NYT on Spam Cops
yet another coward writes "The New York Times reports on new measures against spam. (Sperm sample required, sorry ladies) Microsoft has increased efforts to track and prosecute spammers. Hotmail receives 2 billion (2 * 10^9) spam messages per day. In a twist of weirdness, the Direct Marketing Association is funding investigators who cooperate with the FBI on spam investigations. Spamhaus also gets a mention."
Can someone post the OP's text please?
'Don't worry' said the trees when they saw the axe coming, 'The handle is one of us.'
May 31, 2004
When Software Fails to Stop Spam, It's Time to Bring In the Detectives
By SAUL HANSELL
EDMOND, Wash. - Sterling McBride spends a lot of time waiting for spammers to make a mistake. They usually do.
When he hunted down escaped prisoners for the United States Marshals Service, Mr. McBride learned the value of lying low until fugitives trip up, leaving small clues on their whereabouts. Now, as an investigator for Microsoft, Mr. McBride watches carefully for tidbits of data that link some of the two billion pieces of junk e-mail that Microsoft's Hotmail service receives each day with the people who send them.
Once he finds an electronic key to the spammer's identity - a real name, address or phone number - Mr. McBride uses all the tools of a regular detective: trailing suspects, subpoenaing their bank records and looking for disgruntled former associates to become informers. But first he must lift the cloak of anonymity provided by the Internet.
"The guys who do this are pretty tenacious," Mr. McBride said. "There are networks that are very well organized. But we have really started to figure out how they operate."
Spammers have been sending more junk e-mail than ever, despite a new federal antispam law that took effect Jan. 1. So far, few have been brought into court because it is hard to find them and link them to electronic offers of pills and pornography.
So the vanguard of the fight against spam has turned from software engineers who try to identify and block spam from e-mail in-boxes to investigators in private industry, like Mr. McBride, and an increasing number of prosecutors and law enforcement agents who are learning how to combine traditional detective work with cyber-sleuthing.
The Federal Bureau of Investigation is increasing its effort to investigate spammers, largely in response to the new law. In an unusual arrangement, the Direct Marketing Association has paid $500,000 to hire 15 investigators who work alongside agents from the F.B.I. and other government agencies in a program known as Project Slam-Spam.
Using information provided by Internet providers along with their own decoy computers and e-mail accounts, these investigators have built a database of more than 100 spammers. Increasingly they are actually purchasing pills and responding to offers of get-rich-quick schemes to track down the spammers.
"Initially you start to work backwards from the e-mail and find that to be a very frustrating route," said Daniel Larkin, chief of the F.B.I.'s Internet Crime Complaint Center, the unit that is coordinating Project Slam Spam. "That doesn't lead to a live body. We have collectively realized you have to go the other way and follow the money trail."
The project has built cases against 50 spammers, which it has started to refer to federal and state prosecutors. It hopes to orchestrate a coordinated sweep of spam prosecutions and civil cases later this year to highlight the seriousness of its antispam efforts, Mr. Larkin said.
Even before the new law took effect, there was an increase in both civil and criminal actions against spammers. Last week, Howard Carmack, who sent 825 million junk e-mail messages from his home in Buffalo, was sentenced to at least three and a half years in prison, in a case brought in 2003 by New York State for violations of identity theft and business records laws.
The big Internet service providers, especially America Online, a unit of Time Warner, and EarthLink, have been steadily suing spammers for the last few years, using trespass and computer crime laws.
Microsoft is a relative latecomer to the tactic. Until recently, it hoped to rely mainly on software to identify and discard spam. But once it decided to take spammers to court, it moved after them with a vengeance, building what is probably the biggest operation in the world devoted to investigating and suing spammers.
Microsoft's two-year-old "digital integrity" unit - which also fights online fraud, ide
Jeeze, my Optonline single account gets about that per day.
Come to think of it, I suppose if I got that many free samples of Viagra, I could start my own Pharmaceuticual company.
Spammers that are too sleazy for the DMA? That's like discovering a whole new dimension of slime.
The problem with spam is that it's too easy to send. With even a 56k modem you can fire off MANY messages in a matter of minutes. I think a good solution would be on the ISP end of things, and have them throttle connections to port 25 on remote machines. There will always be plenty of open relays, as idiots who just want to allow access to their mail server as quickly as possible will usually just allow relaying from everybody. The spam "hash sites" are great, but the problem with them is not enough people actively submit spam for them to be as effective as possible (not to mention there are numerous, non-centralized ones)
Hopefully, some day people will realize bulk mail isn't effective, but for now, since it is so cheap and easy to send, nothing is going to stop it anytime soon.
Props to GNAA!
In a twist of weirdness, the Direct Marketing Association is funding investigators who cooperate with the FBI on spam investigations.
sounds like phillip morris funding anti-smoking campaigns.
for Mr McBride.
/. first.
