Slashdot Mirror


Spam Bits

Let's mush a few things together into a nice pink rectangular solid: ipandithurts writes "The FTC Chair Timothy Muris doubts the ability of the "CAN SPAM" law to stop SPAM." ElementCDN writes "The Ottawa Citizen has a story on Bernard Balan the King of Spam. Bernard has closed up shop and moved to cottage country near Huntsville, Ontario." CactusMan writes "CTV (among others) is reporting that a Ontario trio has been named in a suit filed by Yahoo under the new CAN-SPAM legislation. Yahoo is claiming that the father and two sons were 'responsible for sending millions of unsolicited messages to users of the company's e-mail service.'" ilsa writes "According to this AP article, as much as 19% of e-mail sent by commercial entities never reaches its destination. 'Promotions and greeting cards were the types of messages most likely to disappear, the study found.' Although this study may have been intended to be alarming, forgive me for thinking this may not be a bad thing." Reader chrisbtoo responds to an earlier spam story: "In today's story about Spam solutions, monstroyer challenged people to crack the Spam Interceptor Captcha. Turns out it was pretty easy." Finally, we can't fail to mention an attempt at making the world's largest spam musubi.

239 comments

  1. the world's largest spam musubi

    Did anyone else read that as "the world's largest spam mueslix"?

    Mmm... nothing like the taste of mechanically separated meat product in your breakfast cereal.

    --
    Dragging people kicking and screaming into reality since 1996.
    1. Re:Heh by Anonymous Coward · · Score: 0

      nope. I read it as "the world's largest spam musubi."

    2. Re:Heh by Anonymous Coward · · Score: 0
      i thought we (that's teh /. readers, collectively) decided that "Did anyone else read that as ..." jokes are not funny.

      (unless of course, they are funny)

    3. Re:Heh by Burgundy+Advocate · · Score: 1

      You're cute. Can I touch your fuzzy spot?

      --
      Dragging people kicking and screaming into reality since 1996.
    4. Re:Heh by Anonymous Coward · · Score: 0

      no

  2. spam musubi by Anonymous Coward · · Score: 1, Insightful

    "nearly 800 cups of rice, more than 1,300 slices of the canned lunchmeat and almost 600 feet of seaweed wrap" anyone else feel a little sick after reading that ? ;p

    1. Re:spam musubi by jedi_gras · · Score: 1

      I love hawaii.. I made some spam musubi for my work buddies up here on the east coast... half loved it, the other half wouldn't even touch it.

      Try to keep an open mind and think of something happy when you eat it :) ...but you're right... 1300 slices of spam is pretty darn big.

    2. Re:spam musubi by Anonymous Coward · · Score: 0

      I flew through Hono a number of times last year while contracting on Johnston Island. I'd heard of Spam Musubi from some friends on JI but having actually TASTED spam before, I could not bring myself to to eat any of the Spam-sushi (or Spooshi as I called it then).

  3. 19% of commercial email? At least! by neiffer · · Score: 4, Informative

    I run a small publishing firm that relies on email to sent updates to our materials. Every email we send to customers has at least 10% bounce (sometimes as high as 30%); many of which worked a week before or a week after. However, I think the 19% number mimics my personal mail as well: messages allll the time get lost in the shuffle!!

  4. Wow, they requested this? by Faust7 · · Score: 4, Insightful

    e-mail recipients risk losing newsletters and promotions they've requested.

    Who with an ounce of sense would request any sort of e-mail promotion, given the tendency those things have to multiply of those accord? Don't answer that.

    1. Re:Wow, they requested this? by WormholeFiend · · Score: 1

      have you not noticed the size of the fonts and boxes you have to check off (which are checked by default, for your convenience), to prevent a subscriber website from sending you updates and promotions and whathaveyou?

    2. Re:Wow, they requested this? by IO+ERROR · · Score: 4, Insightful

      The truth is, SOMEBODY is buying penis enlargers and breast kits, otherwise nobody would bother sending out such spam in the first place.

      --
      How am I supposed to fit a pithy, relevant quote into 120 characters?
    3. Re:Wow, they requested this? by squiggleslash · · Score: 5, Informative
      Set up an email address for each entity you do business with, and this becomes possible and easy to control. There are some entities I do like to receive newsletters etc from on a regular basis, simply because I buy enough from them for it to matter and they've put a lot of work into making them relevent - Amazon.com is one that springs to mind. People I know subscribe to things like newsletters from airlines that highlight specials, as another example.

      You know, if ISPs made it easier to implement this particular solution, rather than requiring we run our own email servers to do it (or even doing what they can to prevent us from running our own incoming email servers - many ISPs block *incoming* port 25) the spam nuisance would end overnight. Businesses would stop selling email addresses because they know that their ability to contact you stops the moment they do, and people wouldn't buy them because they'd know the email addresses are blocked immediately on receiving the first spam.

      I note Yahoo! is implementing such a scheme. More power to 'em!

      --
      You are not alone. This is not normal. None of this is normal.
    4. Re:Wow, they requested this? by Anonymous Coward · · Score: 1, Insightful

      Who with an ounce of sense would request any sort of e-mail promotion, given the tendency those things have to multiply of those accord?

      Precisely! But you'd be surprised (no, probably not) at just how many people do subscribe to "promotional offers" mailing lists. From their work email address. So they're wasting their employers' time and resources by doing this.

    5. Re:Wow, they requested this? by Ranger96 · · Score: 1

      Now, I know Everyone's Internet is now 'evil' because they caved in to SCO, but their ISP service does allow you to have as many POP3 email accounts as you want. I've used this in exactly the way you described - separate accounts for commercial purposes, along with my personal correspondence account that I only give to family and friends.

      Ranger96

      --
      What has been will be again, what has been done will be done again; there is nothing new under the sun.-Ecclesiastes 1:9
    6. Re:Wow, they requested this? by schon · · Score: 4, Funny

      SOMEBODY is buying penis enlargers and breast kits, otherwise nobody would bother sending out such spam in the first place.

      OB Simpsons quote:

      "That's specious reasoning, dad. That's like saying that this rock keeps tigers away."

      "Really? How does it work?"

      "It doesn't! It's just a rock! But you don't see any tigers around do you?"

      -----
      Even if nobody buys it, spam will still exist, because spammers think exactly like you do..

    7. Re:Wow, they requested this? by Phroggy · · Score: 4, Informative

      Who with an ounce of sense would request any sort of e-mail promotion, given the tendency those things have to multiply of those accord? Don't answer that.

      Each time I sign up for something with a particular company or organization, I create a new e-mail address at my domain, and give them that. That way, if I start receiving spam at that address, I know who sold my address.

      What I've found over the few years I've been doing this surprised me a little. The results: legitimate companies do not sell my e-mail address. Never. None of them. There have been times when an e-mail address has gotten listed on a web page in cleartext (e.g. on an eBay auction page) and those get spam because spammers harvest addresses (I believe eBay has stoopped listing e-mail addresses for this reason). The address I actually use as my return address when sending mail to friends gets spam all the time. Once an address is harvested from somewhere, I'm sure it gets sold on CD-ROM or whatever. But the addresses I create for companies and organizations to use (I've got about a hundred of them) simply do not get spam.

      --
      $x='S24;r)>63/* h@<5+oZ)32"5cz';$me='phroggy'x$];
      $x=~y+ -xz+\0-Tx+;print$_^chop$me for split'',$x;
    8. Re:Wow, they requested this? by tanguyr · · Score: 2, Insightful

      True, and it only takes one or two people purchasing the product to pay for a spam mailing of a million mails. Spam exists because it is cost effective. Spam will go away when it is no longer cost effective.

      --
      #!/usr/bin/english
    9. Re:Wow, they requested this? by IO+ERROR · · Score: 2, Insightful
      Even if nobody buys it, spam will still exist, because spammers think exactly like you do..

      Believe it or not, it DOES cost some small amount of money to send spam. Or promotional email. Or marketing communications. Or whatever you want to call it. The amount may be negligible, but nobody's going to spend money for zero return. The truth is, some people DO respond to spam, in sufficient numbers to make it profitable for the spammers. If they didn't, there would be no reason to send spam.

      --
      How am I supposed to fit a pithy, relevant quote into 120 characters?
    10. Re:Wow, they requested this? by jkabbe · · Score: 1

      I thought they were sending those notes to harvest emails. At least thats what the guys on The Screensavers said. Leo wouldn't lie, would he??

    11. Re:Wow, they requested this? by tanguyr · · Score: 1

      Even if nobody buys it, spam will still exist, because spammers think exactly like you do..

      it's not a question of spammers thinking exactly that way, it's just reality: in a given population of of hundreds of thousands or millions of recepients, there will *always* be a couple of idiots who buy the product. Stupid people are a fact of life.

      --
      #!/usr/bin/english
    12. Re:Wow, they requested this? by pla · · Score: 3, Insightful

      Who with an ounce of sense would request any sort of e-mail promotion, given the tendency those things have to multiply of those accord? Don't answer that.

      I've answered you not because I disagree, but to add a bit to your point.

      You have pointed out what I consider a major flaw in most companies' marketing strategy; namely, assuming I want to know about product updates.

      When I want a new product, I search for it on the web. I read a number of independant reviews to find the "best" product to meet my needs, then I use a few price search engines to find the best price on that product, then I buy it from the cheapest place that doesn't have half its users complaining about their service.

      So, now, marketing gurus, take note of that process. Notice where mass mailings from your company fit in? Bingo, they do not. Not even a little. In fact, if I find your mass mailings just a tad too spam-like (or if I EVER notice you've sold my address, which I can tell since I use disposeable email addresses), you can guarantee that I will never buy from you again, even if you do have the best price, and will also warn anyone that asks my advice (which for the typical geek means "almost everyone they know") to avoid you as well.

      So, my suggestions...

      1) Stop bothering us with mail, immediately. You waste your time, our time, bandwidth, and may well incur our "squirrely wrath".

      2) List yourself on every price search engine you can find. At the very least, list yourself in Pricegrabber, NexTag, and shopper.com. And If you sell PC hardware and don't list through Pricewatch, consider yourself as good as nonexistant to me. Seriously, if any marketing folks read this and only remember one point, re-read this one. List with price search sites, or vanish.

      3) Don't piss off your customers. If you list a product at a given price, you'd better actually have it, and have it for the listed price (or better, I won't fault any company for that). If you make me wait an obscenely long time to get it, I will cancel my order after the third day it doesn't ship. If you give me the runaround because I don't want your crappy accessories and extended warranties, not only will I cancel my order, I will report you for bait-and-switch; additionally, if you ship via US mail, you commit felony mail fraud (which I will also report you for) by taking longer than two weeks to ship (regardless of whether or not you try to avoid this by some cheesy "6 to 8 weeks" disclaimer). Overall though, if you run a legit operation, none of that will apply. Just list what you have, honor your prices, and don't treat your customers like sheep (even though most of them probably act like it, and will buy anything you tell them to, enough people will get pissed to provide plenty of negative feedback for me to find).

    13. Re:Wow, they requested this? by Anonymous Coward · · Score: 0

      The address I actually use as my return address when sending mail to friends gets spam all the time.

      Yeah, all those friendly viruses on your friends' Windows boxes harvest your email addy and kindy pass it on to all and sundry.

    14. Re:Wow, they requested this? by Anonymous Coward · · Score: 1, Insightful

      No, no, no!

      Nobody is buying penis enlargers or breast kits.

      People are buying unspecified "business opportunities" where the initial marketing premise is that you can have a home-based business (FREE info tells you to send $40.00 for more info, etc.)

      The leaf-nodes in this system do the spamming, until they fail to get rich, and some of them realize the way to make money is to create new victims, er, leaf nodes.

