for the inevitable Microsoft licensing fees? We're sure as hell not going to.

    12. Re:Cha ching, reloaded. by glenalec · · Score: 5, Insightful

      > Why would they want to pay for something (either monetarily, through CPU sharing, etc...) that they've gotten essentially for free

      Well, for 94% of them, they'd 'want' whatever Bill Baby had pre-installed on their system when they bought it! If they will put up with and make excuses for a system that allows virus-of-the-week and crash-of-the-day, why not put up with paying for email (especially if free email involves a scary extra software installation). If this thing went live, five years from now most of that 94% would have happily convinced themselves that 'it was always like that.'

      --
      The man with no surname and a silly hat

      On the universe: It's bunk.
    13. Re:Cha ching, reloaded. by Coryoth · · Score: 4, Informative

      Example: Factor 56,029,043 into primes. You're welcome to use Matlab, octave, xcalc, or whatever.

      You need to pick bigger primes:

      $ factor 56029043

      56029043: 7 19 43 97 101

      $


      never underestimate the effectiveness of a little GNU tool like factor - sitting waiting right at your nearest bash prompt (which can be surprisingly close).

      Your point is entirely valid of course, the example is just a little too easy.

      Jedidiah.

  2. Gates/Chong/Pope? by garcia · · Score: 5, Insightful

    story has great picture of Bill Gates as well

    Is he praising Mel Gibson for Passion of Christ? Is he smoking one incredibly fat doober that would make even Tommy Chong jealous? Is he trying to convince the Pope that Longhorn isn't named after a pornstar? Or is he really just THAT great?

    You decide.

    Seriously:

    Instead of paying a penny, the sender would "buy" postage by devoting maybe 10 seconds of computing time to solving a math puzzle. The exercise would merely serve as proof of the sender's good faith.

    And how the fuck would this make a difference? So what? The computer that is supposed to do the work is going to be like Johnny Badass in 2nd grade math class... They are not going to do their homework and just try to bluff it through class. If they do end up having to hand it in to be graded they are just going to get around it some other way. We will end up blocking just as many hosts as before.

    Gates' proposed system will be Microsoft patent-encumbered, unsurprisingly.

    No kidding. Gates came up w/it why would you be surprised he wouldn't want to protect his idea? No conspiracy here... Was the comment necessary?

    Just my worthless .02,

    1. Re:Gates/Chong/Pope? by FreeLinux · · Score: 3, Interesting

      If this scheme (somehow) takes off, it means that FOSS SMTP servers can't implement it (at least in IP-friendly countries). That means Exchange becomes the de facto mail server.

      Hold on a second. In the beginning, MS MAIL and later Exchange didn't use SMTP. Microsoft mail systems were islands in the business world. In order for them to communicate with other mail systems a connector had to be set up between those systems. At the same time everyone else was using Sendmail and anyone could communicate with anyone else. It has only been in the past few years that Exchange became SMTP enabled and is now able to communicate with everyone else like the Unix people had been doing all along.

      So, what's my point? The point is that while Exchange is immensely popular right now it is due to the ease of use and the feature set, not because it is a better system. In fact it wasn't until Microsoft improved Exchange by adding SMTP that so many companies started using it. Today Exchange uses SMTP exclusively, for server to server communication. There are too many, too good, FOSS mail systems out there for MS to implement an expensive scheme, with little hope of success, and have everyone adopt it. Think about it. Most big Exchange users front-end it with Sendmail or Postfix anyway just to keep down the viruses/spam/vulnerabilities/cost.

      It is scary to think of email coming under Microsoft's control but, it just ain't gonna happen. Most people agree that the solution to spam is a rewrite of SMTP. But, those same people acknowledge that it is unlikely to happen because it would require that EVERYONE switch at once and that is just not feasible. Therefore it is equally unfeasible for Microsoft to get EVERYONE to switch at once and at considerable expense to everyone.

      While Bill might wet his bed at night dreaming of everyone using his proprietary email system, it will never be more than a wet dream.

  3. GPL? by Qeygh · · Score: 5, Insightful

    According to the Info World article about Microsoft's Caller ID patents, Microsoft's license "... will encourage all parties involved to allow the Caller ID technology to develop and improve without being hindered by license restrictions or royalty schemes"; and "Microsoft wants to do more than merely give (Caller ID) away, they also want to make sure nobody else can profit from it."

    Seems like a perfect application for the GPL to me. :-)

  4. Dear Bill: by mrpuffypants · · Score: 5, Funny

    No.

    Love, Tom.

  5. Solves the wrong problem. by Dominic_Mazzoni · · Score: 5, Insightful

    Charging for email doesn't discourage spam. It discourages mass email. But there are many legitimate uses of mass email, like discussion lists, automated order confirmation emails, etc. - and increasing the costs of sending this type of mail will hurt open-source developers and small businesses the most.

    It's not surprising that Microsoft doesn't see the problem with this. They can afford to buy a few more mail servers to handle all of microsoft.com's outgoing mail, and they'd love it if people had to buy more servers (each running a copy of Windows, of course) just to handle all of the added computational costs of sending mail.