Now that's a
Stories like this seem to indicate that spam is becoming more of a "real, get sent to jail" kind of crime with cops and detectives tracking done spammers. Naturally one hopes that violent criminals won't be neglected by this new focus on spammers. Nevertheless, the prospect of real jail time and big fines may deter some from entering the spam market.
Of course, one effect of rounding up the stupid ones will be leaving behind to true spam geniuses. Going after those guys and girls should be real entertaining. Heck, maybe there's a reality based tv show in there somewhere. So you heard it from me first! Anyone got Fox's phone number?
To the making of books there is no end, so let's get started
It is a real postal box that was associated with the Camania site. It turned out to be at a Mail Boxes Etc. in Kirkland, Wash., only a few minutes from Microsoft's headquarters. Microsoft then hired outside investigators to stake out and follow whoever picked up the mail. It turned out to be Jason Cazes, who Mr. McBride said sells "MaxxLength" penis enlargement pills. HOW is this a faulty product? It just promises for you to reach your maximum lenght, whether that be 3, 6 or 9 etc.
What makes you a lady can't acquire sperm samples on demand and in larger quantity than any given gentleman can produce on his own?
"Reality is that which, when you stop believing in it, it doesn't go away." - Philip K. Dick
> When he hunted down escaped prisoners for the United States Marshals Service
"I didn't send that spam!"
"I don't care!"
Damned one-armed spammers...
Oh dear, worse than spam is hundreds of thousands of Slashdotter sperm samples winging their way to NYT...
Err, how is this OT? The post is spam, the article is about spam - see the connection?
google link here
7680 MB Disk,192 GB Transfer,
oh man, Mr. McBride and Microsoft in the same story and its actually a good thing? My head hurts.
if you think this is bad, you should have seen my last sig
Of course, they'd probably stop investigating if any of the products actually worked. Then they'd stay at home in their mansions and satisfy their wives and their wives friends and neighbor ladies and ...I'm walking away from the computer now.
If they ever find out who 'Napoleon Talley' is, could someone please tell him that I'm willing to take him out for dinner (before he gets prosecuted)? His spam e-mails changed my life!
With so much money being spent on law enforcement, prison accommodations, all of that, would it cost less just to pay spammers to quit? Not to incentivize spamming, but to take the big players out of the game very rapidly. Doubtful it would work in the long run, but it's a thought.
we need a department of anti-spam for the us government. They would bring in real experts on the internet and work with ISPs to track down and take care of spammers. And by experts I mean real nerds. /.ers, mail experts and not run by M$ or Yahoo or any of the other big namers.
Evolution or ID?
The public DNSBL service will remain free.
This notice on their site makes clear what uses of their materials is acceptable. Reposting verbatim to other sites is definitely not.
Moderators should not be encouraging this type of behavior by making them "insightful". Slashdot should respect other peoples copyrights, don't forget how evil violating the GPL is.
Slashdot Moderation: From positive to terrible in 2 "insightful" posts.
the Google-friendly link is here: Article!
Microsoft has increased efforts to track and prosecute spammers.
: //POS_SPAM.com
S PAM2.com
Stop letting people use your redirect service to spam. You too Yahoo, you hear me?!!!
http://g.msn.com/0US!s5.31472_315529/HP.1001?http
http://rd.yahoo.com/barrage/card/ovum/*http:/POS_
How about we start prosecuting services that allow people to spam through them, huh?
When submitting a story from the NYT, the summary with the wittiest "registration required" comment will be the one that is selected. Who cares if you can offer up any extra insight. Keep this in mind next time you find something /. worthy. Comedy rules, dammit.
The Tools Of Ignorance wanna be a tool?
Sperm sample required, sorry ladies
/., and that looks a bit unprofessional for the front page.
This is kind of off topic, but does anyone else feel that the New York Times, "registration required," jokes are getting a little out of hand. I mean, the first time someone said, "soul sucking registration," it was pretty funny, but now it's just getting lame. I think it's gone the way of the step 1 step 2 step 3 profit jokes.
No offence intended to whoever posted the article. I'm sure they were just joking around, but a lot of people read
I think the real issue is the poster's assumption that there are females here on Slashdot.
i think it's great that the direct marketing association is assisting in these efforts. i believe not all spam is bad or malicious. but there are a lot of groups/people who give spam a bad wrap. much like the hacker culture. most of us don't commit crimes but are hackers in its truest meaning.
"...if you don't like your job, you don't strike. You just go in every day and do it really half-assed..." -Homer
It's time for some RICO investigations! Let's throw some people from ISPs and banks into the mix as well -- spamming and scamming really is a racket, and these people need to do some hard jail time. Dragging in people from the "legitimate" business world will go a long way towards making spam hard to do and keep spammers from the support systems they need to do business.
The banking angle is especially important! If these scammers can't do credit cards, they will be hard pressed to run their businesses. While I'm sure there are people dumb enough to send cash, most people can't be bothered to do that much work.