    15. Re:Wow, they requested this? by Scaba · · Score: 2, Informative

      Then you've never signed up for Mileage Plus with those shitfucks at United Airlines. United Airlines apparently thinks their customers (or former customers in my case) are interested in the usual assortment of penis-enhancing/mortgage/porn garbage peddled by lowlife spammers. As a test, I kept changing the user part of the email address I am registered at United with, and sure enough, a few weeks later it starts getting spam (and subsequently forwarded to uce@ftc.gov and silently dropped from my server).

      But for the most part, I agree. Most reputable companies don't sell your address.

    16. Re:Wow, they requested this? by Lost+Race · · Score: 2, Interesting
      Same here, separate address for every untrusted recipient. For the most part all of them kept the address private, with the following exceptions: Philips was the worst -- I sent one email to their published tech support address concerning a problem with their sound card in Windows 2000, and within hours started getting spam. Never got any reply from Philips either. That earned them an eternal boycott from me.
    17. Re:Wow, they requested this? by Your+Pal+Dave · · Score: 1
      You know, if ISPs made it easier to implement this particular solution, rather than requiring we run our own email servers to do it


      A lot of mailservers allow you to use addresses in the form "username+box@isp.com". This technique goes back a long time and there's a FAQ about it at http://www.faqs.org/faqs/mail/addressing/
    18. Re:Wow, they requested this? by Short+Circuit · · Score: 1

      The sad thing is that it works the same way for physical mail.

      So the only way of eliminating junk email is to make it more expensive to send than snail mail. And that expense isn't likely just to be placed on spammers.

      If I had to pay 32 cents for every email, I'd be a lot less likely to communicate.

    19. Re:Wow, they requested this? by Anonymous Coward · · Score: 0

      People buy this stuff? Not necessarily. Could it be that these questionable companies spamming peoples' email boxes are fly-by-night operations? They send out millions of spam messages and disappear overnight only to be replaced by another.

    20. Re:Wow, they requested this? by schon · · Score: 2, Insightful

      nobody's going to spend money for zero return.

      Which is entirely beside the point.

      The point is even with zero return, people will still spend money if they think the return will be non-zero.

      And you know why they'll think that spam has positive return? because they see spam, and reason 'the other guys wouldn't be doing it if it wasn't making them money.'

    21. Re:Wow, they requested this? by squiggleslash · · Score: 3, Informative

      Unfortunately for the most part they still allow you to email username@isp.com, so anyone reselling email addresses need only remove the +box@... bit and the floodgates are open.

      --
      You are not alone. This is not normal. None of this is normal.
    22. Re:Wow, they requested this? by betelgeuse-4 · · Score: 1

      Once a week I get a promotional email (which I agreed to recieve) from a PC components company. I trust them not to sell my email address to spammers, and occasionally I buy one of the items offered in the email.

    23. Re:Wow, they requested this? by Sandman1971 · · Score: 2, Informative

      Who with an ounce of sense would request any sort of e-mail promotion, given the tendency those things have to multiply of those accord?

      I subscribe to a few mailing lists and promotional emails that fall within my interests. From receiving online coupons by the local grocery chain, news about my local sports team (go Sens go!), TechTV newsletters, weekly recipes sent from Kraft Canada, etc...

      There are plenty of mailing lists and promotional emails that do interest me, and I have no problems receiving them, as I signed up for them.

      I can also state that the mailing lists/promotional emails I have subscribed to, none of them have given my address to someone else, nor have they ever sent me something that I didnt request (I run my own mail server with my own domain, and create an alias for each thing I subscribe to. Makes it easy to control what I get from whom. The only spam I ever get from these are from registering on questionable websites. When that happens, boom goes the alias).

      --
      It's better to burn out than to fade away
    24. Re:Wow, they requested this? by FATRanger · · Score: 2, Interesting

      The way I do it, which does not involve setting up my own email server, is to register a personal domain name with a provider that supports email aliasing/forwarding so that I can still use my isp email account with the benefit of whitelisting good guys and blocking the bad ones by looking at the to: header. The only downside of course is that it takes a bit of time (10 ~ 20mins) before a new fowarding account is created and I am only limited to 99 aliases with my current domain name provider.

    25. Re:Wow, they requested this? by Condor7 · · Score: 1



      I think there are 2 different types of sucker.

      One type is the people who buy something from spam in the mistaken belief that they are going to get value for their money.

      The other type is the people who buy the services of a spammer in the mistaken belief that they are going to get value for their money.

      Sometimes this belief persists even after the transaction has been concluded.

    26. Re:Wow, they requested this? by Beryllium+Sphere(tm) · · Score: 2, Informative

      http://www.sneakemail.com

      Then there's Spam Gourmet, which lets you set up an auto-expiring disposable address to use for those "confirmation" emails.

    27. Re:Wow, they requested this? by Tony-A · · Score: 1

      The results: legitimate companies do not sell my e-mail address. Never. None of them.

      Should be no surprise.
      Legitimate companies do not want to annoy their customers (or anyone else they do business with).
      Legitimate companies consider their customer list to be company-confidential, a very valuable asset. They do not want this information to fall into the hands of their competition.
      Legitimate companies would be wise to be extremely cautious about outsourcing anything that uses their customer list. A secret shared too many times ceases to be a secret.

      The results: legitimate companies do not sell my e-mail address. Never.

      Actually they do. When they sell the whole business!
      Count on it being mentioned explicitly in the contract of sale.

    28. Re:Wow, they requested this? by asavage · · Score: 1

      I could see spam turning mostly into something like the herbal life scam where they trick people to pay money down, and then they just do it to try to make back the initial investment.

    29. Re:Wow, they requested this? by qtp · · Score: 2, Insightful

      Either that or some body is paying people to spam flood the net in hopes that there will be regulation and monitoring of email, and possibly an opportunity to create a newer, lucrative, replacement to the smtp protocol.

      I know that's more than a little paranoid, but the high number of "charge for every email", "pay for a certificate", and "provide a list of all of your users including realname" proposals that have been floated this year looks more than a little suspicious.

      --
      Read, L
    30. Re:Wow, they requested this? by Tony-A · · Score: 1

      to add a bit.
      1) Mass mailings are stupid. Repeated mass mailings are real stupid. You're making your valuable customer list available to your competitors. Real cheap. Your former customers will be more interested in what your competitors have to say than what you have to say.
      3) Don't piss off your customers. Repeat. This is a fundamental rule of business.

      As noted elsewhere in this thread Legitimate companies do not sell my e-mail address. Never. None of them.
      An immediate correlary is that any company that does sell my e-mail address is not legitimate. The obvious conclusion is that it's better to avoid anything to do with any company that would even consider selling my e-mail address.

    31. Re:Wow, they requested this? by M.+Silver · · Score: 1


      Who with an ounce of sense would request any sort of e-mail promotion, given the tendency those things have to multiply of those accord? Don't answer that.


      I do, when they're giving me coupons for things I'm going to buy anyway, but having used the same email address for a bajillion years, I'm not especially concerned about *more* spam (if they try to sell my address, seems likely any given buyer will say "rats, already got that one...")

      I do tag each address so I'll know who violated their privacy agreement, and so far I haven't seen any. Of course, I'm dealing with the online versions of brick-and-mortar companies, so in theory they're capable of making money without underhanded tactics like that (at least, no *new* ones). There's always the chance they'll farm it out to somebody less reputable, or that they'll screw up their opt-in-or-out stuff, but so far it hasn't happened that I can tell.

      --

      Slashdot's token middle-aged housewife
    32. Re:Wow, they requested this? by Phroggy · · Score: 1

      Actually they do. When they sell the whole business!
      Count on it being mentioned explicitly in the contract of sale.


      I haven't had a problem with this, so either the companies I do business with aren't getting bought out, or the companies buying them out are also respectable and also do not sell my e-mail address.

      --
      $x='S24;r)>63/* h@<5+oZ)32"5cz';$me='phroggy'x$];
      $x=~y+ -xz+\0-Tx+;print$_^chop$me for split'',$x;
    33. Re:Wow, they requested this? by Anonymous Coward · · Score: 0
      legitimate companies do not sell my e-mail address. Never. None of them.

      I guess buy.com, comcast.net, and barnesandnoble.com are not legitimate businesses then. I'm with you on that one.

    34. Re:Wow, they requested this? by orthogonal · · Score: 2, Informative

      The only downside of course is that it takes a bit of time (10 ~ 20mins) before a new forwarding account is created and I am only limited to 99 aliases with my current domain name provider.

      Get a domain host that provides a "catchall" account, that collects everything sent to your domain that isn't for an explicitly created address (account).

      Collect messages for the catchall account with your email client. (Or forward them -- my deal with my host, hostica.com, provides a catchall but only one POP account, so by necessity, the catchall (and the explicit but non-POP accounts) all forward to the single POP account. But for only $12 a year, having to channel everything through a single POP account is a small annoyance.)

      Filter the messages in your email client software (or in a proxy server like POPFile), to separate out addresses that hit the catchall that you care about (either care because you want to see them, or care because you've decided that address has been compromised).

      The advantage to this is that I don't need to create an account, all I need to do is make up some-address@mydomain.tld. It's so easy that I do it all the time I'm asked for an email address. If that address begins to get a lot of mail, then and only then do I bother to make a filtering rule for it in my email client.

    35. Re:Wow, they requested this? by bleak+sky · · Score: 1

      Odd, I've done business with both Directron and emusic and never had a spam problem. I hate Directron for other reasons (their customer service is horrible)...maybe I'm just lucky in the spam department. I've had the same email address for years and I've only gotten a few spams. Never more than one a month. I make new addresses for all the things I have to divulge an email address for, but even those addresses don't get spammed.

      But I'm not complaining. :)

    36. Re:Wow, they requested this? by jaseuk · · Score: 1

      Setup two accounts. One which you give out for personal and use among people you trust. (eg: personal@mydomain.com) Another for all your registration signups and things. (eg: signups@mydomain.com)

      On the signups account make use of the + addressing.

      Any mail that makes it straight through to signups@mydomain.com delete instantly.

      Some anti-spam systems use an expiry date notation after the +. eg: signups+03132004@mydomain.com. Its a trivial matter to write a procmail filter to drop all messages after the expiration date.

    37. Re:Wow, they requested this? by jmlyle · · Score: 1


      So you're theorizing that every spam is being sent by people who have no experience in the business of sending spam. Or they are so caught up in the excitement that "other people are doing it so it must work" that they don't bother realizing that all of the time and money they spend researching how to get around filters and spam obstacles is wasted because, oh my god, no one has ever bought anything from us!

      --
      I have misplaced my pants.
    38. Re:Wow, they requested this? by JuggleGeek · · Score: 1

      Many of the spammer make money by convincing some company that this will be effective advertising. The company pays for the spam, the spammer sends the spam. The spammer makes a profit, regardless of whether the company actually gets any business out if it. For that matter, it may do some major harm to the companys reputation - but the spammer still made a profit, and he'll continue to fleece other suckers.

    39. Re:Wow, they requested this? by jmlyle · · Score: 1


      So again, I guess we are safe from spam, because it won't be too long these "spam pushers" have victimized every single person on the planet by tricking them into sending spam. At that point, once every single one of us has been tricked into spamming, and subsequently realize that "Oh My god, no one has ever bought anything from my spam messages, once that happens there will be no more spam. Whew!

      Or maybe it's just more likey that some people do, in fact, make money from spamming. Ya think?

      --
      I have misplaced my pants.
    40. Re:Wow, they requested this? by JuggleGeek · · Score: 1
      I began the post you replied to by saying "Many of the spammers make money by..."

      Don't go pretending that I said that spammers never make money - I said the exact opposite. I have no question that some of them make money, and I know several different ways they can do it.

    41. Re:Wow, they requested this? by schon · · Score: 1

      So you're theorizing that every spam is being sent by people who have no experience in the business of sending spam.

      No, I'm not. I just re-read my post, and nowhere did I say anything that even remotely resembles that.

      *sigh*

      What I said was (again)
      even with zero return, people will still spend money if they think the return will be non-zero.