    In the article, "Goodmail chief executive Richard Gingras said individuals might get to send a limited number for free, while mailing lists and nonprofit organizations might get price breaks." But how do you know who's a nonprofit? Someone with a .org? Yeah, right!

    I believe that SPF currently has the potential to put the biggest dent in spam, since it directly addresses forged email addresses without needing to replace SMTP. It's not a complete solution, but it's a lot more realistic than Microsoft's idea.

  6. Another suggestion from Bill by burgburgburg · · Score: 3, Funny
    Those agreeing to receive the Mark of Microsoft will have dominion over the earth.

    The rest will burn in the Final Conflagration between the Dark Prince's OS and the upstart Penguin!

    Muwahahahahahahahaha!!!!!

  7. where to begin? by tverbeek · · Score: 5, Insightful

    Requiring people to let the sender or some third party execute instructions on the sending machine is so fraught with problems, it's hard to know where to start. Unless this software is Free, you simply can't expect everyone to install on their systems; of course MS wants them to, but hey let's be realistic here: they won't. If it's only available in binary, it would lock out anyone using an unsupported OS (or version thereof). It'd be a new security hole in the sender's machine just begging (with a big neon sign) to be exploited, and would complicate the use of firewalls, especially those using NAT. It'd have a regressive fee structure, because those with expensive, high-powered machines could afford to "spend" more CPU cycles (heck, build a beowulf cluster of discarded 486's to buy more spamming rights), while some poor sod using a Pentium/150 can hardly afford to give up any.

    --
    http://alternatives.rzero.com/
  8. Fine for the rich but... by kneecarrot · · Score: 4, Insightful

    The most explosive growth for Internet usage (including the almighty email, of course) is coming from third world nations. A penny here or there may not affect someone from the first world, but it sure would make a difference in poorer parts of the globe.

    --

    I always save my last mod point to mod up a good troll. You people are too serious.

  9. Stupid by Sentosus · · Score: 5, Interesting

    Email needs to be free....

    Spam as a tool works as per the previous articles. It is a pain just like anything else, but instead of making me pay money to use email, why not spend you high budgets with an educational compaign to stop people from buying spammed products? No money made means no motivation. Problem solved. We voted with our dollars on banner ads and look how that market fell out. Rinse and apply to spam.

    Also, what happens when we are forced to move away from email because we invite Microsoft to take over and control it?

  10. Great picture of Bill?!? by El · · Score: 5, Funny

    The only great picture of Bill Gates that I know of are ones of this incident

    --

    "Freedom means freedom for everybody" -- Dick Cheney

    1. Re:Great picture of Bill?!? by pete-classic · · Score: 5, Funny

      False, there is also this one.

      -Peter

  11. What about large spam networks? by Abcd1234 · · Score: 5, Insightful

    How does this help in the case of spammers creating massive networks of compromised hosts which are then used to send spam in a distributed manner? Such a "pay-with-cycles" technique is useless in this case, since you can still send a *massive* amount of spam with a few million compromised computers, even if each one can only send, say, one email per hour.

    1. Re:What about large spam networks? by mrpuffypants · · Score: 5, Funny

      You forget, though, that Longhorn will make security breaches in Windows a thing of the past. Once that comes out everybody will upgrade (even grandma with her P133 playing Yahoo! Bridge) and then all security problems will just go away.

      whew. I can't wait for that.

  12. Pay with cycles? by JUSTONEMORELATTE · · Score: 5, Insightful

    Aren't most spams sent using hijacked PCs anyway?
    Why wouldn't the spammer be willing to sell cycles on the zombie PCs?

  13. Re:That proposed "stamp" by MCZapf · · Score: 4, Insightful

    I'd rather get spam than pay Microsoft for email (indirectly, it seems, through patent licensing).

  14. Arg. by Yobgod+Ababua · · Score: 3, Insightful

    Wouldn't current methods trivially circumvent this?

    1) Spamhouse uses viruses to own assorted desktops (just like they do now).
    2) Instead of just using those boxes as oen relays (like the do now) they first have them 'pay' this postage.

    1. Re:Arg. by garcia · · Score: 3, Insightful

      worms get onto your computer and make your computer act as a drone to send out spam. So if they were "charging" someone to send emails it wouldn't hurt the spammers only the people the spammers infected.

    2. Re:Arg. by Yobgod+Ababua · · Score: 4, Informative

      This article is a decent brief overview of what I was referring to: http://www.techweb.com/wire/story/TWB20031205S0009

    3. Re:Arg. by silas_moeckel · · Score: 4, Insightful

      There are a few worms running around that make windows boxes into open relays and such making it easy for spammers to avoid IP based blacklists. It would be easy enough to have those same worms do the math for the postage as they are effectivly free to the spammer.

      I think the funny part would be when a spammer gets an EE on the job and comes out with a custom proc to solve said math quickly. Install as a daughter card and your golden. This would be the same aproach they took to cracking DES via brute force years ago and I beleive in under 2 days.

      Either way paying for things computationaly is a loosing battle.
      Paying with real money is a centraly administrated nightmare.

      Now granted spamassassin seems to work just fine. There are a few spams that slip though but not that bad, granted thats a constant battle.