But would it be worth it for a lady togo trogh all that trouble to obtaid said qty of sperm just to read NYtimes.com?
I'm walking away from the computer now.
Make mass spam, and purchases from illicit spammers, a crime punishable by death.
A few hundred of these sub-humans swinging from lampposts should soon sort out the problem.
I got an interesting one yesterday. It came into my hotmail account, which is set to "only allow users from my contact list." The address, which wasn't in my list, was listed as from microsoft.com. It was a bit hard to read due to heavy obfuscation (to avoid filters), but it seemed to be advertising underage pr0nography.
I'm assuming that it didn't come from an actual MS address... but one must wonder since if hotmail is simply allowing any email claiming to be from @microsoft.com that's pretty dumb. Not sure how to view headers in hotmail either, and I don't really feel like forwarding something so file to my home account to check them.
MS's online contact thing isn't working either, so I can't ask them. Anyone have any ideas?
(normally I wouldn't bother, but the fact that this spam is particularly vile and somehow manages to bypass a whitelist makes it a special case for stomping)
knock, knock, SEARCH WARRANT!
Boom...cop breaks down the door
cop: Freeze Spammer Scum!
spammer: I didn't do anything
cop: allright put your hands on the Monitor and spread 'em
Spammer: looking jittery
Cop: Put down the the mouse, put it down NOW!
Spammer: makes a run for it
Cops: run him down in half a second (you don't think spammers are fit do you?
later in interrogation - Detective: Arey you gonna talk Spammer?
Spammer: Never
Detective: Bring in the logic probe
why can't the companies that are paying for spam be targetted for prosecution/persecution? They can't easily hide since they have to engage in commerce, AKA money changing hands, to do their business, thus requiring valid contact information. Just follow the money.
"Do the Right Thing. It will gratify some people and astound the rest." - Mark Twain
"Do the Right Thing. It will gratify some people and astound the rest." - Mark Twain
> What makes you a lady can't acquire sperm samples
On the contrary, that's *exactly* what it's for.
Trouble? If it's trouble, you're asking the wrong guy... Excuse, maybe... :)
I prefer to be called Evil Scientist.
Yes, let's pay people to spam. Then a bunch of businesses and individuals who wouldn't even touch spam before now see a business opportunity.
Member of Orkut? Annoyed with spam?
Obviously these are the wonderful Nigerian, and now apparently Democratic Republic of Congo, email scams but his point was that these were frauds and to never respond to these emails.
My question has always been not why aren't we going after these people (well, not these people because they are in a foreign country) because the products they are pushing are fake but rather why aren't we going after them for using a false identity?
Just a thought.
- You do not need to give a sperm
sample
- You do not need to give your newborn child, nor your second or third.
- There is no signing away your soul to
They require a simple registration. It involves the creation of a username, password, and throwaway email address. This is not an invasion of privacy, nor is it some grandiose conspiracy. GET OVER IT, TINFOIL MODERATORS!
Cripes.....
Feed the need: Digitaladdiction.net
Regardless of whether this was posted for karma or to benefit other users here, it is still copyright infringement.
Cool - then just do it this way then.
Made from This Page.
_ _ _ Go for the eyes Boo! GO FOR THE EYES!
Not much of a twist at all, despite many of the above comments. Just grok this: the DMA hates spammers. No, really. I know someone who works for a company that's part of the DMA, and spam is her biggest headache. While we all hate commercial e-mail in general, the DMA is made up of companies who want to play by the rules. True, they want to have a hand in writing the rules as well, but the rules are pretty good ones. No faking your source IP addresses or From: fields. Always have an Unsubscribe feature that actually works. And so forth.
Spammers make the DMA's life a living hell. It's impossible to have a conversation with most people about legitimate commercial e-mail because illegitmate spam is such a pain (I just deleted 20 spams, vs. three real messages in my Lycos mail). With an annoyance like spam, no one even wants to hear the DMA's side of the story. So the DMA's members get blocked from sending e-mail by many sysadmins (like me).
If all commercial mail conformed to the rules that the DMA advocates, no one would complain to ISPs about commercial mail because the power to prevent it would be in the hands of the recipient. Just click Unsubscribe and you're free and clear. Until spammers go away, that's impossible because no one trusts Unsubscribe links. It shouldn't surprise us that the DMA will do anything they can to prevent spam.
... and Hotmail users _send_ how many of those?
Choke it off at the source.
See now this I would mod up. NYT gets the ad revenue from their article (which /.'ers obviously feel is worth reading), and no copyright infringement has taken place.
paul reinheimer
How come I can read the exact same article by simply going in via another entrance.
The common google affiliated link to all NYT stories is a gaping hole in their DNA sample taking policy.
I do however agree about posting the whole article, but news is news, and it should not change depending upon where you read it.