      I don't know how much clearer I can make that.

      Nice try at a straw man, though.

    42. Re:Wow, they requested this? by jmlyle · · Score: 1


      *bigger sigh*

      So, again, what you're saying is that people will continually make zero return, and yet, they will never cease to spend money, simply because they have a repeatedly disproved notion that the return will be non-zero. Losing money for years and years won't help them to form a different opinion, so you say.

      --
      I have misplaced my pants.
  5. CAN Spam stupid by broothal · · Score: 3, Insightful

    I hang out in various anti-spam communities (news.admin.net-abuse.email and some IRC channesl) and most of us (tinu) agrees that (I) Can Spam is pretty clueless. Now, I'd like to hear comments from someone who's not an anti-spam zealot. Is there anyone who thinks Can Spam is worth the paper it's written on? (Anyone not associated with Direct Marketing).

    1. Re:CAN Spam stupid by scrytch · · Score: 1

      > Is there anyone who thinks Can Spam is worth the paper it's written on? (Anyone not associated with Direct Marketing).

      Costs a lot to print all those congressional records, run off memos and copies, etc :^)

      Seriously, yes. I don't care for how it pre-empted state law, but neither was I itching for a situation where some redneck southern state decides to label any indecent email as spam and then reach out long-arm style and put people in jail for it. There's some upsides to federal communications laws overriding state laws.

      The other big plus is that while it might seem to legitimize totally unsolicited contact via co-reg, epending, or other means (scraping is now illegal), it has a lot of provisions that create a sort of "floor" that any spamming outfit is going to have to be on, or they risk real penalties for it. It means that the hardcore spammers are already violating these laws, and they'll go down for it. CAN-SPAM really sets some minimal standards that make it easier to track down any spammer that do operate within the law. Add to all this the fact that CAN-SPAM says very explicitly that ISP's can impose stricter terms for sending and receiving email if they choose, and you're still perfectly free to whack spammers with whatever degree of blocking you choose.

      It's modest, but it's a net win. Are there spammers that will game the system? Probably, but not many more than already do now. Truly reputable companies have a reputation to uphold, and unless people get less angry because "spam's now legal, so it's okay", no one's getting into spamming who isn't already dabbling in it anyway, law or not.

      --
      I've finally had it: until slashdot gets article moderation, I am not coming back.
    2. Re:CAN Spam stupid by Anonymous Coward · · Score: 0

      i agree that CAN SPAM and other law-based initiatives are pretty clueless. i'm currently testing out mailsift for a couple bucks a month. so far, it's working really well (and certainly better than CAN SPAM ever will).

    3. Re:CAN Spam stupid by mj01nir · · Score: 1

      CAN-SPAM isn't all bad. It's given me another filter to put into SpamAssassin.

      "CAN-SPAM compliant?" Suuure. Bit-bucket time.

      --
      the no .sig .sig
    4. Re:CAN Spam stupid by Pig+Hogger · · Score: 1
      I hang out in various anti-spam communities (news.admin.net-abuse.email
      Are you the Moose???
  6. Return Path numbers are low by attaboy · · Score: 5, Interesting

    The AP/ReturnPath story is interesting, in that the actual number of messages that never see their intended recipients is probably even higher than 19%.

    The study was based on a snapshot of messages sent by 100 Return Path customers. Return Path set up test mailboxes with 18 major Internet service providers and monitored about one-fourth of the 120,000 marketing campaigns from those customers.

    This wouldn't even begin to account for the number of messages filtered by larger companies, universities, and other entities that maintain their own spam-filtering and spam-blocking systems. It also wouldn't account for the growing number of individual end-users who are installing and using commercial or free spam-blocking software on their local machines. Anti-spam software isn't just for geeks anymore. According to download.com, the top 25 results for a search on "anti-spam" have been downloaded 2,493,051 times, in aggregate.

    Well isn't that a good thing?

    If you are an end user, and missing a message doesn't matter that much to you, then no. If you are a company using E-mail to communicate with your customers, but you aren't sending anything critical, then no.

    If you miss the electronic notification from your bank, credit-card, or student loan company that your last payment is late, or the notification from your airline that your flight was cancelled, then it does matter.

    And if your one of the,"oh, it can't be more than five or ten", companies in the world that is using E-mail as part of your business processes, whether for sales, marketing, customer service, CRM, purchase or account notifications, etc... well then, hell yeah it matters.

    Things are probably going to get worse before they get better, but E-mail for business has so much potential that I can't but hope that we will solve this problem.

    --
    The facts have a liberal bias. --The Daily Show
    1. Re:Return Path numbers are low by tanguyr · · Score: 5, Insightful

      And if your one of the,"oh, it can't be more than five or ten", companies in the world that is using E-mail as part of your business processes, whether for sales, marketing, customer service, CRM, purchase or account notifications, etc... well then, hell yeah it matters.

      Well, if you are using e-mail as a *critical* part of your business process then you must have a back up plan: like it or not e-mails get lost, there is no guaranteed delivery (e-fedEx?) ,no standardized way of handling return receipts, not to mention the whole grey area of whether emails represent legally binding documents. Check out those disclaimers in your inbox. Any e-commerce site sends you email notifications on your order's status, but they're also available on your account page - ssl encrypted, password authenticated. And you can call customer support for the same info. /t

      --
      #!/usr/bin/english
    2. Re:Return Path numbers are low by attaboy · · Score: 1


      Maybe we should just start sending our customers telegrams....

      --
      The facts have a liberal bias. --The Daily Show
  7. Re:19% of commercial email? At least! by Anonymous Coward · · Score: 0, Flamebait

    You should be hung by the nads until dead, spammer.

  8. from Dictionary.com by Anonymous Coward · · Score: 3, Funny

    No entry found for rectagonal.
    Did you mean octagonal?

  9. Vigilante justice by FattMattP · · Score: 3, Funny
    ...has closed up shop and moved to cottage country near Huntsville, Ontario
    Come on boys! Saddle up and let's ride on to Huntsville! Don't forget the noose and yer rifle! Yeehaa!
    --
    Prevent email address forgery. Publish SPF records for y
    1. Re:Vigilante justice by Anonymous Coward · · Score: 0

      Come on boys! Saddle up and let's ride on to Huntsville! Don't forget the noose and yer rifle! Yeehaa!

      Sadly, Huntsville is little more than another Toronto suburb. What was once a quaint, friendly, relaxing town is now full of stressed out, SUV-driving, child-spoiling yuppies from the big city who spend more time packing up their gas-guzzlers and sitting in rush-hour traffic on a Friday night than they actually spend at their 'cottage' destination. You MAY still want to bring the noose though, since you'll likely want to kill yourself when you see how much lush bushland they've developed over.

    2. Re:Vigilante justice by Anonymous Coward · · Score: 0

      Huntsville? Aw man, I was born there. Can't get far enough away from some places.

      Here's where it is, and here's what it looks like. Vigil on. You'll fit right in.

    3. Re:Vigilante justice by AndroidCat · · Score: 1

      Are you sure that's not Bala instead? That far up past Webbers' it all starts to look the same.

      --
      One line blog. I hear that they're called Twitters now.
    4. Re:Vigilante justice by Anonymous Coward · · Score: 0
      Are you sure that's not Bala instead? That far up past Webbers' it all starts to look the same.

      ..mmmm.....Webbers......

    5. Re:Vigilante justice by Anonymous Coward · · Score: 0

      Yeah, I'm sure. That stretch of road is too familiar.

      Besides, if it was Bala, could Kim Mitchell be far behind?

    6. Re:Vigilante justice by Anonymous Coward · · Score: 0
      Sadly, Huntsville is little more than another Toronto suburb.
      Are you crazy? Huntsville is nearly 300 Kms away from Toronto, I'd hardly consider that a 'suburb.' Scarborough is a suburb.
    7. Re:Vigilante justice by Anonymous Coward · · Score: 0
      Huntsville, Ontario
      Err, is that Huntsville, Alabama or Ontario, California. Pretty long ride.
  10. CAPTCHA by chaoticset · · Score: 1

    Is there some example somewhere of a CAPTCHA nobody's been able to break yet with mere brute programming?

    I mean, I realize there's technically some way around any CAPTCHA setup, just curious if one is currently deemed King Of The Hill...

    --

    -----------------------
    You are what you think.
    1. Re:CAPTCHA by chrisbtoo · · Score: 1

      Well, if you discount the porn method and you're talking just about using code to do it, I'd be surprised if you could beat pix.

      OTOH, I'd be a bit surprised they had a 100% hit rate with people, too. I just saw a couple that looked like the "right" answer could have been any number of things.

      --
      Registering accounts later than some other chrisb since 1997
    2. Re:CAPTCHA by lukewarmfusion · · Score: 1

      christboo, nicely done on breaking that. Quite amusing.

      I really like the CAPTCHA idea, but we have a lot of crap to fight through to get it effective. To be truly effective, a machine can't possibly read it. By doing so, you prevent disabled readers from being able to read and interpret them. That sucks - can you ignore any such reader?

      There are sound, image, color CAPTCHAs, but they all have the same kinds of problems.

      Out of curiosity, what would you suggest as a solution to that problem?

    3. Re:CAPTCHA by leviramsey · · Score: 1

      There basically isn't. But hey, what contribution can the blind, or the deaf, (or both, for that matter) make to society?

    4. Re:CAPTCHA by slycer · · Score: 1

      Just running through pix - definately some odd pictures there (did ANYBODY get the "nose" one??)

      If you can fool humans, you can probably fool machines too.

    5. Re:CAPTCHA by corngrower · · Score: 1
      Like the post mentioned, the spam interceptor captcha was a really easy one. In fact you could hardly get any simpler. I suspect there are ones that are very difficult to break, or have not yet been broken. (We're talking strictly by a computer algorithm, this excludes posting the captcha to some site).


      Some more challenging captchas would involve a bit of artificial intelligence. For instance you could show a picture of some sort of animal and ask one of a number of questions about the picture (like where does this animal normally live, does this animal have wings, what direction is this animal facing, etc. ) This could easily be made more difficult by having several different animals appear and directing the question to one of them in particular.

    6. Re:CAPTCHA by Pieroxy · · Score: 1

      This system - while promising on the paper - is just not working. You see 6 pictures of mouth and the answer is "nose". There is even a couple of pictures in the set that doesn't contain noses!

      Plus, it is all black people! How do I know if I should have typed in: Blac people nose!?!

    7. Re:CAPTCHA by chrisbtoo · · Score: 1

      Yeah, I saw that one. "Black people", "African Americans", "noses", "mouths", "people", ..? Could be just about anything.

      I guess a smart CAPTCHA would have a list of potential keywords and let any of them through.

      --
      Registering accounts later than some other chrisb since 1997
    8. Re:CAPTCHA by cduffy · · Score: 1

      That's sarcasm, right?

      It's so hard to tell without seeing ones' face...

    9. Re:CAPTCHA by platipusrc · · Score: 1

      I failed, too. It had six pictures of people riding bicycles, so I put bicycle riders, but that was wrong and they'd only allow bicycle, which isn't what the pictures were of.

      --
      And the muscular cyborg German dudes dance with sexy French Canadians
    10. Re:CAPTCHA by Pieroxy · · Score: 1

      Well, the good thing if you want to represent nose is to get a set of pictures that has only that in common! One white male nose, one black male nose, one potato head nose, etc....

      There was also one about toothbrushes which was easy except for the fact that one of the pictures would show a guy in a suit, totally unrelated. If you looked closely, you can see a toothbrush in his shirt pocket. It is about 1 pixel big!!!

      Another one about boat, you just see the deck of a cruiser, not even the sea. How are you supposed to know it's a boat??

      Nah. Concept: A+. Implementation: F.

    11. Re:CAPTCHA by jlaxson · · Score: 1

      I got one with 6 '' laid out in a 3x2 grid. Apparently the correct answer was "monkey."

