Slashdot Mirror


No Federal Do-Not-Spam Registry For Now

Decaffeinated Jedi writes "The AP reports today that the U.S. government has no plans to create a do-not-spam registry in the immediate future. Why not? They argue that the proper technology is not yet in place. 'A national do-not-e-mail registry, without a system in place to authenticate the origin of e-mail messages, would fail to reduce the burden of spam and may even increase the amount of spam received by consumers,' said the commission." The moral of the story is: never try. See the FTC's press release or their report (pdf).

29 of 324 comments (clear)

  1. Obligatory Simpsons by swordboy · · Score: 5, Funny

    Homer: Trying is the first step towards failure.

    --

    Life is the leading cause of death in America.
  2. Not yet ready.. by CommanderData · · Score: 5, Insightful

    I'm glad that they haven't jumped in headfirst, I can't imagine how they could enforce such a list right now with so much spam coming from outside of the United States and from unknowing zombie PCs within the US. If they did create a list it would place an expectation in the public eye that the US government can enforce it, when it obviously (to us slashdot readers) cannot.

    Like it or not, we need to come up with more clever hardware or software solutions like Yahoo's "Domain Keys", Meng Weng Wong's SPF (Sender Policy Framework), or god forbid, Microsoft's Caller ID for E-mail.

    --
    Urge to post... fading... fading... RISING!... fading... fading... gone.
    1. Re:Not yet ready.. by surreal-maitland · · Score: 5, Insightful

      i absolutely agree with you. this reminds me of a situation which is currently in place here in boston. they have decided to start randomly IDing people when they take the T. clearly, knowing who is on the T at a given time doesn't prevent or deter that person from bringing a bomb on board. however, it gives some people a false sense of security. that's exactly what this would be: a false sense of security and, as an earlier poster mentioned, a bunch of valid email addresses in a nice little list for a spammer from china. oh, and of course, a waste of taxpayer money.

      --
      -ninjaneer
  3. Wait wait wait... by JoeLinux · · Score: 5, Funny

    I thought they had this now: Isn't it the "Opt-Out" thingy?

  4. Thank GOD! by Anonymous Coward · · Score: 4, Funny

    My processed lunch meat business will continue for now.

  5. But wait by s20451 · · Score: 4, Insightful

    The moral of the story is: never try.

    Funny, when someone does propose an anti-spam solution, people here can't poke holes in it fast enough.

    So you want to hear these lame proposals so you can scoff at them and feel superior? Or what?

    --
    Toronto-area transit rider? Rate your ride.
    1. Re:But wait by squiggleslash · · Score: 5, Insightful
      Funny, when someone does propose an anti-spam solution, people here can't poke holes in it fast enough.
      That's because 90% of the so-called "solutions" for spam have serious flaws. They usually end up blocking legitimate email and usually can be worked around by some means. Really, for ordinary users forced to endure some largely unaccountable sysadmins idea of what email should be, the only workable environment involves a combination of Bayesian-style filters coupled with white lists for known good addresses (to ensure they're not accidentally dropped.) For those of us able to administer SMTP servers, seperate email addresses for each entity that needs to contact us with no published permanent "public" addresses generally works.

      The "solutions" we see posted from time to time rarely are as straightforward or effective. SPEWS type filtering blocks customers of ISPs regardless of whether they themselves are abusive or not. The DUL blocks by a criteria which has nothing, on the face of it, to do with spam, and simply makes things like configuration-free email an impossibility and roaming more difficult. ISP-lead outgoing port 25 blocking makes configuration-free email impossible and undermines user privacy. ISP-lead incoming port 25 blocking makes it impossible for knowledgable end users to deploy certain effective methods of spam block. The SPF, in an environment in which port 25 blocks and the DUL are active and in which ISPs rarely offer "authenticated SMTP" connections for external users will make roaming even more difficult.

      And those are just the current methods taken seriously and proposed at every turn. Meanwhile, people propose all sorts of "solutions" like using encrypted authentication and even getting rid of SMTP which are about as easy as creating world peace ("All we have to do is stop fighting each other!"), and which open all sorts of new cans of worms.

      In the case of this article, someone was seriously contemplating having the FTC create a Do-Not-Spam list, a list that wouldn't have applied to foreign owned businesses and one that would have, if anything, legitimized spam ("Hey, we're only posting to people off the list, leave us alone!")