Same subject - if a story is submitted to slash, and it includes a link to an NYT story obtained from google - a perfectly valid news linking service, would Slashdot editors remove the google portion of the link and try to force us to signup?
liqbase
Grow thicker skin.
Compare that to this pathetic article by the BBC. This supposed "hi-tech James Bond" who calls himself "Mr X" believes that by popping into #warez on IRC where he can download pirate software gives him: "The result for me is just to have a clean internet. There is so much filth out there and it is satisfying when it goes down," he said.. Er pirate copies of Nero are "filth"? Oh, and he is actually just a day-jobber for the Business Software Alliance. Sterling McBride is busy busting crooks that are making everyone's life a misery, as opposed to punishing kids for swapping software. No doubt in my mind which is spending his time in the more worthy fashion.
Phillip.
Property for sale in Nice, France
Slashdot and its moderators are not responsible for enforcing federal copyright statutes.
At some point, the spam wants money, mainly by a credit card. Why not set up a credit card account only to be used to purchase whatever product the spam is touting, and follow the trail to the account collecting the funds.
Its done for drug busts, so I know the Feds have cash, at least, they have a lot of mine. Put it to use!
Pete Carr Owner Chatmag.com
The DMA might see spam as competition and a detriment to already bad public relations. People complain about the junk mail and telemarketing calls. Spam is the spreading of those techniques into a new medium. Spammers probably do not belong to the DMA, though, and if spam is successful, it might steal DMA members' business. The cost structure of traditional direct marketing must be quite different from spamming. Telephone marketing requires employees. Direct mailing has a cost per piece of mail. Spamming seems to have a relatively low incremental cost for sending additional spam since bandwidth is usually sold on a time rate basis rather than by usage.
And we all know how much geeks care about copyright infringement. Off to download more music...
Actually spamd on OpenBSDdoes a great job stopping spam
I used to get around 300 messages daily, all of them spam. Now I only get 1 or 2 every two days.
The best way to predict the future is to invent it
You really shouldn't assume that someone is downloading illegal stuff just because they are posting anonymously.
why dont they come down harder read here They are alredy here , the laws that is we as a people do not stand by our own laws The Controlling the Assault of Non-Solicited Pornography and Marketing Act requires unsolicited commercial e-mail messages to be labeled (though not by a standard method) and to include opt-out instructions and the sender's physical address. It prohibits the use of deceptive subject lines and false headers in such messages. The FTC is authorized (but not required) to establish a "do-not-email" registry. State laws that require labels on unsolicited commercial e-mail or prohibit such messages entirely are pre-empted, although provisions merely addressing falsity and deception would remain in place. The CAN-SPAM Act takes effect on January 1, 2004. The CAN-SPAM Act of 2003 was introduced by Senators Conrad R. Burns (R-MT) and Ron Wyden (D-OR) in April 2003, with minor changes from the previous year's version, S. 630 (2002). Two other bills (S. 1231 and S. 1293) were subsequently merged into it. The final version was approved by the Senate in November 2003 and by the House of Representatives in December 2003, and was signed into law by President Bush on December 16, 2003. http://www.spamlaws.com/federal/summ108.html
The .gov should just start a spammer hunting season... one day is enough. problem solved.
OK, this is tangential to the topic, but... My spam has increased by almost 10x just in the last couple of weeks. Now, well over 1000 a day! Many are the same message over and over and over. The only thing I did recently was upgrade to the new version of SpamKiller... coincidence? Anyone else seeing this?
My assumption was because the poster didn't want the cookie, but surfs Slashdot for which I count 2 cookies for on my machine (4 from NYT) - not because they they posted anonymously. And because they backed it up with that lame civil disobedience rant.
Civil disobedience usually has something to do with a government, not a company.
Of course Microsoft wants to fight spam, or more accuratly spam where the spam 'provider' has not paid Microsoft. Now MS has set up there white list system where spammers (sorry, advertisers) pay MS for sending spam (sorry, adverts) they want anyone who sends unsolicited email to pay them - that way they dominate the spam (cant get the hang of this, sorry advertising) market. By fighting non-MS spam they are simply increasing there dominence on the world in yet another way.
#1. Buy the pills (in the article, they're already saying that they do that) and pay with a CHECK.
#2. Find the bank that accepted the check.
#3. Call the local field office and have them meet with the bank manager.
#4. Local agent picks up the name, address and social security number of the person who has the account that deposited that check.
#5. Profit?
Civil disobedience usually has something to do with a government, not a company.
They seem to be one in the same these days.
As a side effect of SPAM prosecution. The cops bust a spammer, and then tack on additonal charges because the shit he's selling is bogus. In exchange for a reduced sentence, they get the spammer to roll on the company he's spamming for.
However I suspect in many cases the spammer is spamming for themselves. These people have shown they have almost no morals, fraud wouldn't supprise me in the slightest.