      I would vote for fight forged from addresses first if we can have near certinty that the sender is the sender then spam laws can work.

      --
      No sir I dont like it.
  15. Of course you know... by cmowire · · Score: 4, Insightful

    That charging for email means that *nobody* will be able to run a free mailing list service anymore. Or, alternatively, be just as easy to get around as the current system. Or, even better, have a new set of quirks and possibilities for abuse that would further ruin our email systems.

    The problem is, the main reason why the Internet has worked and CIS, GEnie, ISDN, Teletex, etc. have all fallen by the wayside is because you pay for bandwidth, not services.

    No, the problem is, there's no good way to kick somebody off of the Internet.

  16. I already pay by nurb432 · · Score: 4, Insightful

    I pay for my internet service, I pay for my pc, my taxes ( way too much ), my electrical bill... and my time isn't free.. ( though my software is )

    Why should I have to pay more just because the government refuses to enforce laws that already exist.. Remember the no fax spam laws that pre-date this 'internet thing'? They prohibited sending faxes due to the fact the receiver had to foot the bill for the 'privilege' of getting the spam, due to expenses of paper and ink.

    This doesn't even touch the fact that a large percentage of spam is pornographic, and being sent to minors.. also a crime in this country....

    So fact Bill is in it to profit ( go figure ) has nothing to do with my statement...I f-ing pay enough now.. And im sick of it.

    --
    ---- Booth was a patriot ----
  17. Re:Confirmed. by nooch · · Score: 3, Funny


    Have you ever used MS Windows? Have you ever used MS Windows... on Weed?

    It's great man... there a little paper clip hiding in the corner. What's he doing there? I don't know, man!!! Red team go! Red team go!!!

    --
    Fire in the sky
  18. And finally - Cha ching, Revolutions. by bad+enema · · Score: 5, Funny

    Microsoft makes peace with Spam, tells everyone to learn to live with it and love it.

  19. Dear lord.... by Aqua+OS+X · · Score: 4, Insightful

    Could you imagine the security problems we'd have if Microsoft developed software that forced us to leave machines open to remote connections in order to "pay" for mail.

    I have enough security problems with downloading email and web content onto Windows machines. God only knows what would happen if people could upload shit onto my machine without my approval.

    It's a novel idea. But I wouldn't trust MS to implement it.

    --
    "Things are more moderner than before- bigger, and yet smaller- it's computers-- San Dimas High School football RULES!"
  20. Re:Postage due.... Postage declined by cmowire · · Score: 4, Interesting

    Picture somebody sending you a message in a good natured way and inviting you to respond in kind (A "I found your website interesting. Wana chat?" message)

    You send back a response and attach your 1 penny stamp token.

    Said person sending you an email is really a scamster. They keep the penny. Repeat a bunch of times, you've just made some money.

  21. My system for spam. by Captain+Rotundo · · Score: 5, Interesting

    First off requireing on supposedly time consuming math is absurd. First off it can't be too complex because it would encumber normal users and recievers (who have to check it I suppose) second spammers will develope a cheat sheet (and if Bill doesn't think so he should do a search on the web for "Microsoft Product Activation Code".

    My system is beautiful and simple.

    Everyone use an OpenPGP program (maybe gnuPG) to sign all their email. then recipients can easily check a public keyserver (probably would have to set up more, but ideally each large domain would have one so you can check 'keyserver.microsoft.com' for the key for an adress from microsoft.com) of course you wouldn't need to check a server for someone in your keyring, but I bet through this method anti-spam webs of trust would become very easy to protect.

    This is currently standards complient, so it breaks nothing. And it allows people to decide their level of protection.... you want unsigned mail to get through more power to you. You want to see only verified email fro people YOU know, go for it. you want to accept from any one who has signed that you can get the identity of from a keyserver, sounds great.

    Why don't people do this? it requires nothing more than minimal changes to mail readers, and mild diligence. once it became popular enough its very easy to eliminate all non-trusted mail (although st first you would have to slowoly build it up of course)

    is this that bad of an idea?

    1. Re:My system for spam. by Greyfox · · Score: 3, Interesting
      There are a few problems with it, but it's workable.

      1) Still requires me to get the entire E-Mail before deciding to keep it or not, but until E-Mail is taking up a non-fractional percentage of my bandwidth, that's not a problem for me (It is for the Internet as a whole, though.)

      2) Requires you to do some processing to insure that the entire message is signed. Otherwise a spammer could seek out a legitmate message from your mom and copy it into the bottom if his spam. If you just look for the PGP signature headers and don't notice that 90% of the message isn't signed, you'll still accept the E-Mail.

      3) Spammer could generate a throw-away key and register it with a keyserver. Though if you require all incoming E-mail to be encrypted to your key, that'd solve that problem.

      4) Mailers would have to support that, and most of them hardly even support PGP, largely thanks to those pesky export regulations of a while back. Apparently even implementing a "Crypto enabling API" was illegal. I don't know the current status of those things.

      5) Still doesn't solve the problem of hacked machines out there, not that there's a good way around that one no matter what solution you use.

      --

      I'm trying to teach myself to set people on fire with my mind... Is it hot in here?

