Slashdot Mirror


UK ISPs to Shut Down Spamvertised Websites

JebuZ writes "The Register is currently reporting that UK ISPs are targeting ecommerce websites run by spammers in a new 'get tough' policy on junk mail. ISPs belonging to the London Internet Exchange (LINX) have voted through a code of practice which gives them the mandate to shut down websites promoted through spam, even if junk mail messages are sent through a third-party or over a different network. The move is intended to remove the financial incentive to send spam." There's also a BBC story.

299 comments

  1. How long... by FatRatBastard · · Score: 4, Insightful

    ... until people start spamming using their competition's address to facilitate them getting thrown off their host?

    1. Re:How long... by letxa2000 · · Score: 2, Insightful
      My thoughts exactly. This seems like a good idea as long as the ISPs take a serious look at the accusation to make sure the site was really spamvertised and not just the target of some malicious competitor or a customer with a grudge, etc.

    2. Re:How long... by ackthpt · · Score: 3, Interesting
      .. until people start spamming using their competition's address to facilitate them getting thrown off their host?

      Or

      Address of 0wn3d computer

      Offshore server

      Doesn't do any good for those which run scripts on open or 0wn3d servers and forward email, i.e. phishing

      --

      A feeling of having made the same mistake before: Deja Foobar
    3. Re:How long... by Dark+Lord+Seth · · Score: 4, Insightful

      I'd assume that they'd check things out first. Besides, spamvertised websites are rather easy to recognize: I think 95% of all *.biz and *.info sites are spamvertised sites. There's also this whole thing about using fake names, no contact information, companies based in countries where the law isn't taken very seriously or where the law allows spamming, etc.

    4. Re:How long... by dave420 · · Score: 3, Funny

      It's going to be investigated, not just automatically booted off their host by a postfix script who grepped the URL from an email... :)

    5. Re:How long... by osgeek · · Score: 4, Insightful

      Not long. Not long at all.

      Worse yet, spammers will put random innocent web sites in spam just to poison the process.

      They'll do it. It's an obvious way to get ISPs to stop blocking web sites.

    6. Re:How long... by McDutchie · · Score: 5, Informative
      ... until people start spamming using their competition's address to facilitate them getting thrown off their host?

      They have been doing that for years. It's called a joe job, after the first victim of such a scam. These are generally quite easy to detect, though, so they do not generally lead to the victim's website being shut off. The main damage is in the annoyance and the bounces and responses received by the victim, which constitute something akin to a DDoS attack.

      In any case, the existence of joe jobs is no reason to penalize actual spammers and stop them from profiting from their spam runs. The only way to do that is shutting off their websites.

    7. Re:How long... by Short+Circuit · · Score: 2, Insightful

      That would also work to get non-spamming businesses to warm up to spam. Think about it; who'd turn down free advertising?

      (Until, of course, they start getting hate mail, both electronic and postal.)

    8. Re:How long... by LiquidCoooled · · Score: 1

      You would be pretty pissed off if your competitor actually gained loads of sales because of it!

      --
      liqbase :: faster than paper
    9. Re:How long... by Anonymous Coward · · Score: 0

      Hmmm...

    10. Re:How long... by The+Ultimate+Fartkno · · Score: 4, Funny


      "No! I swear I've been framed! I would *never* send out spam for my site. I'm totally legit! We here at xhegfr.24873xx.pills4u.com are a 100% above-board business!"

    11. Re:How long... by NickFitz · · Score: 1

      RTFA:

      ...the mandate to shut down websites promoted through spam, even if junk mail messages are sent through a third-party or over a different network

      In other words, no matter how the spam for getcheapviagra.co.uk is distributed, getcheapviagra.co.uk is going to be denied hosting by LINX members. Ergo, they can't sell anything.

      Obviously they can host their site offshore, hence the additional comment in TFA that "...the success of this new initiative depends on LINX pressuring ISPs overseas into adopting more rigorous practices". It may only be a first step, but every little helps...