"Microsoft's two-year-old "digital integrity" unit - which also fights online fraud, identity theft and spyware" - Fight spyware??? Yeah, right so if this unit is actually doing work to combat the potentially much more serious problem of spyware why have we seen 0 in the way of releases? Something more than a mision statement that is.
bah... firefox and/or spybot s&d
"If you're flammable and have legs, you are never blocking a fire exit." - Mitch Hedberg
Maybe I'm missing some explicit connection between the NYT and Slashdot, but doesn't it seem odd that these "registration required" stories at the NYT have come up almost every day for a long time now?
Since most of Slashdot feels that information should be free, I'm surprised other newspapers and sources haven't been sought out for these stories with more of a non-techie point of view. Surely there are other papers with (good) articles on spam!
Oh please, the DMA thinks that it is possible for unsolicted bulk commercial email to not be spam. They are diabolically insane.
The DMA doesn't want to get rid of spam. They just want you to start thinking that there is such a thing as "legitimate" or "legal" spam.
Excuse me, no. All unsolicted bulk commercial email is spam.
Unsubscribe links? Yeah right. So all I have to do is give you some data about me (for free) and you'll stop bugging me (for a few seconds)? What data, you ask? Oh, just that the email address you are sending the mail to is valid, that I'm not interested in whatever product you're pushing, how often I read my emails, what time of day I read my emails, what time of day I'm at home vs at work, whether I can read my home email from the office or vice versa, whether I'm using a Mac or PC, what browser I'm using, etc. etc. Just clicking a link tells direct marketers A LOT about me, and about my system. That is all valuable data that they WILL compile into a database and then sell to other marketers!
The DMA is one of the most evil, sneaky, lying organizations that has ever existed. Nothing they say should EVER be taken at face value. They have secret reasons behind EVERYTHING they do.
Unless it bouces through thier SMTP server.
This baffled me for hours when my deb sever stopped sending my mail. I got NO notification of the change in policy. I assume this was a huge boon for thier tech. support people, I noticed a new entry in thier tech. support FAQ, but I'm assuming a lot of people didn't.
But what I wonder is, what good is this? Thier SMTP doesn't require any authentication, but I assume that a IP is captured and could be used to trace back to my DSL router...
But what I'm afraid of is, that they are actually doing this to monitor the content of my (and the other customers) email.
Anyone elses ISP doing something like this? Anyone in the sysadmin field know of legit reasons for something like this? Does this help stop spammers (My ISP's public explination.)?
Join the Constitution Party in its work to restore our government to its Constitutional limits and our law to its Biblical foundation.
No thanks. I'd rather not continue to allow for the "Chosen One" attitude that both GWB and our beloved RWR felt the need to indulge in.
I think the real issue is you think there are MEN on /. /. in spare moments at work, for a good laugh.
Real men get dates, get married, have kids, maybe even have a life.
There are a few of us MEN, who read
wake up and hold your nose
That puts my 600+ a day into perspective i guess...
---- Booth was a patriot ----
The guy in charge of the FBI's "Internet Crime Complaint Center" didn't know that already? He's not new there. He's been in that job for at least three years. And everybody who works white collar crime knows to follow the money.
Is this where the FBI dumps their deadwood now? It used to be that if you screwed up in the FBI, they transferred you to the FBI office in Butte, Montana. But that's been closed to save money.
http://www.nytimes.com/2004/05/31/technology/31spa m.html
By filing lawsuits known as "John Doe" suits, in which the identity of the defendant is not known, Internet providers are able to subpoena records from banks and others to determine the identity of spammers.
Someone tell me how this is different than what the RIAA has been trying to do with the ISPs getting John Doe warrants to find out who's behind the P2P violations?
Project Slam-Spam?
Does this mean project CAN-SPAM has be canned by the slam spam plan?
i cant beleive its been panned. man. i was its biggest fan.
------
beware he who would deny you access to information, for in his mind he dreams himself your master
Your post advocates a
(*) technical ( ) legislative ( ) market-based ( ) vigilante ( ) lack of an
approach to fighting spam. Your idea will not work. Here is why it won't work. (One or more of the following may apply to your particular idea, and it may have other flaws which used to vary from state to state before a bad federal law was passed.)