    2. Re:My system for spam. by Greyfox · · Score: 3, Interesting
      Sure but it's be a severe impact on the speed with which they'd be able to send out messages. No more just blasting a message out to a list of a couple of million people. And you could add some checks on your keyserver systems too -- if the same IP or subnet connects for more than, say, 1000 keys in an hour, simply refuse to reply to that address for 24 hours. It'd be a pretty big computational task to compute the encrypted message for a couple of million people, as well.

      You'd probably want to change your key every couple of months to avoid having your keys sold on CD and such, but I expect it would be pretty effective, especially in the short term, since the spammers will go for the low hanging fruit first.

      --

      I'm trying to teach myself to set people on fire with my mind... Is it hot in here?

  22. Dear Tom: by Anonymous Coward · · Score: 4, Funny

    Please remit one fully factorized 2048 bit random number.

    Love, Bill.

  23. Email postage will get abused by spammers by DocSnyder · · Score: 5, Insightful
    As soon as email costs money, the spammers will be the last ones to pay for their crap. Even worse, the whole system begs to get abused.

    • Phishing for credit cards, email accounts and passwords is very common.
    • Most spam is being relayed through trojaned Wind0ze boxes, whose owners would have to pay the postage.
    • Email would become a "premium rate service" similar to expensive SMS or phone numbers, with the recipient getting a small (or maybe bigger) amount of money for each received email. It won't take too long for spammers to make wormed Wind0ze boxes send them zillions of emails and lining up their pockets.
  24. Root certificates? by msimm · · Score: 4, Interesting
    Why not use a system based on something like root certificates, which:
    A) Cost money (hopefully not break the bank).
    B) Are revokable (with a review process funded by registrations?).
    C) Can be used to validate the authenticity of the source (PGP style domain/user authentication should be seamlessly built into ANY new RFC).
    I know I'm not the first person to suggest this, but if white/grey/black listing or filtering (which I hate) isn't enough why use a per email fee instead of just validating the from field and revoking servers that allow spam.

    I bet if we did this it wouldn't be long before almost everybody signed up with a registered email service (or purchased their own certificates) only leaving illegitimate senders in the cold. Forged headers *should* be a thing of the past, we have the technology.

    Anyhow, I fear at this point its going to be decided by the first large system that comes to market. Which looks like MS is really pushing to be.
    --
    Quack, quack.
  25. Comment removed by account_deleted · · Score: 5, Informative

    Comment removed based on user account deletion

  26. NP = New Postage? by jfengel · · Score: 5, Interesting

    The famous thing about the NP-complete problems is that they're hard to solve, but easy to check. That's presumably what's going on here. You can parcel out a rather large traveling salesman problem. But it doesn't take me 10 seconds to check it; it takes me far less than one second, even if I didn't know the answer beforehand.

    I think that's kind of neat, actually.

    So Johnny Badass can't bluff his way through; his work will be checked.

    There are many other problems with this technique (a problem that takes 10 seconds on a 4 GHZ Pentium takes several minutes on a still-useful P133; non-upgraded computers get treated like criminals; patent terms could suddenly turn onerous) but the idea that a computer could bluff it out isn't one of them.

  27. Email Postage also creates new problems by dsci · · Score: 5, Insightful

    I own a business and we get something like a fair amount of sales leads via email.

    I wonder how many people would not bother contacting us to inquire about services if they had to pay for the priviledge?

    Also, I exchange A LOT of emails with existing clients...working off-site makes email the prefered mechanism of communication. I already pay for Internet Access (which currently includes access to routes between mail servers); I'd sure hate to have to pay for using a particular service on the Internet that is now free.

    IMO, Spam is best fought at the source. Filters like SA are great for the user end, but the demand on the wires is still there (the recipient server has to GET the spam for it to be dropped). Go after the spammers themselves. Hard. With both barrels.

    (1) Make it financially unattractive to spam. This can be either by fines or by MORE user education to NOT RESPOND to the dang things.

    (2) Go after them criminally. They put an arguably unethical demand on everyone's Internet; who knows how many hardware failures are accelerated by the traffic due to spam (disks, NIC's etc). I liken spammers to someone who blows up, or at least physically blocks, a bridge on a public highway.

    --
    Computational Chemistry products and services.
  28. Re:Spam solution by psbrogna · · Score: 3, Funny

    Should we remove all services likely to be abused from the operating systems? Or should we just not allow people to setup their own operating systems? Maybe we shouldn't allow people access to compilers. Alot of bad things are done with compilers.

  29. How do they plan on enforcing this? by Androclese · · Score: 3, Interesting

    ...for people running Sendmail and a *nix compatable email client, how do "they" plan on enforcing the cost of the stamps?

    What is to stop me from having a mail server off US shores to provide my clients with cost-free email access? What is to stop spammers from setting up their own mail servers and forging the stamps? They certainly don't play by the rules right now!

    Do they plan on forcing everyone to upgrade their mail clients and server software?

    My biggest question, Who are "they". Are "They" the ones who will collect the money for these stamps? Is it M$? The ISP? The Government? Since a transaction is taking place, will there be a tax on the email? (you know the IRS will want their cut).