      --
      On Apple Input Peripherals: They're okay, I guess, but I was really hoping for a one-key keyboard and a 109-button mouse
    12. Re:CAPTCHA by ttroutma · · Score: 1

      There is one. I'm reluctant to post it here but am always interested in feedback and discussion about challenge response. I live in alabama and have developed something I play with that you can see by sending mail to todd@base.techlow.com

  11. -1 Troll, but it seemed to work before by lavalyn · · Score: 2, Interesting

    So we have a name, of Bernard Balan, and it looks like he's living in the Muskoka regions of Ontario, Canada. How long before he gets Ralskyed?

    And shame on the Ottawa Citizen for even trying to portray a bandwidth/storage space thief in a positive light. Neutral at most, and negative more appropriate.

    Also, the Challenge Response bit, an interesting solution but slowly you'll start making the tradeoffs between "hard for computer" and "some people can't do this, their vision is poor or they are colourblind."

    --
    Doing the Right Thing should not be preempted by making a buck.
    1. Re:-1 Troll, but it seemed to work before by Anonymous Coward · · Score: 0
      Though his messages have snaked their way around filters, and into your home, for eight years, Mr. Balan wants to stay out of the public eye.

      "I live in a small town. I don't want to start stirring up things politically. I don't want to get into the politics of this. Though how is it that 1,000 antis, or terrorists, which is what I like to call them, control an entire industry."

      So I guess giving that interview kind of fscked that plan eh? D'OH!
  12. Low tech spam control by sboyko · · Score: 2, Funny

    2971 lines in my Junk Senders file and growing.

    But that, and about 20 rules filtering out Viagra and various misspellings, cans about 80% of the spam I get. It's almost enough for me.

    Now if I could figure out how to get Outlook to hide the mail envelope in the taskbar for messages automatically deleted, I'd be laughing.

    --
    SCO, Microsoft, P2P, what's your hot button?
    1. Re:Low tech spam control by MalaclypseTheYounger · · Score: 1

      Augh I hate that too! Let me know if you fix it!

      I automatically permanently delete about 50-100 messages per day, but that little notification icon pops up about 25% of the time.

      Then I feel disappointed when I go check my inbox and there is in fact no new mail to peruse. Bummer.

      --
      Check out the best P2P sharing website: MEDIACHEST.COM
    2. Re:Low tech spam control by tanguyr · · Score: 1

      select "delete from the server" as the action, that way the mail never gets to you.

      --
      #!/usr/bin/english
    3. Re:Low tech spam control by br0ck · · Score: 1

      Autoread is worth the ten bucks (30 day trial) or you can try the code that it's probabably based on.

    4. Re:Low tech spam control by sbpope · · Score: 1

      Outlook 2003 doesn't show the mail icon when a message gets stuffed into the Junk Mail Folder.

    5. Re:Low tech spam control by WuphonsReach · · Score: 1

      You should switch to using SpamBayes.

      I tried the rule method in Outlook, and bayesian does a much better job.

      --
      Wolde you bothe eate your cake, and have your cake?
    6. Re:Low tech spam control by iamcf13 · · Score: 1

      Then you run the risk of deleting an important messag as spam. If your time is precious to you, check your email while you sleep. If you use my program (see sig), all spam it detects will be clearly identified and archived for later perusal and/or deletion.

      Thank you for reading this,

      Bryan Taylor

    7. Re:Low tech spam control by iamcf13 · · Score: 1

      Spammers have poisioned bayesian filtering, reducing its effectiveness. My program (see sig) uses a combination of techniques which, collectively, effectively deem an email message 'spam' or 'not-spam'.

      Thanks for reading, Bryan

  13. Yet another "King of Spam" by AndroidCat · · Score: 4, Funny

    So Bernard Balan claims to be the (ex) king of spam and "one of the best programmers around"? Oh wait, spammer rule #1.

    --
    One line blog. I hear that they're called Twitters now.
  14. Dutch supreme court rules that ISP may forbid spam by MathFox · · Score: 4, Informative
    The Dutch supreme court (Hoge Raad) ruled today (March 12) that an ISP can forbid a spammer to make use of their machines. (press release in Dutch). "XS4ALL has exclusive rights on its computer capacity" and "Freedom of expression doesn't allow infringement on the rights of others".

    Summary of the verdict: An ISP can demand that a spammer stops (ab)using the computer systems of the ISP for sending unsollicited email to its customers. If he continues after that, the spammer is infringing the ISP's rights.

    --
    extern warranty;
    main()
    {
    (void)warranty;
    }
  15. way to go, slashdot! by WormholeFiend · · Score: 0, Troll

    linking numerous articles in one post, on the off chance that someone *might* read one of them...

    but of course, a couple of slashdot readers will click on at least one of those article links, thereby justifying the linking of numerous articles in a single post... about SPAMMING?!

    arrrrhg
    --

    1. Re:way to go, slashdot! by aWalrus · · Score: 1

      I fail to see the irony. I didn't get this emailed to me, or had to look at it. Instead, I *requested* to see the /. front page, thereby seeing all these links. It's not at all like spamming.

      --
      Overcaffeinated. Angry geeks.
  16. Shifting of spammers to entertainment by Dark+Paladin · · Score: 3, Funny

    The yesterday, I recieved what had to be the greatest piece of spam mail I've ever seen.

    It had to have been 20 pages long from someone calling himself "Lawrence Jesus Christ", and went on about how they were coming back, and specifically mentioned that the document wasn't spam until the Can-Spam act, how keeping this email from people would allow the sender to sue the company for $7000, a bounce-back would invite a lawsuit for denial of service attack, on and on.

    Funniest damned thing I've seen in some time. And I've been wondering if that's the deal with the other spam I've been seeing like how "I had a 36 hour erection with v-i.g.r.@ - click here" or "Bob crossed the room to find the school girls getting rich quick".

    No, I'm not making that up. Well, a little - but it seems like spammers are now trying to use humor to get their messages through.

    As for Lawrence Jesus Christ or whatever, I deleted it anyway. I'm still waiting for my lawsuit.

  17. Some things are unstoppable by superpulpsicle · · Score: 3, Insightful

    1.) SPAM

    2.) P2P

    3.) Pop ups

    4.) Virus

    Just when US companies think they have it figured out, some kid in a bedroom will figure out a new way to distribute smarter ones.

    1. Re:Some things are unstoppable by Lafe · · Score: 1

      3.) Pop ups

      Using a combination of Fire[bird|fox]/Mozilla and proxomitron, I haven't seen a pop-up in ages.

      But I agree with the rest of your statement. The other three items on your list are likely to outlive me!

    2. Re:Some things are unstoppable by asland · · Score: 1


      3.) Pop ups


      I never, ever see unwanted popups. Thanks Firefox.

    3. Re:Some things are unstoppable by wibs · · Score: 1

      OS X + Safari + PithHelmet + friends who buy CDs = me without needing P2P, seeing popups, or having a virus. The spam sucks, though.

      --
      If you get nervous, just remember that there are a few billion other people who don't really give a damn.
    4. Re:Some things are unstoppable by Tor · · Score: 1

      1.) SPAM From our perspective as receivers, they are not unstoppable. SpamAssassin does a pretty good job (as do other filters), better yet if integrated into your MTA so filtering happens at SMTP connection time. 2.) P2P Why would you want to stop that? (I have never used a P2P app, but I cannot figure out why it is something that should be "stopped" in the first place). 3.) Pop ups Use ABBMSIE (Any browser but Microsoft Internet Explorer). For instance, Mozilla based browsers (Mozilla, Firefox, Camino, Galeon...), KHTML based browser (Konqueror, Safari), Opera & all provide "popup blocking" -- reject popups that are not specifically a result of a user action (such as clicking on a link). 4.) Virus Use AOSBMSW (Any Operating System But Microsoft Windows). Nuff said.

  18. Re:19% of commercial email? At least! by 1SmartOne · · Score: 0

    For starters, I don't send out spam. But for my regular business emails, I've lost less than 1%. I don't send emails through requests, such as "email this to friend" etc for fear of being spammed. If I do, I usually copy myself so that I know if it's reached me. If it's reached me, then it's most likely reached my party.

    I highly doubt that so much email is lost. I think that some of the loss my come into play when dealing with different servers or mailhosts. In this respect I have experienced delays that can last upto hours but not lost email.

    Maybe you and the author should just double check your entries before hitting send. Or better if it's a customer you've done business with, use the reply button!

    PS. To parent. If you run a small business, don't use AOL for your mail. Or if you use a SMTP don't use a small ISP to do it.

  19. Spam Interceptor CAPTCHA by chrisbtoo · · Score: 3, Interesting

    Sorry monstroyer, didn't realise it was your system that you were challenging people on. Guess you'll have some work to do tonight, eh?!

    I'd recommend throwing some extra noise in there, and possibly varying the relative darknesses of the background and foreground. If you can distort the characters too it might make it harder to beat.

    --
    Registering accounts later than some other chrisb since 1997
    1. Re:Spam Interceptor CAPTCHA by monstroyer · · Score: 2, Informative

      Heh, it's not my system. It's this guy's, i just help out. The slashdotting from hell though...

      Good work chrisbtoo, congrats.

      FYI, someone else beat the system using Java.

  20. Seriously, though... by Anonymous Coward · · Score: 0

    ...does anybody know of any photos of these guys?

    1. Re:Seriously, though... by ElizabethP · · Score: 2, Insightful
  21. 91 members by Anonymous Coward · · Score: 0

    SolidBlue has 91 members currently. Looks like it's really taken off.

  22. Sigh by Anonymous Coward · · Score: 0

    In Soviet Russia lame repetitive jokes make you!

  23. Musubi! by dacarr · · Score: 1

    Musubi. Breakfast of champions. =^_^=

    --
    This sig no verb.
  24. spam wars by ocularDeathRay · · Score: 2, Insightful

    I am beginning to think we can't ever get rid of spam through legal measures. I am not an expert on the subject... an I admit that I haven't paid that much attention to it. IT just feels like this is gonna be another case where the US or any other country can't control the global internet. We make it illegal and it isn't going to go away... it might go overseas...

    I am convinced that the answer lies in spam filtration. If we stay one technological step ahead of the spammers, they will have to find some other way to make money. I suppose the next problem will be that not all email providers will implement the filters.. but having free software out there to do it will surely increase the number of filtered servers out there.

    I think that clients with built in filters (see like stuff from mozilla are a good option). If more people would use these type of clients, it would really hurt spammers.

    I have an email address that I have been using for a while now and I have not yet recieved ANY spam (thanks to the good admins of that server I am sure). So if more servers were like that one spam could be a thing of the past.

    --
    Obama is a twitter sock puppet
    1. Re:spam wars by jcr · · Score: 1

      I am beginning to think we can't ever get rid of spam through legal measures.

      Not so.. We merely need to legalize corporal punishment of spammers: "Why did you beat that man up, sir?" "He's a spammer, officer. Here's my evidence." "Thank you sir, Have a nice day."

      -jcr

      --
      The only title of honor that a tyrant can grant is "Enemy of the State."
    2. Re:spam wars by oolon · · Score: 1

      Personally I think we can ONLY win the spam war though legal action. I believe in following the money, every spam has something to identify someone selling something (they may not be the spammer, but they know who the spammer is!). The first target is the people who are buying the spammers time, they are then bound over to stop spam and testify against who was spamming on there behalf. If no one wants by time from spammers, they will have no reason to spam. The spammers make their money from dumb people who THINK they can make a buck by selling penis enlargement etc. There is no reason to believe they can, spammers just have to make sure they have a long line of losers wanting to buy bulk emailing.

      James

    3. Re:spam wars by Anonymous Coward · · Score: 0

      If more people would use these type of clients, it would really hurt spammers.

      No - the people that would switch to Mozilla are not the same people that buy stuff from spam sites. It wouldn't hurt them at all.