( ) Spammers can easily use it to harvest email addresses
(*) Mailing lists and other legitimate email uses would be affected
( ) No one will be able to find the guy or collect the money
( ) It is defenseless against brute force attacks
( ) It will stop spam for two weeks and then we'll be stuck with it
(*) Users of email will not put up with it
( ) Microsoft will not put up with it
( ) The police will not put up with it
(*) Requires too much cooperation from spammers
(*) Requires immediate total cooperation from everybody at once
( ) Many email users cannot afford to lose business or alienate potential employers
( ) Spammers don't care about invalid addresses in their lists
( ) Anyone could anonymously destroy anyone else's career or business
Specifically, your plan fails to account for
( ) Laws expressly prohibiting it
( ) Lack of centrally controlling authority for email
(*) Open relays in foreign countries
( ) Ease of searching tiny alphanumeric address space of all email addresses
( ) Asshats
( ) Jurisdictional problems
( ) Unpopularity of weird new taxes
( ) Public reluctance to accept weird new forms of money
( ) Huge existing software investment in SMTP
( ) Susceptibility of protocols other than SMTP to attack
( ) Willingness of users to install OS patches received by email
( ) Armies of worm riddled broadband-connected Windows boxes
(*) Eternal arms race involved in all filtering approaches
(*) Extreme profitability of spam
( ) Joe jobs and/or identity theft
( ) Technically illiterate politicians
(*) Extreme stupidity on the part of people who do business with spammers
( ) Dishonesty on the part of spammers themselves
( ) Bandwidth costs that are unaffected by client filtering
( ) Outlook
and the following philosophical objections may also apply:
(*) Ideas similar to yours are easy to come up with, yet none have ever
been shown practical
( ) Any scheme based on opt-out is unacceptable
( ) SMTP headers should not be the subject of legislation
( ) Blacklists suck
( ) Whitelists suck
( ) No-lists suck
( ) We should be able to talk about Viagra without being censored
( ) Countermeasures should not involve wire fraud or credit card fraud
( ) Countermeasures should not involve sabotage of public networks
(*) Countermeasures must work if phased in gradually
( ) Sending email should be free
( ) Why should we have to trust you and your servers?
( ) Incompatiblity with open source or open source licenses
( ) Feel-good measures do nothing to solve the problem
( ) Temporary/one-time email addresses are cumbersome
( ) I don't want the government reading my email
( ) Killing them that way is not slow and painful enough
Furthermore, this is what I think about you:
(*) Sorry dude, but I don't think it would work.
( ) This is a stupid idea, and you're a stupid person for suggesting it.
( ) Nice try, assh0le! I'm going to find out where you live and burn your
house down!
Well, I guess there are a lot of problems with spam. My problem with spam is that I receive hundreds of spams a day. Our company uses a very nice spam filter, and almost of these things get labeled as spam, buried in an attachment, and a local filter moves them to a 'probably spam' folder. But since there are hundreds of them per day, and in order to read them I have to open the attached email, I don't read any of them, I just delete them. So, my email used to be 100%, but the spam's gotten so bad that now its only about 99%. Small chance there, but if you send me an email, I might not get it. Meanwhile, I have to make it less convenient for everyone, everywhere to send me email. I used to have my email address (a different one, it was overwhelmed with spam long ago) right on my web page. That thing got so many spams that I had to quit using it. So now I have a gmail address on my web page, but not a convenient 'click here to email me' sort of thing. Rather just a description of what my email address might sound like, and if you can figure it out, launch your email client, type in the solution to this little puzzle, *then* you can email me, and... then I might get it, because if it doesn't make it past gmails spam filters I'll never see it. I've found myself relying on web-board forum postings and the like for that sort of non-spammed email communications. The best way to reach me now is to post on a forum I visit with "HEY YOU, READ THIS!" as the title. Crazy. To the point though, is email, as a concept, just fundamentally flawed? I've thought about putting a convenient clickable email address on my webpage that requires an occassionally changing subject-title 'password' in order to actually be delivered. i.e. The first time you send me an email, you have to put [password] in the subject. If you don't, then I won't ever see the email. Once I receive the email, then I'll add you to a contact list which allows you to email me without the password. Then if I ever get spam with the password for the subject, then I'll change the password. If you are in my contact list and I get spam from you, then I'll delete you from it. But that still wouldn't work, would it? I mean, I'd still get whatever viruses-spawned emails spoof your email address or use contact lists for distribution... And I'd never be able to use the email address for things like registering accounts with online newspapers. I'm making the assumption that most spammers get their email lists from those guys, no matter what they say. If they're sharing my email address with anyone, they're sharing it with everyone. Anyway, this battle with spam seems like a lost cause. I'm thinking the problem is with email. Like, we need something else.
Jeff Freeman
Your post advocates a
( ) technical ( ) legislative ( ) market-based (*) vigilante ( ) lack of an
approach to fighting spam. Your idea will not work. Here is why it won't work. (One or more of the following may apply to your particular idea, and it may have other flaws which used to vary from state to state before a bad federal law was passed.)