    I run a mail server on a colo for myself and give space/access to my friends for free. Do I now have to charge them? Do I have to pay taxes on that?

    Yes, this is a lot of questions, but they a) don't see have been asked yet, and b) don't have answers that I know of.

    I am not for spam but I'll be damned if I will start paying for my email as a theory to stop spam when we all know damn well that it won't stop them.

  30. Mailing lists by AaronW · · Score: 5, Interesting

    I can't see how this could work. Any spam-prevention measure must also have some provision to deal with legitimate mailing lists. Some mailing lists can be quite busy and have thousands of members.

    Also, Gate's method has a lot of flaws, security being only one of them. For example, how will you deal with all the various different operating systems and embedded hardware that send email? For example, my Netgear firewall box periodically sends me emails of logs or alerts.

    Also, you can't easily change the way email is done because its use is so widespread.

    Making it computationally based has a number of major flaws.

    1. How do you deal with the wide range of computer performance? For example, my mail server is a Pentium II, which is more than adequate for my needs, or my firewall, which is a 50MHz StrongARM processor?

    2. How would you allow others to use your computer to make computations? This opens up some serious security considerations, not to mention the fact that there's a wide range of processors and operating systems that would need to be supported. I won't run Seti@Home because the last time I ran it it crashed my mail server after over 200 days of uptime. I don't know what it was about Seti, but it would always immediately crash my server.

    3. You would need to make everyone agree to do this. The Internet is international.

    A better way would be to strongly encourage ISPs to block spammers and give them the tools to go after them. An ISP should be able to charge the hell out of a spammer on their network and encouraged to do so.

    Why not give the backbones the power to cut off major spam sources and provide financial incentives to do so?

    There's lots of other methods that could be used. If you make life completely miserable for spammers, they'll stop. If there's no profit, they'll stop.

    If our stupid congress critters would do something right for a change, like California's anti-spam law that was blocked by the Washington idiots, then we'd have a lot more power to go after the spammers.

    --
    This post is encrypted twice with ROT-13. Documenting or attempting to crack this encryption is illegal.
  31. The net needs to, and will be, free. by JeffHunt · · Score: 3, Insightful

    If sending regular email via the existing methods becomes a pay-for-play service, then it's only a matter of time before an entirely new email protocol surfaces that allows participants to send mail for free.

    I suppose you could say it'd be "voting with your dollar" to shut down any efforts to control the Internet in such a manner.

    --

    "It was hell!" recalls former child.

  32. Re:Dear Tom: by Stile+65 · · Score: 4, Funny

    Dear Bill,

    The factors of 0x000000000000000000000000000000000000000000000000 00000000000000000000000000000000000000000000000000 00000000000000000000000000000000000000000000000000 00000000000000000000000000000000000000000000000000 00000000000000000000000000000000000000000000000000 00000002 are 1 and 2. I promise this number is completely random.

    Love,

    Alex

    --
    I claim first use of "Error No. 0B" - or "No. 0B error." It'll be the new ID 10T!
  33. leave it be by Anonymous Coward · · Score: 4, Insightful

    Articles like these really make me sad.

    When the Internet exploded and the joe masses came flooding in there were many rapid changes witnessed. Many of these changes were tremendously wonderful, and many weren't.

    Over the years we saw the tug of war between those who think that the net is evil and must be controlled, and those who are intelligent enough to govern themselves and contribute to the common good.

    There were many different attacks on our freedom, and usually we prevailed because it was obvious that proposed restrictions would damage our precious medium. But lately the anti-spam efforts begin to scare me.

    I'm scared because most people hate spam. So even people who are normally freedom-fighters give a moment of pause to think, "Well, I really do hate spam, maybe I should consider this."

    The answer to problems that arise within the net are never ones that limit and merely mimic our failing systems elsewhere.

    I too was pulling out my hair over the explosion of advertising. I realized that it was collecting in my memories, permanently, like toxic waste being spewed at my senses.

    For the most part however I have returned to serenity. I use Mozilla Firefox with the Adblock plugin, this takes care of all banners/popups. I also finally just installed spamassasin on my mail server and the hundreds of junk mailings that normally made my veins bulge are now routed behind closed doors to a junk folder.

    To top it off I threw away my television. I can still enjoy the simpsons, but now it is commercial free. Caller I.D. protects me from unwanted calls. Simply lift the phone for a split second and slam it back down. And I do most of my business through the net so I can safely ignore snail mail.

    The solution is already here. It is education, technology, and intellect.

    [Paul Anka]
    To stop those monsters 1-2-3
    Here's a fresh new way that's trouble free
    It's got Paul Anka's guarantee...
    [Lisa]
    Guarantee void in Tennessee!
    [All]
    Just don't look!
    Just don't look!
    Just don't look!
    Just don't look!

  34. Re:Root certificates? Unfortunately not quite. by jifl · · Score: 3, Interesting

    "Why not use a system based on something like root certificates?"

    Here's why not: Because hackers and worm authors will still have control of a vast network of computers, that will not only generate spam signed by the poor victim, but will also lead to that victim's e-mail access being revoked.

    Relying on a review process would be too difficult - each new virus/worm could result in, say, a million affected machines, which means potentially a million reviews suddenly needing to be made.