      When people stop proposing daft and damaging ideas, people on Slashdot will stop poking holes in them. Spam is a solvable problem, but an unholy alliance of BOFHs and zealots is causing immeasurable damage without actually making much of a dent, if any, in the volumes we're talking about. Interestingly, by-and-large, the solutions that work involve enfranchising the receiver, a principle the current anti-spam culture is reluctant to accept.

      --
      You are not alone. This is not normal. None of this is normal.
  6. At least they realize that. by suso · · Score: 5, Insightful

    At least they are smart enough to realize that it is not technically feasible yet. Score 1 for the FTC.

  7. Knee Jerk? by FortKnox · · Score: 5, Insightful

    The moral of the story is: never try.

    Come now, michael. If it is most likely going to CAUSE more spam, its something that shouldn't be done.

    Its a "damned if you do, damned if you don't by people with kneejerk reactions that normally hate everything you do anyway" thing, isn't it?

    --
    Good quote, too many chars. Seriously, the slashdot 120 char limit sucks!
  8. FTC is right by sulli · · Score: 5, Insightful

    A do-not-spam list right now would be a spam-me-now list. So many spammers are beyond the reach of the law at the moment that adding your address or domain to this list would be like adding it to WHOIS.

    --

    sulli
    RTFJ.
  9. Good! by tekunokurato · · Score: 4, Insightful

    I completely agree. How do you intend to enforce such a registry? People are forever insulting the gov't for creating unenforceable laws, and the FCC is right to hold back. You must remember that CAN-SPAM makes it a civil crime, while a national registry would make it a federal crime, requiring the gov't to spend money trying cases that obviously won't be won (and could also implicate a lot of innocents).

  10. The real moral is by b00m3rang · · Score: 5, Insightful

    Don't hand the spammers what would probably be the worlds largest distribution list on a silver platter.

  11. Too Bad by jumpingfred · · Score: 5, Funny

    They should have a do not spam list. It will kill off at least one segment of spam. Spam mails trying to sell you a list of valid email adresses.

  12. Murphy's Law by Networkink*Man · · Score: 5, Funny

    Spammed if you do, spammed if you don't.

    --
    "How am I supposed to remember you, when you won't let me forget?" --Bare Naked Ladies
  13. Re:Not yet ready.. BINGO! by AtariDatacenter · · Score: 5, Insightful

    Your message probably best sums up the response to this, and nothing else really needs to be said by anyone. If you create a list of email addresses and attach to it an American law governing their use, then someone from China isn't going to care one bit. The global nature of the Internet (which defies censorship) is also the same thing that allows for spam.

    Personally, I'd get a little scared if they can legalize away spam. Although a different medium, if they go all-out for spam, it probably makes for a good sign/precident for 'other things' to be eliminated from the Internet. (Be it pirated files, porn, 'ideas that my citizens shouldn't be having', etc.)

    But I still wish spam would go away, like everyone else.

  14. When it finally goes up.. by NanoGator · · Score: 4, Funny

    ... I'm gonna report myself as '*@*.*'.

    --
    "Derp de derp."
  15. Please... by i_r_sensitive · · Score: 4, Insightful
    No, the moral of the story:

    Why pass unenforceable legislation which has a good chance of making matters worse?

    For once it looks like a responsible decision has been made, lets not mistakenly equate that with doing nothing.

    Imagine the screaming you would have done had they tried and failed miserably, or tried and made things worse.

    --
    "Talk minus action equals nothing" - Joey Shithead, D.O.A.
    "Talk minus action equals /." -
  16. The FTC got one right by Jay+Maynard · · Score: 4, Insightful

    Unlike the You CAN-SPAM Act, this decision by the FTC shows that they have two clues to rub together. There's no guarantee that spammers would adhere to the list..witness the fact that telephone spammers are moving their operations offshore to evade the do-not-call list.

    The only way to stop spam is to hammer the advertisers. Follow the money. Penalize the folks who benefit. No other law-based solution will work.

    --
    Disinfect the GNU General Public Virus!
  17. total waste of time by mabu · · Score: 4, Interesting

    For the zillionth time, can we put an end to boneheaded ideas like this?

    Almost all spammers are violating Federal law right now. A do-not-email list would be the most ridiculous thing ever heard of, and would more likely serve as a great source of addresses for spammers.

    The problem is there is no enforcement of existing laws in this area. We don't need more laws; we don't need more goofy schemes. We need resources dedicated towards educating and funding law enforcement authorities on how to catch and prosecute spammers.