    4. Re:spam wars by Anonymous Coward · · Score: 0

      Legal measures against spam have never been seriously tried. Various pasted on solutions, in complete concert with the Direct Marketing Association, have been sculpted to allow continuing spam (defined as Unsolicited Bulk Communications, or UBC) while vaguely trying to forbid fraudulent or pornographic email, which is what they are willing to have their paying members not send.

      This is a massive tactical error. The Junk Fax law, US Criminal Code section 18, paragraph 2701, can trivially be extended to include all bulk unsolicited email, and has already stood up to plenty of constitutional tests. This would allow us, as victims of spam, to act against the spammers in civil court. And it would allow the ISP's to have a defensible means by which subpoenas for their client records can be accepted while preserving their "common carrier" status, which they are understandably concerned about losing. It would also present a clear legal standard the ISP's can examine and use for disconnecting spammers, which many of them are reluctant to do for fear of lawsuit.

      As long as that constellation of policies are not in place, we will continue to see spammers expand to fill the gaps in any new legislation because they're *spammers*. Most of them are engaging in fraud: they don't care much if they're reported to their ISP or lose an account, but they do care if they can't hang onto an account long enough to use it for spam and have to give up on the business. And they do care if someone actually bothers to track them back to their lair and sue their pants off, which is extremely difficult to do right now.

  25. Re:19% of commercial email? At least! by 1SmartOne · · Score: 0

    Parent,
    Afterall, Dixiesys is probably to blame for your email problems.

  26. Monstroyer says congrats! by monstroyer · · Score: 5, Interesting
    Wow, my challenge has been answered. Seeing is believing. For the record, someone else beat it using JAVA. Here's the email i got:
    Hi Simon, I just accepted the challenge that (presumably) you laid on a recent Slashdot
    thread to create an automatic registration agent for (again, presumably) your Spam
    Interceptor software.

    This is the result. If you can see the log of registered email addresses you will note
    that some few hundreds of addresses have been added for of the form
    "AutoGenerated_@i.am.spamming.you.com".

    You are welcome to review the code that I used, although there really isn't
    much to it... some 300 lines of java. The approach that I used should be adequate
    simple variations of your defence, but would be readily defeated by simply
    improving the algorithm that you use to generate the random background noise
    in your image.

    Feel free to email me at: [removed]@recalldesign.com
    As a user, here's hoping a fix to make the image more complex is on the way. Thanks for the insight.

    1. Re:Monstroyer says congrats! by interiot · · Score: 3, Informative
      There are some simple steps they can take:
      • warp the letters so programs have to actually use OCR techniques instead of simple byte-matching (currently all "A"s have the exact same shape which is trivial to detect due to the small number of hard-edged pixels)
      • alpha-blend the background... currently you can easily remove the background because it's the same color all the way across and all the way down (roughly speaking; you have to skip pixels on the horizontal, but it's still trivial)
      • don't make the letters be the same color all the way across, contiguous pixel areas are too easy to recognize (better yet, apply randomness to the whole image)
      • don't use a clearly different set of colors for the background vs. the text
      Was this actually a challenge by the authors? It was trivial to break, and just about every other site on the internet that uses munged letters uses the above methods.
    2. Re:Monstroyer says congrats! by wurp · · Score: 1

      And don't forget, rotate the latters to a random angle, within say 45 degrees of vertical.

    3. Re:Monstroyer says congrats! by mindstrm · · Score: 1

      And then someone just puts up some free porn sites, asking entrants to identify the shown text into a form to enter.... web surfers become your workforce, no need for fancy technical OCR when you have a few thousand humans working for you.

    4. Re:Monstroyer says congrats! by StevenMaurer · · Score: 1

      And some more steps that will make this just about impossible to OCR:
      1] Break up the letters like you often see on logos.
      2] Smear or overlay one or more letters together.
      3] Use different colors in a single letter, identical colors across unrelated letters.
      4] Orient or mirror reverse one of the letters.
      5] Put a random pattern of thin lines of the same color over the letters.

      Human pattern matching will read this just fine. You'll drive a typical OCR algorithm nuts. Spammers are by no means going to be creating pattern matching neural nets (not for 50 years yet, anyway.)

    5. Re:Monstroyer says congrats! by kindbud · · Score: 1

      I don't correspond with people who inflict C/R on me. C/R messages get dropped in the bitbucket. If you think you can solve your spam problem by wasting my time making me jump through your hoops, you got another thing coming.

      Have a nice day.

      --
      Edith Keeler Must Die
    6. Re:Monstroyer says congrats! by Anonymous Coward · · Score: 0

      Oh yeah, and he's just begging to talk to you sunshine. Just the priviledge of even thinking of corresponding to you makes me feel like my life will improve.

      Wait, who are you? A nobody.

    7. Re:Monstroyer says congrats! by bob_calder · · Score: 1

      If you use letters that are printed on a wave with a wavy black pattern running across them so that they appear as if someone spilled ink, it will work really well. I saw a demonstration at an optics and recognition guy's website. Just amazing what the human eye can recognize. The percentage of the letters that extends beyond the obscuring blob area is on the order of 30 to 40 percent of the letter. Sorry, I left the link at work and can't google it back.

      --
      Any preoccupation with ideas of what is right or wrong in conduct shows an arrested intellectual development. (Wilde)
  27. Re:19% of commercial email? At least! by clandaith · · Score: 1

    If you truely believe "should be hung by the nads until dead", why don't you post with your username? I just find it funny that you make your comment yet hide behind Anonymous Coward user profile. Are you afraid he will get your email address and add you to his list?

  28. One Bernard Balan, or two? by Tackhead · · Score: 1
    > So we have a name, of Bernard Balan, and it looks like he's living in the Muskoka regions of Ontario, Canada. How long before he gets Ralskyed?

    And according to the article, he's "just down the road" from a place called "Cow Shit Valley Farms".

    Heh. If that's true, I can't think of a better place for a spammer to live.

    I wonder if the Bernard Balan in the Ottawa Citizen article is the same Bernard Balan against whom some interesting allegations were raised in this 1996 Google thread from alt.allsysop, and whether there is any substance to the allegations raised against that Bernard Balan (that is, the one in the alt.allsysop thread).

    Certainly, the Bernard Balan from the 1996 thread, (who had the email address "glasswords@neon.win.net") appears to have had... an interesting history of spamming USENET advertising dialup pr0n BBSes in 1995. And it's interesting to note that the BBSes in question were in area code 905, which, if I know my area codes, is pretty darn close to Muskoka, which just happens to be the last known whereabouts of the Bernard Balan mentioned in today's article.

    I wonder if the two Bernard Balans are the same individual or not.

    Google is a truly fascinating resource, is it not?

    1. Re:One Bernard Balan, or two? by iantri · · Score: 1
      905 is much of Southern Ontario with the exception of Toronto (which is an island of it's own now, 416, which used to be the area code for the whole area).

      Muskoka is in 705, but it's close enough..

  29. I can't stand it anymore! by DF5JT · · Score: 0, Insightful

    Pray tell, when will there be the day when people, governments, institutions and lawmakers understand that SPAM, worms, viruses and trojans are coming from ONE single corporation?

    Let's take a look at some facts:

    - ALL trojans that hijack machines run Microsoft operating systems
    - ALL webbrowsers that run unwanted executables to hijack machines come from Microssoft
    - ALL harmful viruses of the last five years EXCLUSIVELY attack Microsoft programs
    - ALL current worms that bring down machines are targetted to infect - you guessed it.

    What the hell is this discussion about? Get rid of this crap and the discussion becomes obsolete.

    1. Re:I can't stand it anymore! by October_30th · · Score: 1
      Let's take a look at some facts

      Have you normalized your "facts" by relating the number of exploits to the number of installations, or are you simply using absolute numbers like a good zealot?

      If Linux were as popular as Windows is today, it would be just as plagued by security holes.

      --
      The owls are not what they seem
    2. Re:I can't stand it anymore! by DF5JT · · Score: 1

      "If Linux were as popular as Windows is today, it would be just as plagued by security holes."

      Congratulations, you have just run into the idiot trap. Where did I mention Linux?

    3. Re:I can't stand it anymore! by Homology · · Score: 1
      Let's take a look at some facts:

      - ALL trojans that hijack machines run Microsoft operating systems

      - ALL webbrowsers that run unwanted executables to hijack machines come from Microssoft

      - ALL harmful viruses of the last five years EXCLUSIVELY attack Microsoft programs

      - ALL current worms that bring down machines are targetted to infect - you guessed it.

      You are either terribly ignorant, or just another troll.

    4. Re:I can't stand it anymore! by rotomonkey · · Score: 1

      Insightful? Ugh.

      OK, I hate microsoft as much as the next /.er, but implying that spam comes from Microsoft because malware writers target MS programs/OS's is just FUD.

      MS products are the targets of malware simply because of the market penetration. When linux becomes used on 90% of the world's machines, it too will be targetted by malware.

      I get plenty of spam on my Irix machine. Is that somehow SGI's fault?

    5. Re:I can't stand it anymore! by Anonymous Coward · · Score: 0

      As long as Windows stays #1 on the desktop, it will remain the #1 target. For that reason alone, I hope Linux does not make it on the desktop.

    6. Re:I can't stand it anymore! by DF5JT · · Score: 1

      "You are either terribly ignorant, or just another troll."

      How eloquent and so full of undisputable reasoning.

    7. Re:I can't stand it anymore! by jcr · · Score: 2, Insightful

      Have you normalized your "facts" by relating the number of exploits to the number of installations

      Not relevant. He was talking about the number of vulnerabilities, not the number of machines affected. If he complained about the millions of instances of infected hosts, then you'd have a point.

      If Linux were as popular as Windows is today, it would be just as plagued by security holes.

      You're diregarding the fact that UNIX has had people probing it for security holes long before MS even offered TCP/IP in their standard product.

      UNIX had a bunch of these kinds of problems years ago, (Robert Morris' Great Internet Worm being one of the more well-known examples) and sendmail used to sprout a new remote-root exploit every couple of weeks for a while there, but the proof of the pudding is in the eating, and today a security exploit in a UNIX system is notable for its rarity.

      -jcr

      --
      The only title of honor that a tyrant can grant is "Enemy of the State."
    8. Re:I can't stand it anymore! by CommieOverlord · · Score: 1

      SPAM doesn't come from Microsoft nor does it affect solely people using MS products

      There are back-doors, local/remote root-exploits for non-MS products. In the past 3 weeks I have become of local root vulnerabilities for both my linux and my Solaris servers. Someone I know was actually hit hard by a linux virus recently.

      MS doesn't create virii or worms, idiots do. Those same idiots could just as easily create them for Linux/UNIX

    9. Re:I can't stand it anymore! by Tor · · Score: 2, Insightful

      If Linux were as popular as Windows is today, it would be just as plagued by security holes.

      First, wrong. Apache runs 60%-70% of the world's web servers, yet MS II has far more security holes (at least judging by # of exploits). Following your logic, this would not be the case.

      Second, what that generates spam zombies is not really "security holes" in general, but more than anything, a particular type of exploit, namely viruses (virii?). These are nearly exclusive to Windows. (Indeed, by some accounts, Linux installations on the internet are more exploited than Windows installations -- discounting viruses. Take it with a grain of salt, but you get the idea - we are not talking about "security" in general).

      Third, even though Windows may be more widely used by home users than Linux, most crackers ("evil hackers") are more familiar with the world of UNIX and Linux -- typically these OSes are their own tools of choice. Moreover, the source code for Linux (and *BSD) is widely available, and so any holes are much easier to find. (You saw that based only a tiny fraction of the Windows source code, leaked to only a tiny fraction of the worlds cracker population, several new "critical" exploits surfaced within days, if not hours).

      -tor

    10. Re:I can't stand it anymore! by JuggleGeek · · Score: 1
      How eloquent and so full of undisputable reasoning.

      I agree with him. Either your ignorant, or your a troll. I tend to beleive that the correct answer is "both".