  35. I don't get it by Coward+Anonymous · · Score: 4, Interesting

    Most spam originates from spoofed email addresses. Those emails that don't come from spoofed email addresses can be sued into oblivion.
    So it is a simple matter of finding the spoofed email addresses.
    This is how an email server would check inbound email:
    1. receive email
    2. lookup domain of sender. If does not resolve, discard.
    3. lookup "domain email authority" of domain, say "authorize.yahoo.com" for senders originating at yahoo.com. No authority, discard.
    4. ask authority it if the user is known and what IP address it would be sending email from.
    5. Is user known and does "authorized" IP address match IP address of sender? If not, discard.

    This mechanism would also make it easy to circumvent non-spoofed email addresses since the spammers would need to support the extra authorization queries. It would also force them to centralize their efforts making them an easy target for elimination.

    The result: No spam, no Microsoft tax. Nothing. Only a little bit of overhead on DNS and email servers which could be eased with a little bit of caching.

    Why wouldn't this work? Is there a problem with this?

  36. Microsoft already did this about 5 years ago by agusus · · Score: 4, Funny

    "Instead of paying a penny, the sender would "buy" postage by devoting maybe 10 seconds of computing time to solving a math puzzle."


    wait, this was already done! Last time I used Outlook to send an email, my computer churned for 10 seconds and then said "Illegal exception."

    I guess this "math puzzle" [oh, so *that's* what they're calling it now] was too hard for Outlook.

  37. Use an NP-hard problem by lysander · · Score: 3, Informative
    Coming up with a problem is the least of our worries, just pick a problem that's NP-complete or at least NP-hard. Let's pick an example problem you've heard of: factoring is believed to be NP-hard, and would work fine for this purpose.

    The mail server comes up with two random primes, large but not "cryptographically large", sends their product, and waits for the factorization. The mail server could even precompute what random primes it will be using for future questions, or offload that task to another server if it is too busy.

    --
    GET YOUR WEAPONS READY! --DR.LIGHT
    1. Re:Use an NP-hard problem by Oroborus · · Score: 4, Insightful

      The problem is that algorithms to solve NP-complete problems are usually scale fairly linearly with processing power. In fact, if you're suggesting NP-Complete problems (rather than NP-Hard) then they definitely scale with processing power, so a computer which is twice as fast will take half as long to compute the result (more or less).

      So two computers which are 10 years apart in age will be impossible to challenge equally. And even more disturbingly, specialized computers (think Deep Blue, or even a re-purposed graphics card) could be fairly easily constructed to demolish any NP-Complete problem.

      The interesting thing about Microsoft's implementation here is that I believe they're using a challenge which is gated on something processor speed doesn't help with much. I'd trust MSR to have done this well. (Say what you will about the corporation, but MSR is top-notch).

      I heard it had something to do with bus speeds, but I'd ask someone whose job security doesn't rely on not being tainted by reading others' patent applications. ;)

    2. Re:Use an NP-hard problem by Jason1729 · · Score: 3, Informative

      This is a positive point from Microsoft's point of view. Your 10 year old computer is now completely useless for sending email, so you must now buy a brand new computer, complete with a new Windows license (you don't think they'll let you use linux to run their protocol, do you? :) )

      Jason
      ProfQuotes

    3. Re:Use an NP-hard problem by SDPlaya · · Score: 3, Informative
      The NP complete statement is simply wrong. There are NO computers in existence (except quantum and DNA computers) that can efficiently compute NP-Complete problems (at least that we know of, since NP != P is still open). What this means is that for any sized computer (even one bigger and faster than Deep Blue), it's easy to construct an NP-Complete that is tough to solve, but easy to verify. That's pretty much complexity 101.

      Your point about scalability is odd. It's correct, but meaningless. There are no class of problems that you can't compute faster when the computer is faster. But saying a computer is faster is a vague statement since computers almost never uniformly get faster. CPUs get faster (even then there are tradeoffs with things like pipeline depth), memory gets faster, buses get faster, disks get faster, etc... The reason why problem scalability is an issue is because usually there is a bottleneck along one of the resources.

      Now it is true that computers which are 10 years apart in age will have a different level of compute available. I imagine the amount of time it would take to construct the solution would be on the order of 1/10 second for a fast computer, and say 1-2 seconds for an old 486 (estimates). Sure not great for the 486, but how fast are you sending email with the 486? The point is that now the spammer who sends a million emails now must wait 1000000/10 seconds.

  38. Beyond that... by jaysones · · Score: 4, Insightful

    98% of people will read this as: "So the richest man in the world wants me to pay for something I have always done for free?"

    I predict his personal backing can only hurt this effort.

    1. Re:Beyond that... by dslbrian · · Score: 5, Insightful

      98% of people will read this as: "So the richest man in the world wants me to pay for something I have always done for free?"

      I agree, this thing is dead before it ever gets out the conceptual door. Narrow-minded people look at it and think its rational, after all they think "it won't cost me much" ... but the whole concept of paying anything for email just destroys legitimate things such as mailing lists (think about kernel mailing lists, hobbiest lists, etc). It will never work across international boundaries, and if ever implemented people will simply revert to using the older free techniques. People are always looking for free or less costly methods of communication (such as VOIP), attaching a charge onto something that is free now is just stupid.