      --
      Using HTML in email is like putting sound effects on your phone calls. Just say <strong>no</strong>.
    12. Re:How long... by njfuzzy · · Score: 1

      This happened to me once. Fun times. :(

      --
      My Photography - http://ian-x.com
      The Deathlings (comic) - http://thedeathlings.com
    13. Re:How long... by Anonymous Coward · · Score: 2, Insightful
      ...seems like a good idea ...

      Next they'll block P2P. Still a good idea?

      Then they'll block people running their own mail servers (helps spam again).
      Then they'll block people running any server (like the old cable modem guys). after all, you could serve obscene copyrighted pr0n from a web server.

      Do we really want ISPs running around blocking whatever they don't like and scanning/filtering on content (need to easily bust P2P guys). I think this is just a first stop to locking down more of the internet.

    14. Re:How long... by Khasmo · · Score: 1

      Actually that's exactly what it is good for. The point is that it doesn't matter where the email is coming from, you block the site being advertised by the spam. At some point they have to direct you to a website that will accept your credit card. Block that site and they can't make money.

      Of course, they can just provide you with an 800 number instead. No way to stop that short of stopping the initial spam. Then again. providing an 800 number is nice clue for spam filters that it IS SPAM.

      Biggest flaw in this idea is that it requires some sort of overview process to avoid what the grandparent suggested.

    15. Re:How long... by harlows_monkeys · · Score: 3, Informative
      They have been doing that for years. It's called a joe job, after the first victim of such a scam

      Not quite. Assume sites X and Y, spammer S that is hired by X (or may be X), user J, and another spammer, T. J is not connected with X, Y, S, or T. A joe job is when S sends mail advertising X, setting the from address to J.

      What the original poster is talking about is the case where Y hires T to send spam advertising X. If T sets the return address to J, then that will also be a joe job, but that is not relevant here.

    16. Re:How long... by gregmac · · Score: 3, Interesting

      Then again. providing an 800 number is nice clue for spam filters that it IS SPAM.

      Of course, like most of the people I deal with at work, my email signature includes our 1-800 number.

      --
      Speak before you think
    17. Re:How long... by McDutchie · · Score: 2, Interesting
      What the original poster is talking about is the case where Y hires T to send spam advertising X.

      I know, but that too has come to be known as a joe job (at least in the news.admin.net-abuse.email newsgroup), since it's done with the same objective: to get X shut down or to harrass them away from the net. It's generally equally ineffective.

    18. Re:How long... by robertjw · · Score: 4, Interesting

      They have been doing that for years

      Actually, this is different. They are going to shut of sites that are advertised in the spam, so all a spammer has to do is send out a 'free' promotion for a valid website. The addresses used in the spam mail are irrelevant, what they are looking for is site addresses included in the body of the spam.

      This is already going on. Last month I got a notification from our ISP at work of a possible spam violation (a very annoying, threatening notification) on our site. It appears that a spammer included our domain name in one of his messages and our ISP was alerted. I explained the we did NOT send out the message, was NOT selling viagra and did NOT want the traffic generated from the spam message, so we still have a website and that was the end of it.

      What happens if a spammer, rather than just including my address, crafts a marketing message promoting my site. Might be a little harder to convince my ISP that I didn't initiate the spam.

    19. Re:How long... by penguinoid · · Score: 2, Insightful

      Well, at some point even a spamvertized site must have contact information... they will tell you where to send your dollars.

      --
      Don't waste your vote! Vote for whoever you want, unless you live in a swing state it won't matter anyways
    20. Re:How long... by dirk · · Score: 1

      I think you're not understanding. You send an email actually advertising the other site. It lists the current deals at site X (easily found from their web site) and directs people to their site. Then site X gets shut down by their ISP for spamming, hopefully driving more people to you're operational site. Since there is no way to tell where the spam truly originated from (especially if a 3rd party is used to send it) this will be an easy way to take down up and coming companies.

      --

      "Information wants to be expensive" - Stewart Brand, the same guy who said "Information wants to be free"
    21. Re:How long... by Anonymous Coward · · Score: 0
      I want that they shutdown Microsoft & Co.