( ) Spammers can easily use it to harvest email addresses
( ) Mailing lists and other legitimate email uses would be affected
(*) No one will be able to find the guy or collect the money
( ) It is defenseless against brute force attacks
( ) It will stop spam for two weeks and then we'll be stuck with it
( ) Users of email will not put up with it
( ) Microsoft will not put up with it
( ) The police will not put up with it
( ) Requires too much cooperation from spammers
( ) Requires immediate total cooperation from everybody at once
( ) Many email users cannot afford to lose business or alienate potential employers
( ) Spammers don't care about invalid addresses in their lists
( ) Anyone could anonymously destroy anyone else's career or business
Specifically, your plan fails to account for
( ) Laws expressly prohibiting it
( ) Lack of centrally controlling authority for email
(*) Open relays in foreign countries
( ) Ease of searching tiny alphanumeric address space of all email addresses
( ) Asshats
( ) Jurisdictional problems
( ) Unpopularity of weird new taxes
( ) Public reluctance to accept weird new forms of money
( ) Huge existing software investment in SMTP
( ) Susceptibility of protocols other than SMTP to attack
( ) Willingness of users to install OS patches received by email
( ) Armies of worm riddled broadband-connected Windows boxes
( ) Eternal arms race involved in all filtering approaches
(*) Extreme profitability of spam
(*) Joe jobs and/or identity theft
(*) Technically illiterate politicians
(*) Extreme stupidity on the part of people who do business with spammers
( ) Dishonesty on the part of spammers themselves
( ) Bandwidth costs that are unaffected by client filtering
( ) Outlook
and the following philosophical objections may also apply:
(*) Ideas similar to yours are easy to come up with, yet none have ever
been shown practical
( ) Any scheme based on opt-out is unacceptable
( ) SMTP headers should not be the subject of legislation
( ) Blacklists suck
( ) Whitelists suck
( ) No-lists suck
( ) We should be able to talk about Viagra without being censored
( ) Countermeasures should not involve wire fraud or credit card fraud
( ) Countermeasures should not involve sabotage of public networks
( ) Countermeasures must work if phased in gradually
( ) Sending email should be free
( ) Why should we have to trust you and your servers?
( ) Incompatiblity with open source or open source licenses
( ) Feel-good measures do nothing to solve the problem
( ) Temporary/one-time email addresses are cumbersome
(*) I don't want the government reading my email
( ) Killing them that way is not slow and painful enough
Furthermore, this is what I think about you:
(*) Sorry dude, but I don't think it would work.
( ) This is a stupid idea, and you're a stupid person for suggesting it.
( ) Nice try, assh0le! I'm going to find out where you live and burn your
house down!
#5. Shoot to kill.
It's more likely that, as a previous poster mentioned, you'll find that information forged. But even more likely than that, you'll find a bank in the same countries that allow Internet gambling sites to operate -- meaning the bank will be outside of United States jurisdiction.
Perhaps a few spammers will be found using the method you describe, but the money is big enough that the spammers will evolve.
Uh-huh. Guys like you just fuel misandry, you know.
~ some female on Slashdot
Just because someone says something is not acceptable doesn't mean it really isn't.
Every firestorm on Slashdot over copyright infringement comes down to the fact that some people don't think it's wrong and would rather follow their own moral code than the one the law prescribes. Others think the law is inviolate and breaking the law for any reason is wrong. With such a core difference in beliefs (a rift that stretches far beyond this website), copyright infringement, lawsuits over it, and the arguments associated with them both are going to continue for a long time. And so will reg-free links.
Any female who can collect large amounts of sperm on demand should not be called a "lady".
Don't blame me, I didn't vote for either of them!
Riiiiiiight.
I take a simple grammatical error and turn it into a comment that's not only nicely witty but pretty biologically accurate, and that's a reason for an AC to hate all men? Tell you what dearie, unless *your* vagina can read a book or start a car or do something *far* outside the scope of what's in my comment, then I suggest you trot back to your "womyns studies under the phallocracy" and leave the net to those of us whose knees don't jerk quite so severely every time we go online. Mmmkay?
was not the soul-sucing one, but this.
I don't really know which I loathe more, the twits that spam or the twits that call any marketing message spam.
What's so weird about tha DMA trying to clean up email marketing? The DMA's probably the most unsung hero of the whole spam mess. I know it's probably too conservative of an idea for the typical slashdotter, but it's corprate responsibility.
The DMA is for anti-spam laws, educates marketers who might just have set up their mailers on ethics of email marketing, etc. The LAST thing they want you to do is feel inconveinenced by a marketing message.
It's the spammers that are threatening legitimate email marketing to the extent that laws are being passed and Joe Public's view of the matter is being crafted by jack asses. They want the spammers gone so that email marketing can lose the stigma it has aquired and actually be useful to consumer and distributor.
There's nothing weird about it unless you of course are one of those said twits.
Most of the spam I receive doesnt include a snail-mail address, just a credit-card form...
So where would you send a cheque?
If there was an actual mailing address, I'm sure a lot more spammers would get caught and/or beat up.
The problem lies not with email, but in the people who are misusing it. (i.e spammers). It's as though you were using stolen stamps to pay for a mass conventional mail solicitaion. It really just comes down to economics.