      And I shudder to think of what might happen if politicians get a hold of a concept like this - "whoa, people paying money, and we are not getting our fair share of tax?!?"

      I wish people would simply drop the paying for email concept. Bulk mail (bulk advertising) is not free, yet I still get way more of it stuffed into my physical mailbox than legitimate letters. Making it cost WILL NOT make it go away.

  39. Not acceptable. by brain1 · · Score: 5, Insightful

    No I am not going to pay to send e-mail. Sorry, but Bill's proposal is not acceptable.

    It is one thing to donate idle CPU time to something charitable and worthwhile, like SETI, if you wish to do so. But to allow a private corporation to freely enjoy things that cost me considerable money for, like a full time DSL connection, and the electricity to operate a PC with a 450 watt power supply 24/7, makes no sense. To require me to submit to this just so I can send e-mail is nonsense.

    Other questions come to mind. If this proposed system is burdened with Microsoft patents, then exactly how will open-source or third-pary e-mail clients and servers be licensed with the Microsoft IP. Exactly what is that going to cost?

  40. I swear i've seen this before..... by Boinger69 · · Score: 3, Interesting

    Dear Internet Subscriber: Please read the following carefully if you
    intend to stay online and continue using e-mail: The last few months
    have revealed an alarming trend in the Government of the United States
    attempting to quietly push through legislation that will affect your use
    of the Internet. Under proposed legislation (Bill 602P) the U.S. Postal
    service will be attempting to bilk email users out of "alternative
    postage fees". Bill 602P will permit the Federal Govt. to charge 5 cents
    surcharge on every email delivered, by billing Internet Service
    Providers at source. The consumer would then be billed inturn by the
    ISP. Washington D.C. lawyer Richard Stepp is working without pay to
    prevent this legislation from becoming law. The U.S. Postal Service is
    claiming that lost revenue due to the proliferation of email is costing
    nearly $230,000,000 in revenue per year. You may have noticed the recent
    ad campaign "There is nothing like a letter". Since the average citizen
    received about 10 pieces of email per day in 1998, the cost to the
    typical individual would be an additional 50 cents per day, or over $180
    per year, above and beyond their regular Internet costs. Note that this
    would be money paid directly to the U.S. Postal Service for a service
    they do not even provide. The whole point of the Internet is democracy
    and non-inerference. If the Federal Govt. is permitted to tamper with
    our liberties by adding a surcharge to e-mail, who knows where it will
    end. You are already paying an exorbitant price for snail mail because
    of bureaucratic inefficiency. It currently takes up to 6 days for a
    letter to be delivered from New York to Buffalo. If the U.S. Postal
    Service is allowed to tinker with email, it will mark the end of the
    'free' Internet in the United States. One congressman, Tony Schnell (R)
    has even suggested a "twenty to forty dollar per month surcharge on all
    Internet service" above and beyond the government's proposed email
    charges. Note that most of the major newspapers have ignored the story,
    the only exception being the Washingtonian which called the idea of
    email surcharge "a useful concept whose time has come" (March 6th 1999
    Editorial) Don't sit by and watch your freedoms erode away! Send this
    email to all Americans on your list and tell your friends and relatives
    to write their congressman and say "No!" to Bill 602P Kate Turner
    assistant to Richard Stepp Berger, Stepp and Gorman Attorneys at Law 216
    Concorde Street, Vienna, VA.
    ********

    Spam/Chain Mail predicting the future? Whaaa.

  41. backward compatibility [Re:I don't get it] by clarkie.mg · · Score: 3, Insightful

    There are a lot of "simple" solutions against spam like the one you describe. The problem with the server solutions - where the servers of the sender and receiver make some kind of negotiation to decide if the email is legit. - is that it only works if every server on the net is upgraded and that will never happen.

    For example, let's say you receive an email from babar@domain.ii (imaginary tld). With your scheme, your server asks authorize.domain.il but domain.il hasn't upgraded and still use old simple email server. Email is discarded. That means no user from domain.ii can send you email.

    bzzzt the internet is broken.

    --
    Men are born ignorant, not stupid; they are made stupid by education. Bertrand Russel
  42. Microsoft gets all your work for free by ministeroforder · · Score: 3, Informative

    Check out the fine print. "Microsoft and its Affiliates hereby grant you ("Licensee") a fully paid, royalty-free, non-exclusive, worldwide license under Microsoft's Necessary Claims to make, use, sell, offer to sell, import, and otherwise distribute Licensed Implementations, provided, Licensee, on behalf of itself and its Affiliates, hereby grants Microsoft and all other Specification Licensees, a reciprocal fully paid, royalty-free, non-exclusive, worldwide, nontransferable, nonsublicenseable, license under Necessary Claims of Licensee to make, use, sell, offer to sell, import, and otherwise distribute Licensed Implementations." basically whatever code you write, you must give to microsoft for free. Good deal eh?