  18. Slashdot would be the first to Bitch if... by Picass0 · · Score: 4, Insightful

    If the US Govt. Imposed a draconian policy regarding spam and the technology was dicey or imposed on end user rights (such as no more anonimity) you would see the admin here go apeshit.

    Michael also seems to think that whatever is decided in the US will magically become policy for the whole net. After all, if the US govt says you must comply with a no spam list, we must expect the rest of the world is going to suddenly stop sending spam. Right?

  19. Commentary by Michael by Scott+Richter · · Score: 5, Insightful
    The moral of the story is: never try.

    No, Michael, it's not. What they said was

    'A national do-not-e-mail registry, without a system in place to authenticate the origin of e-mail messages, would fail to reduce the burden of spam and may even increase the amount of spam received by consumers,'

    And quite frankly they're right. Additionally, it's not in the FTC's jusrisdiction, I don't believe, to change the SMTP protocol. As such, they do not have the ability to actually solve the problem.

    Given the degree to which the FTC fought for the Do-not-call registry, I think they deserve more credit than Michael's snide editorial remarks. They also deserve credit for having the courage to admit that they can't solve the problem under the current situation and providing a damned good reason why, as well as leaving bad enough alone and not doing something simply for the sake of doing it. Sometimes, inaction is the best course, and it takes maturity to realize it.

    Right now, setting up a do-not-email registry would be as smart as responding to the "Please remove me" addresses. In short, it would be absolutely stupid.

    So let's leave the FTC alone, shall we?

  20. The biggest problem by Rathian · · Score: 4, Insightful
    With spam laws is enforcement. CAN-SPAM is nothing more than a sad joke without the staff and money to enforce all of it.

    I have some asswipe forging my domain right now which is a form of identity theft. I could call the FBI, but who would bother answering my call. Forget the local police department.

    Fact is that eliminating spam is a 3 part solution:
    1. Technical, make it such that it cannot be transmitted or very easily filtered with minimal to no false positives.
    2. Laws, make it illegal to send spam
    3. Enforce laws - Ralsky and others like him should hang. They know what they are doing pisses off millions, they are nothing but sociopaths and should be treated as such. Spammers should pay 2-4x the money spent to investigate and prosecute them.
    It's sad, spammers IMHO are doing far more damage that Mitnick ever did or could. Yet they are not being taken down as publically or as hard as he was.

  21. This is pure flamebait by Reality+Master+101 · · Score: 4, Insightful
    The moral of the story is: never try.

    GAAAAAH. Sometimes, Michael, you are the biggest idiot.

    Did you ever stop to think that sometimes just doing "anything" is not the best way to go? Can we please give the government a little credit for not jumping in and just "doing something" to score political points?

    Creating a do-not-spam list just creates a beautifully maintained list of people to spam.

    --
    Sometimes it's best to just let stupid people be stupid.
  22. One-way hash? by Phil+Wherry · · Score: 4, Insightful

    This seems like a near-perfect application for a one-way hash of the email address. Rather than publishing a list of do-not-spam email addresses, publish the SHA-1 and/or MD5 hashes of the email addresses. It's then possible to confirm that a given email address is on the list, but it's not possible to convert the list into a set of usable email addresses. Am I missing something obvious here?

  23. Moral of the story? by geek · · Score: 4, Insightful

    "The moral of the story is: never try"

    Um no. The moral of the story is do not kick a dead horse. Email as it is needs a fundemental change. I mean, come on, clear text passwords over a network? You can sniff out 99.9% of all email traffic on the internet easily. Nevermind how easy it is to spam and exploit the vast majority of systems out there. Yes I know email can now be encrypted, blah blah blah, almost no one on the net knows what that means let alone knows how to use it.

    I personally do not want my tax money being spent kicking a dead horse. They would spend millions on a system that's unmanagable at best when they could instead spend that money on developing a better email system.

    The moral of the story perhaps, is fiscal responsibility. While not kicking a dead horse and picking their battles wisely they will save us tax payers a fair amount of money. This is probably the best news I've heard all week.

  24. Re:I Don't Want the Gov't Telling Me What's Spam! by geoffspear · · Score: 4, Insightful
    No one has a right to advertise their political opinions, products, etc. by sending me email about them. The fact that filtering solutions exist doesn't confer that right upon anyone, either.