Email does cost money to send. I pay my ISP $40 / month so I can get email and internet access. My primary email address has cost me almost $150 000 in lost wages and tuition. ( It came with my degree. ) However, if I steal the money to pay for that, it wouldn't really cost me anything. When someone uses a virus to create zombie computers to send out email through unsecured relays and open ports, they are not out any money. I'm sure that XP home is responsible for a large portion of spam, especially when you add a broadband connection where the ISP does not require passwords onto their outgoing mail. (Not to mention open port 25 everywhere!) My dad had a zombie computer (XP home) but still refused to turn it off at night or install a better OS. (I recently put on Win2000 pro and bought him a hardware firewall.) Of course, *nix is no more secure than XP; there just aren't enough people using it to justify the ROI for writing a virus. Trust me, no matter how secure you think something is, there's a work-around. There's always a work-around.
Anyway, there are no solutions to spam. I'm sure there are at least 2 of those form "Why your solution won't work" forms in this thread. (I feel that a technical solution exists - analog trace the source to the master computers and permanently disable the machine. Imagine if every spammer on earth turned on their machine to find it dead, displaying only "spammers don't get computers" on the monitor. But I digress.)
It costs money to fight spam. Lots of money. Now that huge players like AOL and Microsoft realize how much money it's costing them, they're going to start throwing their weight around. As much as you may hate to admit it, the folks there (at least on the development side) are bright people and the companies have more money than spammers. I know who I'm betting on.
As I said, it's all economics. All that one has to do is make it more expensive to send spam than you can make from sending it. With jail terms just starting, we'll see a decrease - eventually. Further, the spammers are going to pick the wrong guy to write the virus. We'll find him. He'll talk. Some spammer will go to jail.
---
ECHELON is a government program to find words like bomb, jihad, plutonium, assassinate, and anarchy.
> Spammers have been sending more junk e-mail than ever, despite a new federal antispam law that took effect Jan. 1.
"despite"? Try "thanks to".
> In the last 15 months, Microsoft has filed 53 civil cases against spammers. Ten have resulted in court orders banning the defendant from further spamming, either because of a settlement or because the defendant did not show up in court. One case was dismissed. The rest are working their way through the Washington State courts.
But the new federal (You)CAN-SPAM law supercedes WA state law. So yes, there are 53 civil cases pending in WA state courts.
And because of You-CAN-SPAM, not one of those cases matters worth shit.
At this rate (2 Billion per day @ Hotmail), SPAM will overtake McDonald's in "count of persons served."
I'll take mine with ketchup, no mustard...
if (!sig) { printf("Signature Unavailable\n"); }
* If you have an MSN Hotmail account, click Options in the upper-right corner of any page. Click Mail on the left side, and then click Mail display settings. Next to Message headers, click Full, and then click OK.
At first you required just an email. Then an email, name and password. Now you want us to enter our complete demographic statistical profile before being granted permission to view your story. All this besides the ads. Your marketers have gotten out of control over there. What happened to wanting just to influence public ^H^H^H^H tell all the news that is fit to print?
Beyond that, as other newspapers copy you of habit, soon every last online newspaper will require registration. I mean really now, how many separate newspaper accounts do I need to keep track of? For now, this can be avoided at many of the smaller sites that try to get you on the second visit by turning off cookies. But at this point if I see registration required, I no longer bother.
or this....
s pa m.html?ex=1401336000&en=2bd63df2ba09047a&ei=5007&p artner=SoGgYfIsH
http://www.nytimes.com/2004/05/31/technology/31
I just signed up at a site called ethicalemail.com, and they seem to have an idea on how to help eliminate lots of spam. The site is www.ethicalemail.com, I heard about them from an indiana business "paper" online (http://www.insideindianabusiness.com/newsitem.asp ?id=11088)
I figured it didn't cost me anything so I'm giving it a try - I'm way sick of spam...
"Do not drill any holes in your cat - it will not like it."
-- Nick Davies
Yes mine has increased too..
I use a whitelist + spam assassin.. then do a quick scan of the 200 or so a day that get thru...
I'm sure i miss things but i refuse to spend much time on it..
---- Booth was a patriot ----
One look at the Windows instructions (http://wiki.apache.org/spamassassin/InstallingOnW indows) kind of had my head spinning. Any suggestions for something a bit more user-friendly? Someone recommended SpamBayes.
:(
It's the false negatives (good mail blocked as spam) that's killing me. I have to look through the entire blocked folder - over 1000 a day. At that point, why even bother with the spam filter?
Keep whoring you faggot RNC (= big government) slashslut.
It's that time of month again!
Artists Against 419
Artists Against 419 is a flash mob that meets once a month to download artistic images from 419 scam sites. The more people they get, the faster the 419 sites go down!
in the way that I trust a rabid dog.
Sterling McBride?
Is this the SCO/Microsoft connection?
What, is he Darl's brother or something?
Slashdot users TRUST Slashdot. Slashdot users don't TRUST NYTimes.com.