  43. I smell money by oldgeezer1954 · · Score: 3, Insightful

    For the sake of argument let's assume Gate's has perfect vision and the world is going to cooperate, perhaps with some nudging, and it gets implemented and is effective.

    Well there are all sorts of existing technology that could limit spam rates, stop client boxes from using unauthorized services, or unapproved domains, send auth... I'm not suggesting any of those things are or are not appropriate. Just that they do indeed exist and what's lacking is the will and cooperation. And without that his approach will not make things better. There are much easier ways to extend existing standards where that is needed.

    It may slow the rate of growth but it won't stop the flood.

    What it will generate though is more impetus to force older technology users to upgrade. And most likely servers will need to be upgraded as well. The cost will be insignificant to the spam kings who profit. Not even a bump really.

    Of course we could ensure some sort of reliable client identification process is built it... Ooops that's a good benefit to DRM as well! What luck! And stopping spam is a good sales pitch.

    Nah I haven't argued all the points. There are some good ideas out there as to how to stop spam in general.

    But Gate's approach is let's all spend more money on more technology even though the gesture in the long run will be futile. Just because we can't cooperate on these things today doesn't mean we won't if we all spend more money on it (true but not plausible).

    And with proper design we can eliminate this pesky free email too. Does he really think I'd ever pay for hotmail?

  44. Attention Bill Gates by npsimons · · Score: 4, Funny

    You advocate a

    (X) technical ( ) legislative (X) market-based ( ) vigilante

    approach to fighting spam. Your idea will not work. Here is why it won't work. (One or more of the following may apply to your particular idea, and it may have other flaws which used to vary from state to state before a bad federal law was passed.)

    ( ) Spammers can easily use it to harvest email addresses
    (X) Mailing lists and other legitimate email uses would be affected
    (X) No one will be able to find the guy or collect the money
    (X) It is defenseless against brute force attacks
    (X) It will stop spam for two weeks and then we'll be stuck with it
    (X) Users of email will not put up with it
    ( ) Microsoft will not put up with it
    ( ) The police will not put up with it
    (X) Requires too much cooperation from spammers
    (X) Requires immediate total cooperation from everybody at once
    (X) Many email users cannot afford to lose business or alienate potential employers
    ( ) Spammers don't care about invalid addresses in their lists
    ( ) Anyone could anonymously destroy anyone else's career or business

    Specifically, your plan fails to account for

    ( ) Laws expressly prohibiting it
    (X) Lack of centrally controlling authority for email
    (X) Open relays in foreign countries
    ( ) Ease of searching tiny alphanumeric address space of all email addresses
    (X) Asshats
    ( ) Jurisdictional problems
    (X) Unpopularity of weird new taxes
    (X) Public reluctance to accept weird new forms of money
    (X) Huge existing software investment in SMTP
    (X) Susceptibility of protocols other than SMTP to attack
    (X) Willingness of users to install OS patches received by email
    (X) Armies of worm riddled broadband-connected Windows boxes
    (X) Eternal arms race involved in all filtering approaches
    (X) Extreme profitability of spam
    (X) Joe jobs and/or identity theft
    ( ) Technically illiterate politicians
    (X) Extreme stupidity on the part of people who do business with spammers
    (X) Dishonesty on the part of spammers themselves
    ( ) Bandwidth costs that are unaffected by client filtering
    ( ) Outlook

    and the following philosophical objections may also apply:

    (X) Ideas similar to yours are easy to come up with, yet none have ever
    been shown practical
    ( ) Any scheme based on opt-out is unacceptable
    ( ) SMTP headers should not be the subject of legislation
    ( ) Blacklists suck
    ( ) Whitelists suck
    ( ) We should be able to talk about Viagra without being censored
    ( ) Countermeasures should not involve wire fraud or credit card fraud
    ( ) Countermeasures should not involve sabotage of public networks
    (X) Countermeasures must work if phased in gradually
    (X) Sending email should be free
    (X) Why should we have to trust you and your servers?
    (X) Incompatiblity with open source or open source licenses
    (X) Feel-good measures do nothing to solve the problem
    ( ) Temporary/one-time email addresses are cumbersome
    ( ) I don't want the government reading my email
    ( ) Killing them that way is not slow and painful enough

    Furthermore, this is what I think about you:

    (X) Sorry dude, but I don't think it would work.
    (X) This is a stupid idea, and you're a stupid person for suggesting it.
    (X) Nice try, assh0le! I'm going to find out where you live and burn your
    house down!

  45. Using computation won't work by AaronW · · Score: 4, Insightful

    The problem with requiring computation cycles is that you need to deal with a lot of older computers. I have friends with old Pentium-based computers, some of whom cannot afford a nice new P4 system.

    Also, what happens to all these web-based email accounts like Yahoo or Microsoft's Hotmail? I guess they'll need to spend a lot of money adding processing power for their users to send email.

    What's to stop someone from making hardware to do the processing? It shouldn't be too difficult to implement an FPGA or an ASIC that could do the processing much faster. I imagine it wouldn't take too long for PCI boards to come out to offload the processing for large mail servers, then spammers with money could just buy the board to offload the processing.

    -Aaron

    --
    This post is encrypted twice with ROT-13. Documenting or attempting to crack this encryption is illegal.