  30. Captcha! by doublebackslash · · Score: 3, Interesting

    We have been depending on the difficulty computers have recognzing the shapes of obfustacated letters.
    Why not make the try to identify things, objects.
    There are a substantial number of warping effects that can be applied to a picture, and so long as the users language is known, and they are reasonably congnent, they cold recognize a barn, a duck, etc even if it was warped, twisted, or miscolored to some extent.
    (example: there is a picture of a barn in the forground, the question is what is the color of the object in the picture, or what is the object, many questions based on one picture=)
    I feel that this is the next generation of captchas. Personaly I like a picture scheme better, it could be easier to decipher than some of theose HORRIBLY degraded captchas I've seen. Plus it relies on a deeper ability to recognize shapes and patterns and colors and resolve them into a recognizeable image in our minds, and computers now cannot hope to recognize a warped human face from a barn.
    I feel that this sort of authentication could also be the key to blocking spam all together.
    A user could add E-mails to their trused list, and certain sites (ebay, hotmail, etc) could be on there by default, all others will have their message bounced with a captcha included, and an explination of what is happening. When they prove themselves human, they can get added automagically. Put the work on the senders end. If you send an email to someone, add them to the trused list, etc, for ease of use on users.
    I feel that computers and spammers will have a hard time with any scheme that does not involve standardized things, like letters.

    --
    md5sum /boot/vmlinuz
    d41d8cd98f00b204e9800998ecf8427e /boot/vmlinuz
    1. Re:Captcha! by Paradigm+Lost · · Score: 1
      (example: there is a picture of a barn in the forground, the question is what is the color of the object in the picture, or what is the object, many questions based on one picture=)

      But won't there be various answers? People might call it a "shed" instead of barn, people with no experience of barns may think it's a garage, and would you say it's red or crimson? And then you have to contend with spelling mistakes.

      I feel that computers... will have a hard time with any scheme that does not involve standardized things, like letters.

      My point exactly. Will you be checking the challenge-responses yourself?
      --
      -Dead Lesbian Witches! Think about it!
  31. Re:19% of commercial email? At least! by mugnyte · · Score: 2, Insightful


    If your customers are that valuable in their purchasing habits...why not simply direct them to a web site to pull the information? Then you can stop emailing people and they will read your web site if you are truely competative. For the most part, this avoid 19% loss -> 0% loss.

    I think nobody should be using the email protocol for commercial purposes. It's just so much push technology that is waste and bog. "on demand" seems to be much more suitable for volume.

    When people sign up "to get periodic updates about our products" they are opting-in for another type of spam, but it's still scatter that seems misguided to me. Why not just ask people to come back? You could email them the address and everything else once, but they usually already have that from a puchase receipt.

    peh

  32. Re:19% of commercial email? At least! by Anonymous Coward · · Score: 0

    I'm not afraid. Go ahead and spam me. My email address is:

    abuse@localhost

  33. Re:Don't forget... by Proud+like+a+god · · Score: 0, Offtopic

    Read parent's name, see parent's posts, mod parent troll...

  34. Re:19% of commercial email? At least! by neiffer · · Score: 1

    We just finished migrating to that!! :)

  35. etymology to the rescue by WormholeFiend · · Score: 2, Funny

    "No entry found for rectagonal.
    Did you mean octagonal?"

    recta, from the latin "rectum" and gonal, from the english verb "to go".

    there you have it.

  36. Thank you! by Thud457 · · Score: 1

    I've been wracking my brain trying to figure out a way to prevent emails from colorblind people! Those BASTARDS!

    --

    the preceding comment is my own and in no way reflects the opinion of the Joint Chiefs of Staff

  37. What about spam-printing? by bigjnsa500 · · Score: 1

    What about the spam-printing of links in a article? Jeez...16 in one!

    --
    This is a test. This is a test of the emergency sig system. This has been only a test.
  38. Re:19% of commercial email? At least! by neiffer · · Score: 1

    Dumb ass: I don't send spam, I send a purchased product via email. Think before you type!

  39. Holy Shit! by Mullen · · Score: 3, Funny
    Bernard Balan, branded as one of the world's worst hard line spammers, has retired to a quiet Muskoka retreat far removed from his bulk e-mail empire that, at its peak, had him sending 30 million unsolicited messages a day, raking in up to $140,000 U.S. a week.

    Is this a joke? You can make that much money being a spammer?
    No offense people, I but I'm seriously looking at switching careers! I make half that in a year!
    I could work less than a single single year and retire. Amazing!

    --
    Linux O Muerte!
    1. Re:Holy Shit! by AndroidCat · · Score: 1
      All Spam Kings brag about how much money they make. They frequently show off their big house and fancy cars. But in at least one case (Ronnie Scelson?) it turned out that the house was mortgaged to the hilt and the cars were rented--with loans and taxes due. They probably do make money, but being the type of people that they are, they are unable to live wisely or invest it.

      As for "Holy Shit", keep in mind that Bernie lives next door to Cow Shit Valley Farms, and evaluate his claims accordingly.

      --
      One line blog. I hear that they're called Twitters now.
    2. Re:Holy Shit! by jcr · · Score: 2, Funny

      You can make that much money being a spammer?

      You can probably make more dealing cocaine. That way you'd at least be delivering something the customers actually want..

      -jcr

      --
      The only title of honor that a tyrant can grant is "Enemy of the State."
    3. Re:Holy Shit! by bigberk · · Score: 2, Insightful
      You can make that much money being a spammer?
      I know you're joking, but others look at the figures and think to themselves that they could be rich spammers too. Here's my advice:

      Don't try making a career out of sending spam. You're not going to be a big-shot spammer; you're going to be employeed as a big spammer's bitch to do the dirty work that would otherwise get the big-shot spammer thrown in jail or hunted down and harassed by an angry anti-spam activist.

      For 99.999% of wanna-be-spammers, there is no profit to be made. They lose their Internet accounts, become the targets of some very angry people. Some anti-spammers will stalk you, show up at your house with a gun, or otherwise make sure that they make your life miserable. Even if you don't face this vigilante justice, you may get in trouble for system intrusion or fraud (a criminal offense). Remember that you can't send spam without breaking rules; almost all spamming involves at least theft of resources.

      Don't get used by big-time spammers. Don't sign up to do their dirty work for them; you will take the fall, and come out with nothing except hurt.
    4. Re:Holy Shit! by Anonymous Coward · · Score: 0

      • raking in up to $140,000 U.S. a week
      Is this a joke? You can make that much money being a spammer?
      No offense people, I but I'm seriously looking at switching careers! I make half that in a year!


      You make half that in a year? That's it, I'm moving from India to America now!
  40. Re:19% of commercial email? At least! by Anonymous Coward · · Score: 0

    Maybe. However, the amount you receive is about to go up.

    I opt in to all mailing lists

  41. Captcha-nator by rodney+dill · · Score: 1

    I think the SPAM Captcha interceptor could be made better by including with a text message that says something like. Change the letter that is third (random position) to the letter "F" Random letter, or make the letter that is higher (on the page) in lower case. This would pretty much fool most character recognition programs as they would also have to decipher some message that is associated with it. Of course additional text DIRECTIONS would also fool some humans that would think they know better.

    --

    Use your head, can't you, use your head,
    You're on earth, there's no cure for that
    - S. Beckett
    1. Re:Captcha-nator by droleary · · Score: 1

      I think the SPAM Captcha interceptor could be made better by including with a text message that says something like. Change the letter that is third (random position) to the letter "F"

      Once you go the route of text semantics, you can get rid of the relatively large and cumbersome image altogether. The main reason a CAPTCHA can be cracked is because they are simple "syntax" problems (you type what you see) that AI research has been able to tackle pretty easy. OCR software doesn't really have to improve all that much to automatically crack most sites.

      Once you go with natural language processing, then you've stuck out a much tougher nut to crack. Even without the picture, there are all manner of questions that can be formulated about a plain, relatively short string like "LDFLDFJJ" that are easy for the generating computer to ask and for a human to answer, but difficult for another computer to understand.

      And if you wanted to get real tricky, go for deep semantics of real sentences. I can think of craploads of questions I could ask about "The quick brown fox jumped over the lazy dog". Something like that does require a human to make up the questions, but I could spend five minutes in one day to easily come up with 20 or 30 that a computer would probably not figure out in the next 10 years.

    2. Re:Captcha-nator by tap · · Score: 1

      Someone could just spend five minutes figuring out all the answers to your fixed set of 20-30 questions . Answering your questions is probably easier than making up in the first place.

    3. Re:Captcha-nator by droleary · · Score: 1

      Someone could just spend five minutes figuring out all the answers to your fixed set of 20-30 questions . Answering your questions is probably easier than making up in the first place.

      Sure; so what's your point? What you say is already an attack to employ on CAPTCHA systems. The point of the article and discussion thread is about using automated systems. I was just making a note that the use of syntax instead of semantics made breaking the system easier to automate. Is the whole field kind of pointless when you can hire someone at minimum wage to answer 500 of these queries an hour? Absolutely. That's why I'm not going to spend any time implementing a challenge-response system.

    4. Re:Captcha-nator by tap · · Score: 1
      The imaged based "read the letters" CAPTCHAs that don't have any kind of semantics question are generated by a computer. You can have a program spit out thousands of unique images a second, from a set of billions, there's no way a human could answer all of them. That's why these systems are used, because it's easy to have a computer make up new unique questions. But these kinds of questions are not that hard for a computer to answer.

      So you say, "use a semantics question, those are harder for a computer to answer." And sure they are, but you have a new problem. It's hard for computers to generate them too! You had a human generating the new questions, which means that it's now possible for a human to find the answers to all the questions. By having a human come up with all the questions, you've lost the CA part of CAPTCHA.

      It's kind of a catch-22. Questions that are easy for a computer to generate, are easy for a computer to answer. Questions that are hard for a computer to answer, are hard for a computer to generate.

    5. Re:Captcha-nator by droleary · · Score: 1

      It's kind of a catch-22. Questions that are easy for a computer to generate, are easy for a computer to answer. Questions that are hard for a computer to answer, are hard for a computer to generate.

      That's partly true, but when it comes to semantics vs. syntax, it works something like a one-way hash. If I offer up "LDFLDFJJ", there is semantically within that string a concept of pairings. There are many ways to express that in a syntax that is used to generate questions. I could reference the number 2, the word two, twice, twins, pairs, repeats, duplicates, multiples, etc. Put within the context of a full question, it makes answering a question on semantics very difficult for a computer, even if the same computer might have generated that question.

  42. King of Spam (retired!) by kbahey · · Score: 2, Informative

    Hey.

    I submitted the story about the Canadian spammer trio yesterday and it got rejected.

    I also submitted an article from The Ottawa Citizen. Interesting bits in it. He claims to be retired, and used to make 140,000$ a week. He sent 30 million messages a day.

    Notice how he calls anti SPAM activists "terrorists". Nice moniker there, just like Commie was in the 1950s/1960s.

    Perhaps my joking remark about US invading Canada because of all that put off the editors? ;-). I knew that CAN-SPAM had a Canadian sounding name!

  43. How to get rid of spam by legal means by Animats · · Score: 2, Insightful
    It can be done. Just follow the money. Make banks that issue merchant accounts financially responsible for the spam of their merchants. After all, they're profiting from it. Visa and MasterCard together have the power to stop spam dead.

    Going offshore won't help, if the banking system is forced to cooperate. The credit card system can collect chargebacks from faraway merchants without much trouble.

  44. I just failed by pjt33 · · Score: 1

    Case in point: I just made a single attempt, thought the word was "fruit", and no, it was "apple". I'm not convinced there are any apples in the first picture. Peppers, tomatoes and cauliflowers, yes, but...

    1. Re:I just failed by corngrower · · Score: 1

      I failed too. I got a display that looked like there were horses in each picture. Apparantly they were mice. (I've never seen anybody ride a mouse before.)