    This is like arguing that marketing companies or political candidates should be allowed to send people to break into your house to tell you to buy their product or vote for their candidate, and pointing out that you could secure your house by buying better locks and putting bars on your windows if you don't want them there.

    If you want to advertise, take out ads on billboards, TV, magazines, or even web sites. But stay the hell off my personal phone, fax machine, and email account.

    --
    Don't blame me; I'm never given mod points.
  25. Obligatory anti-spam checklist by spoonyfork · · Score: 5, Funny
    Your post advocates a

    (*) technical (*) legislative ( ) market-based ( ) vigilante

    approach to fighting spam. Your idea will not work. Here is why it won't work. (One or more of the following may apply to your particular idea, and it may have other flaws which used to vary from state to state before a bad federal law was passed.)

    (*) Spammers can easily use it to harvest email addresses
    ( ) Mailing lists and other legitimate email uses would be affected
    ( ) No one will be able to find the guy or collect the money
    ( ) It is defenseless against brute force attacks
    (*) It will stop spam for two weeks and then we'll be stuck with it
    ( ) Users of email will not put up with it
    ( ) Microsoft will not put up with it
    ( ) The police will not put up with it
    (*) Requires too much cooperation from spammers
    (*) Requires immediate total cooperation from everybody at once
    ( ) Many email users cannot afford to lose business or alienate potential employers
    (*) Spammers don't care about invalid addresses in their lists
    ( ) Anyone could anonymously destroy anyone else's career or business

    Specifically, your plan fails to account for

    ( ) Laws expressly prohibiting it
    ( ) Lack of centrally controlling authority for email
    (*) Open relays in foreign countries
    ( ) Ease of searching tiny alphanumeric address space of all email addresses
    ( ) Asshats
    (*) Jurisdictional problems
    ( ) Unpopularity of weird new taxes
    ( ) Public reluctance to accept weird new forms of money
    ( ) Huge existing software investment in SMTP
    ( ) Susceptibility of protocols other than SMTP to attack
    ( ) Willingness of users to install OS patches received by email
    ( ) Armies of worm riddled broadband-connected Windows boxes
    ( ) Eternal arms race involved in all filtering approaches
    ( ) Extreme profitability of spam
    ( ) Joe jobs and/or identity theft
    (*) Technically illiterate politicians
    ( ) Extreme stupidity on the part of people who do business with spammers
    (*) Dishonesty on the part of spammers themselves
    ( ) Bandwidth costs that are unaffected by client filtering
    ( ) Outlook

    and the following philosophical objections may also apply:

    ( ) Ideas similar to yours are easy to come up with, yet none have ever
    been shown practical
    (*) Any scheme based on opt-out is unacceptable
    (*) SMTP headers should not be the subject of legislation
    ( ) Blacklists suck
    (*) Whitelists suck
    ( ) We should be able to talk about Viagra without being censored
    ( ) Countermeasures should not involve wire fraud or credit card fraud
    ( ) Countermeasures should not involve sabotage of public networks
    ( ) Countermeasures must work if phased in gradually
    ( ) Sending email should be free
    (*) Why should we have to trust you and your servers?
    ( ) Incompatiblity with open source or open source licenses
    ( ) Feel-good measures do nothing to solve the problem
    ( ) Temporary/one-time email addresses are cumbersome
    (*) I don't want the government reading my email
    ( ) Killing them that way is not slow and painful enough

    Furthermore, this is what I think about you:

    ( ) Sorry dude, but I don't think it would work.
    ( ) This is a stupid idea, and you're a stupid person for suggesting it.
    ( ) Nice try, assh0le! I'm going to find out where you live and burn your house down!
    --
    Speak truth to power.
  26. Ah Slashdot by twfry · · Score: 4, Insightful
    Option 1) The US government creates a do not spam list.

    Result - Slashdot complains about how ignorant and evil the US government is.


    Option 2) The US government concludes a do not spam list will cause more problems and the correct solution is to fix email itself.

    Result - Slashdot complains about how lazy and evil the US government is.

  27. Proper technology? by Rai · · Score: 4, Funny

    They argue that the proper technology is not yet in place

    Unless I'm mistaken, we've had laser-guided missiles since the first gulf war which is all the technology we need to deal with spammers. It didn't take some Navy supercomputer to find Eric Head or Scott Richter and any half-assed napalm-delivery system would easily show them the error of their ways.