  45. Who wants to go for a drive?! by Anonymous Coward · · Score: 0

    Bernard Balan the King of Spam. Bernard has closed up shop and moved to cottage country near Huntsville, Ontario

    Only 1 1/2 hours drive for me! Whos coming?!

  46. I send comercial email. by Anonymous Coward · · Score: 0
    You say,

    The results: legitimate companies do not sell my e-mail address. Never. None of them.

    I say BS, email is a fine tool and makes up for crappy browsers and OS that need to be wiped and reloaded all the time with 100% information loss.

    I have about 100 email addresses I havested the old fashion way, by telephone. Each one of these people asked me to send them info, so I do. Yes, selling computer hardware to resellers is a legitimate business.

    You see, legitmate businesses give a shit. I really will stop sending mail to people who ask me too. I'd also be happy if those people would simply browse the web site where we actually sell stuff, but I know that the platform that most use is insecure, fails and is abused. I'm very distrubed to know that 1/5 of my readers won't get my email because it gets lost in porn spam and other crap from people who could care less.

    I get spammed by a very large company everyday. My wife uses a hotmail account, and Microsoft attaches garbage to each and every mail she sends me.

    1. Re:I send comercial email. by Phroggy · · Score: 1

      I say BS...

      Um, if you disagree with anything I said, what is your disagreement? Your post doesn't seem to have anything to do with mine.

      I get spammed by a very large company everyday. My wife uses a hotmail account, and Microsoft attaches garbage to each and every mail she sends me.

      I hope you're not calling what Microsoft appends to messages from Hotmail users "spam", because if you are, you're contributing to the problem by causing confusion. Just because you find it personally annoying and it has something to do with e-mail doesn't automatically mean it's spam. If it bothers you that much, why don't you talk to your wife about switching to a different e-mail service?

      --
      $x='S24;r)>63/* h@<5+oZ)32"5cz';$me='phroggy'x$];
      $x=~y+ -xz+\0-Tx+;print$_^chop$me for split'',$x;
  47. CAPTCHA-pix beat me... by Anonymous Coward · · Score: 0

    Yeah, that's pretty funny - I got the wrong answer by guessing "bathroom". Just what I need - some pictoral test for every email I send...

  48. No need to forgive; vendors don't offer choice by Flexagon · · Score: 1

    'Promotions and greeting cards ...' ... forgive me for thinking this may not be a bad thing.

    No forgiveness, since none is required. Even among the companies with which I actually have an on-line business relationship, practically none of them distinguish between desired product/service related messages (e.g., time to renew, product recall, upgrade available) and undesired promotions. I can't have one without the other. And that makes most of their e-mail spam, as far as I'm concerned, despite a pre-existing business relationship.

  49. Better places for spammers to live by phorm · · Score: 1

    Heh. If that's true, I can't think of a better place for a spammer to live.

    How about in a box. A pine one. About 6 feet underground. I'd like it if most of them lived there... at least for as long as the oxygen lasts.

    1. Re:Better places for spammers to live by Anonymous Coward · · Score: 0
      "Bernard Balan, pictured outside a medical clinic yesterday in the Muskokas"

      Nothing too quickly fatal, I hope.

  50. Where is the misunderstanding? by Amorpheus_MMS · · Score: 1

    can
    aux.v. Past tense could

    1.
    1. Used to indicate physical or mental ability.
    2. Used to indicate possession of a specified power, right, or privilege.
    3. Used to indicate possession of a specified capability or skill.
    2.
    1. Used to indicate possibility or probability.
    2. Used to indicate that which is permitted, as by conscience or feelings.
    3. Used to indicate probability or possibility under the specified circumstances.

  51. 300 lines of Java? by Wee · · Score: 4, Funny
    You are welcome to review the code that I used, although there really isn't much to it... some 300 lines of java.

    So that's like, what? 25 lines of Perl?

    I kid because I love.

    -B

    --

    Ash and Hickory, straight-grained and true, make excellent bludgeons, dandy for the cudgeling of vegetarians.

    1. Re:300 lines of Java? by Pig+Hogger · · Score: 1
      You are welcome to review the code that I used, although there really isn't much to it... some 300 lines of java.

      So that's like, what? 25 lines of Perl?

      Or 3 lines of APL...
  52. Re:19% of commercial email? At least! by jazman_777 · · Score: 1
    Are you afraid he will get your email address and add you to his list?

    More spam is not an idle threat. It is a Real Danger.

    --
    Slashdot: Failed Car Analogies. Amateur Lawyering. Anecdote Battles.
  53. I feel like I'm missing out by dthree · · Score: 1

    So CAN-SPAM means "Controlling the Assault of Non-Solicited Pornography And Marketing"? What I want to now is, where was all this unsolicited porn?! I sure didn't get any. Now that the law is in place, I'll NEVER get any. ;)

    Seriously, this acronym is ridiculous. Any porn-like junk mail IS marketing. No one ever sends out free, non-solicited porn.

    --
    "I forgot my mantra."
  54. Spaminator (take off a certain J. Cameron flick) by Lead+Butthead · · Score: 1

    --- SPAMMERS

    It can't be reasoned with, it can't be bargained with... it doesn't feel pity or remorse or fear... and it absolutely will not stop, ever, until you are dead. (Well, maybe not even after you're dead.)

    --
    ELOI, ELOI, LAMA SABACHTHANI!?
  55. SSL Trust Web by Muerte23 · · Score: 1

    I posted this yesterday, but i was way too late for it to get read. I know it's poor form to repeat yourself, but i just wanted some feedback.

    So what about this:

    You start with a central certificate authority. I know, I know, bottlenecks. But you only need them to issue keys to (or sign the keys of) about 100 (or 1000?) servers. The signing authority has to be central, but the *revocation* authority does not. That's the key here.

    So those servers can sign the keys of 1000 servers of their own and so on.

    So my mail server tries to send your server an email. Your server checks if my key is signed by someone who is signed by someone who is signed by the CA. It also checks against its nightly downloaded revocation list. If everything is good, the mail goes through. Very little processor time, and very little bandwidth.

    It is robust against DoS attacks because the CA doesn't have to sign every email. They only sign keys that sign keys that connect servers. Or something like that.

    Suppose someone issues a key to a dishonest server? Well, enough people issue complaints and the issuer's key gets revoked. Or some automatied spamassasin type thing that auto-revokes the key after enough spams get spotted. No more spam from them, and maybe next time the admins are more careful.

    In this scenario some spammer hijacks an honest user's Outlook and spams 1000 messages. If the ISP is not checking outgoing mail for spam levels, then they risk getting their certificate revoked. Maybe ISPs could even sign the emails with the account info of the person who is trying to send - thus producing an exact record of the email chain.

    This totally eliminates (i think) the threat of zombie SMTP servers on DSL and open relays.

    Think of it where SMTP only accepts connections over SSL and only with certificates that it trusts.

    Then the ball is in the park of the ISPs and server hosters (those with their own email keys) to keep spammers out locally. SLL login for SMTP? sure. C/R for each email sent through them? Whatever. Send anything over their open relay? Not for long.

    Sounds reasonable to me. It makes it easier for the end user I think, and minimizes spam.

    This totally eliminates zombie SMTP servers on cable lines spewing spam.

    Any suggestions?

    Muerte

    1. Re:SSL Trust Web by drew · · Score: 1

      As attractive as the idea appears, there's one fatal flaw. If you allow anyone to revoke a certificate, (or in this case, a significant number of anyones) sooner or later somebody (probably a spammer, or maybe somebody who just wants to create chaos for the heck of it) is going to start a campaign to mass revoke certificates. It could be an organized group of people that get together, or maybe instead of writing viruses that spam, people will write viruses that send out spam complaints and certificate revocation requests.

      i don't think it's necessarily a bad idea, but i think that it would at best be about as successful as the various rbl lists we have right now- in fact when you think about what your idea is trying to achieve rather than the specifics of how it achieves it, it's really not all that different from the rbls that we have now, and i suspect that it would work with about the same degree of success and suffer from many of the same problems.

      --
      If I don't put anything here, will anyone recognize me anymore?
    2. Re:SSL Trust Web by Muerte23 · · Score: 1

      well, the idea is that spammers would never be able to get spam onto the trusted network. and people would not be able to forge fake spams for reporting - they would all be cryptographically signed.

      so i couldn't make some random spam and send it to the revocation site - it would have to be sent first through a trusted server which should not allow people to spam in the first place.

      does that explain it better? the point being that if your server accepts a mail from a user to send, they sign the email with their key, and the signatures of all their trusted signers. then it contacts the destination server which only allows trusted key chains.

      so it's like a RBL, but instead of blacklisted IPs you have whitelisted SSL certificate chains. and it would be mathematically improbable to ruin.

      muerte

      muerte

  56. How about Alan Ralsky? by Anonymous Coward · · Score: 1, Informative

    Notorius Spammer Alan Ralsky is currently residing at: 5733 Stone Rd, Lockport, NY 14094
    His current home phone: (716) 434-9173
    His current cellular phone: (716) 807-7120

    Please go ahead and let him know how much you love him--being Spamhaus's number 1 offender and all.

  57. Re:Dutch supreme court rules that ISP may forbid s by mrex · · Score: 1

    Summary of the verdict: An ISP can demand that a spammer stops (ab)using the computer systems of the ISP for sending unsollicited email to its customers. If he continues after that, the spammer is infringing the ISP's rights.

    Holy sensible-court-opinions, Batman!!!

    Go figure, somewhere on planet earth there's a legal system that puts the rights of individuals and legitimate businesses ahead of those of penis-pill-hawking, bandwidth-thieving, filter-evading, virus-sending, windoze-mass-trojaning criminals? What is the world coming to?!? Next thing you know, some court somewhere is going to suggest that surreptitiously installing user-tracking software on someone's computer without their actual knowledge and consent is as illegal for a bizness as it is for one of them ebil counter-culture hacker types.

    Does anyone know anything about the Dutch immigration process?

  58. Re:HELP PLEASE by Anonymous Coward · · Score: 0

    The shit hits one ear first (the closest). A couple of cosines and you're cool for the most part, if you want to really play around try HRTFs. Now get lost kid, you bother me.

  59. MD5 encryption of do-not-spam list by Skapare · · Score: 2, Insightful

    Submitting an email address to the "do-not-spam list" risks that address leaking to foreign spammers (or domestic spammers operating in a foreign country). They would know the address is "for real" so they would be happy to add it to the lists they sell.

    If the email addresses were distributed in MD5 encrypted format, it would be a little harder for spammers to do much else with it. Of course, as they scan their list to see who is on the "do-not-spam list", they can still sell those addresses to others (outside the US) as "for real". They won't get to know about new addresses from the list, but they will get to know whether or not new addresses gained from other places is real or maybe not.

    Perhaps better would be to limit the list to domain names only. The domain name owner would have to authorize being on the list, but then it would specify any email address with any username part would be effectively listed. And even still, it would be MD5 encrypted so spammers aren't handed a list of domain names.

    Ultimately, it will have very little effect (big time spammers will move operations to outside the US), and have some problems (spammers will be detecting many "for real" addresses in this). The real solution is to send spammers to the gallows.

    --
    now we need to go OSS in diesel cars
  60. Re:Don't forget... by Proud+like+a+god · · Score: 0, Offtopic

    Yet the post is off-topic and trolling about SCO's fee, the username is suspicious and the their posting history shows they are indeed a troll, so why not mod them as such and be done with them asap?

  61. Wretched, foul, irredeemable. by The+I+Shing · · Score: 2

    BEGIN RANT:::

    If I hear one more spammer refer to himself as a victim I'm going to lose my lunch. Yeah, spammer, you're a victim, just like Charles Manson and Kenneth Bianchi were victims.

    And hearing spammers justify what they do based on how much money they bring in likewise makes my stomach start to heave.

    Another favorite is when they claim an inherent right to spam people. "Hey, don't use email if you don't want to get advertisements," is their repugnant, pathetic little battle cry, like a serial killer who justifies committing murder by claiming that people who don't want to be murdered shouldn't be born.

    I remember this humorous tagline in a Car Wars supplement that read, "If you don't like the way we drive, stay off the streets (and the sidewalks and the lawns)." Spammers have the same kind of tagline going in real life, "If you don't like getting spammed, stay off the internet." But that's quite a bit less humorous, especially when people are having to weed hundreds of stupid spam messages out of their inboxes every day, after waiting fifteen minutes to download them all. :::END RANT

    Time for popcorn.

    --
    You are in error. No-one is screaming. Thank you for your cooperation.
    1. Re:Wretched, foul, irredeemable. by Tony-A · · Score: 1

      If I hear one more spammer refer to himself as a victim

      Hmmmm, my reaction is that the more victimized the spammer is the better.
      What we need is the modern equivalent of tar and feathers and riding out of town on a rail. By person or persons unknown.

  62. Boycott of Microsoft caller ID for email by Rayban · · Score: 1
    I mentioned this earlier (my other comment), but it seems like something that hasn't got much attention on Slashdot. There's a group (?) of people boycotting the Microsoft email caller ID solution and hoping to get authors and MTA's and email clients to sign on:

    The page is at http://boycott-email-caller-id.org/ if you're interested.

    --
    æeee!
    1. Re:Boycott of Microsoft caller ID for email by JuggleGeek · · Score: 1
      On the boycott-email-caller-id.org page, it says "No other anti-spam technologies are covered by patents."

      However, challenge response is an anti-spam technique that has patent issues. (Not that I'm advocating challenge-response.)

      Similarly, Microsoft has a patent which they could probably argue covers bayesian filtering (though they have not, to my knowledge, tried to enforce anything on this patent) and patents have been filed for limited use email addresses. More information here.

  63. They all say the same BS by imkonen · · Score: 1
    "I always honor my unsubscribe requests."

    "I never send porn."

    Suuurrre.... But my favorite is when they complain about about the [baby voice]Big Bad Mean Old People On the Intewnet[/baby voice]. I mean duh! They know damn well they only make money because they're playing the odds. Mail a million people and you'll find a few stupid enough to buy your product and make you money. Well guess what goes hand in hand with that? Piss off a million people in one mass mailing, and you'll also find a few psychopathic enough to do what most of us just fantasize about. Suddenly the numbers game isn't such an advantage.

  64. Not a good thing if it's legit. commercial e-mail by Anonymous Coward · · Score: 0

    I work for a company that, among other things, has a newsletter that's available by paid subscription. MSN/hotmail.com and AOL users are claiming never to receive it on a fairly regular basis.

    Things were bad enough around December that -- for a little while -- I had a theory that hotmail was simply blocking any e-mail that contained a URL.

    NOT a good thing.

  65. Junk Senders file? Doomed to failure by mccrew · · Score: 1
    2971 lines in my Junk Senders file and growing

    I sure hope you have a lot of disk space. But it sounds to me like you are wasting your time. That's because every junk mail these days contains a forged 'From:' header, and spammers are smart enough to generate different From headers for each batch of spam they send out. Since the From header cannot be trusted, any rules that make spam/no-spam decisions based on it cannot be trusted either.

    --
    Hey, Windows users, there is no such thing as "forward" slash, there is only slash and backslash.
  66. A couple of good hangings by leifbk · · Score: 0, Flamebait

    Like someone said, "what we need is a couple of good hangings." Myself, I wouldn't mind seeing Alan Ralsky, George W. Bush, Osama Bin Laden and Saddam Hussein on the same scaffold in downtown Bagdhad one sunny afternoon. Actually, I'd gladly pay a grand to see it happen.

    --
    I used to be a sceptic. These days, I'm not so certain.
  67. Challenge/Response won't work with mailing lists. by SallyShears · · Score: 1

    Mailing lists have served us well for many years.

    I don't think challenge/response can work with mailing lists.

    When designing an action, think about what would happen if everyone did it. This is an old standard, but a good one. For mailing lists, it would be a nightmare if everyone started using challenge/response.

    When you're thinking about SPAM solutions, and other mail admin matters, remember mailing lists...

    - If you use challenge/response, exempt mailing list mail. Figure out how to do it.
    - Don't send bounces to the list address. Or the "From:" address. Use "Sender:" to route bounces to the list owner.
    - Create your "I'm away until.." msg with the vacation program or think it through to exempt mailing list mail.

    -=- Sally

  68. Re:19% of commercial email? At least! by TheTomcat · · Score: 1

    I think nobody should be using the email protocol for commercial purposes. [snip] You could email them the address and everything else once, but they usually already have that from a puchase receipt.

    Wouldn't that constute "commercial purposes"? How about if I run a business, and a customer requests my contact info by email? Is that commercial?

    It's too gray to just draw a line like that.

    S

  69. Re:Junk Senders file? Doomed to failure by sboyko · · Score: 1

    A lot of them are one-shot domains, yes, but I often see repeats in the space of a couple of days.

    Besides, I filter out the common one-shots like yahoo, hotmail, etc. Noone uses those to send business email to me.

    --
    SCO, Microsoft, P2P, what's your hot button?
  70. better CAPTCHA by bandicot · · Score: 2, Interesting

    Spamarrest seems like it has a better CAPTCHA mechanism: sample image. The loops are pretty ugly; certainly more difficult to subvert than dark characters on a light background (with no dark obfuscators). For myself, I use bogofilter. After piping a bunch of known good ("ham") and bad ("spam") through the engine. I get almost no spam that isn't caught and quarantined for later inspection.

    1. Re:better CAPTCHA by Anonymous Coward · · Score: 0

      Along the lines of that other guy's solution.

      1. Remove all thin lines (anything less than a few pixels wide).
      2. Scan for the thick block letters.
      3. If it really requires a challenge, use a boxing algorithm to select each letter, scale the letter, then apply a simple Hopfield network or BAM (bidirectional associative matrix) to determine the letter.
      This is "101 Intro to AI" difficult.

  71. Annoyance to those who do legit mass emails by uqbar · · Score: 2, Informative

    I belong to a club that does mass emails to our members and to folks that members have invited to our club functions. Everyone on our email list gave us their email in writing and every email we send allows opt out. But still this is thousands of people and some of them, rather than click the the unsub button, identify us as spam to block the emails. The result is that many of our dues paying members cannot get mass or even individual emails from the club they belong to (and pay money to belong to).

    With the CAN SPAM laws now we're running around wondering if we now have to worry about being hassled for simply emailing someone who is too lazy to click the unsub link. My take to our board was that we are fine, but some are still worried about having to deal with court costs because someone decided to abuse this law and doesn't understand the difference between SPAM and emails that you asked for and then changed your mind.

    So the potential result of this law is hassling small legitimate groups that want to cut postage costs - while the real spammers, who you don't have any prior relationship with you and who you didn't give out your email to, continue to fill your email box with crap.

    Ugh...

    1. Re:Annoyance to those who do legit mass emails by JuggleGeek · · Score: 1
      I belong to a club that does mass emails to our members and to folks that members have invited to our club functions. Everyone on our email list gave us their email in writing and every email we send allows opt out.

      Do you require the people who you add to your email list to respond to a confirmation message when they join your list? If so, then you know that those people really asked to be on your mailing list, and you can prove that you aren't spamming.

      On the other hand, if your "member" invites a "friend" to a function, and you sign up the friends address and start sending emails to them, then you are spamming, and I don't blame people for complaining.

      The marketers like to call this "double opt in", because they hate to admit that without confirmation, any "opt in" list is, at least to some of the recipients, just spam.

      If you don't know what I'm talking about, then you are probably spamming. This link will help explain it.

    2. Re:Annoyance to those who do legit mass emails by uqbar · · Score: 1

      Every email is provided by someone in writing - when then attend a function they fill out a registration form that they sign (liability stuff). Among the info they can provide is an email. This isn't a friend giving out emails - this is a person physically coming to an event and writing this stuff down themselves. People that don't want email have the ability to not provide this info or say that they don't want emails.

      Regardless of the semantics, even if you believe this is still spam, it is very different from the reams of Viagra crap that randomly rains down on mailboxes everywhere. This, I venture, is the major annoyance that drives us all nuts - and which I don't see the law stopping.

      That said, the double opt in is a decent idea, albeit yet another annoying process that makes running a small non-profit club a major time commitment.

    3. Re:Annoyance to those who do legit mass emails by JuggleGeek · · Score: 1
      Some people will make errors when they write down their email address - or they won't want to give you their real address, so they'll write down a "made up" address. This leads to you sending unwanted, unasked for email to someone else.

      The same thing happens if your data entry person makes a typo while entering the information.

      Software is available to handle double-opt in processing without any manuall involvement, so claiming it takes "too much time" isn't a very good answer.

      The way you are doing it, at least some recipients are going to feel they are being spammed - and some have probably never heard of your organization outside of the spam you've sent them.

  72. Re:19% of commercial email? At least! by jrumney · · Score: 3, Insightful

    When do they come back? I wouldn't want to keep checking a website just in case there was something new there this week. If I an genuinely interested in something, then I don't mind signing up to hear that there is an update. Maybe you college students have time to go looking for new things every day, but I don't.

  73. And Dutch ISP's can block all spammers by Arrawa · · Score: 1
    The high court in the Netherlands today has approved a scheme in with ISP's can block all spam to prevent littering their customers e-mailboxes. They can do so without prior approval of their customers. The case has been fought for years between ISP XS4ALL and notorious spammer Ab Fab.

    Although I don't like the idea of having ISP's in control of what reaches my inbox, this still is good news.

    For those interested, here's the link to the verdict (in Dutch)

  74. Re:19% of commercial email? At least! by qtp · · Score: 1

    Have you automated the process of removing addresses from the list after consecutive bounces?

    This would make it easy to eliminate the false addresses, those people who signed up but later changed their minds, and those who were unfortunate enough to have been "pranked" onto the list.

    Also, an initial form email requesting confirmation of the subscription is a good policy, and it eliminates the problem of "pranked" subscriptions.

    --
    Read, L
  75. Balan's exaggerating about the currency by alienmole · · Score: 1

    ...it's really $140,000 Canadian, which is like, $372 U.S.

  76. Huntsville, ON, Canada by dave1212 · · Score: 1

    I went to Olympia Sports Camp in Huntsville for three summers for basketball.. was a ton of fun, I snuck a carton of cigarettes in each year, meeting many people, getting caught once (they got returned that night) and learning from b-ball players from Duke, North Carolina, and various NBA teams.

    The best part, though, was that my friends and I would make sure to schedule our week the same week as the cheerleading camp that was our age group.. a lot of those girls smoked ;)

    From one AC: Huntsville is nearly 300 Kms away from Toronto, I'd hardly consider that a 'suburb.' Scarborough is a suburb.

    From another AC, Photo of Huntsville

  77. Re:Don't forget... by Anonymous Coward · · Score: 0

    Ok, little John is trolling in his math class, his nickname is suspicious, and his math test history shows 0, 0, 0, and 0. Why not give him 0 on his next test and be done asap?

  78. I FAIL IT by wheany · · Score: 1

    My error rate was about 1/6, good luck trying to get that to work...

  79. Re:Junk Senders file? Doomed to failure by iamcf13 · · Score: 1

    My program (see sig) filters on email headers AND content. One 'filter' alone will deem a message spam if it contains text like 'aslkdjhfplh' and/or '\/|4gr4' and the like.

    Thanks for reading, Bryan

  80. Re:19% of commercial email? At least! by Pig+Hogger · · Score: 1
    I run a small publishing firm that relies on email to sent updates to our materials.
    How do you positively confirm each subscription? Can anybody go to your website and subscribe anyone else?

    If so, you are a SPAMMER.