      Because i'm spamming with the publishing of Microsoft.

      open4free ©

    22. Re:How long... by ackthpt · · Score: 2, Interesting
      Of course, they can just provide you with an 800 number instead. No way to stop that short of stopping the initial spam. Then again. providing an 800 number is nice clue for spam filters that it IS SPAM.

      Not just websites, like you say, 800 or worse toll numbers. For lack of a known term for such -- foll this scenario:

      Bob's computer gets 0wn3d while he's making tea, or he simply never turns it off.

      Colin 0wns Bob's computer and sets up a quick webpage on it and sends out spam, directing readers to the current ip address for Bob's computer.

      All that's needed is maybe 20 minutes... people follow the link in the email, come up on a page on Bob's computer and submit a CC or other vital personal/financial info.

      Colin's app running on Bob's computer forwards to a mailbox elsewhere in the world.

      Bob may find his computer's been 0wn3d and cleans it up, but wtf, banning the ip address, unless it's fixed (which is unlikely these days) is pointless.

      There's undoubtably tens of thousands like Bob to do this to and they don't necessaryly reside in the UK

      The point of this is, enough spam and enough fish caught in the trap in a short time presents a problem and is a possible direction for spammers and scammers to go.

      --

      A feeling of having made the same mistake before: Deja Foobar
    23. Re:How long... by RWerp · · Score: 0

      Sure. If someone steals my car and commits a crime with it, I lose my property. After all, it was my fault that I let my car to be stolen, wasn't it?

      --
      "Long run is a misleading guide to current affairs. In the long run we are all dead." (John Maynard Keynes)
    24. Re:How long... by Anonymous Coward · · Score: 1, Interesting

      if you leave the keys in it. EXACTLY

      most laws require, some sort of diligence.

      if the thief had to hotwire the car, then there was some sort of effort taken to prevent that

      but if the keys are in the ignition, that is YOUR PROBLEM.
      (and the law already is set up that way in a lot of places in regards to cars)

      you report your car stolen and the keys were in it (even not in the ignition) the cop rights you a ticket. and the insurance companies can have a field day on that one too.

    25. Re:How long... by InfiniteZero · · Score: 2, Insightful
      ... until people start spamming using their competition's address to facilitate them getting thrown off their host?
      It will NOT happen.

      Remember two things. 1. The only incentive for spammers and spamvertised businesses to spam people is money. 2. Almost all spamvertised businesses resort to spamming because they don't have any significant market share and don't have resources for conventional marketing.

      So, if spamvertised businesses start spamvertising their competitors, it may (or may not) hurt competitors, but it will definitely NOT make any money for themselves.

      The only businesses that could potentially benefit from this are those established companies spamvertising their major competitors (e.g., Coke vs. Pepsi). But then, few (if any at all) established companies use spamming as a marketing channel.

    26. Re:How long... by Dashing+Leech · · Score: 3, Insightful

      I'm not clear on how the difference can be detected. If spammer S sends out spam advertising site X, how is anybody going to know if X had hired S (legitimate spam) or competitor Y hired S (a joe job). Basically, you have to know who hired the person doing the spam. Will this come down to an interrogation of spammer S, review of their financial and phone records to find some connection to X or Y? Even that is fairly easy to trick by having S get X to phone them for some reason, and/or have some legitimate financial transaction between them. Perhaps there's something I'm missing that can show Y is really behind the spam.

    27. Re:How long... by operagost · · Score: 1

      That would work if 99.999% of mail admins didn't realize that From: and Reply-To: email headers are easily forged, so the Return Path: and Received: are what you should use to determine the origin.

      --

      Gamingmuseum.com: Give your 3D accelerator a rest.
    28. Re:How long... by 1u3hr · · Score: 1
      . until people start spamming using their competition's address to facilitate them getting thrown off their host?

      Their competitor selling Viagra? I think an ISP will not pull an established client selling a normal product because of a forged spam. If it's a company that opened the site two days before with a postbox number address, they will probably pull the plug. The company impersonated might make an issue of it and pursue the spammer for fraud or worse, which is all to the greater good.

    29. Re:How long... by Tony-A · · Score: 1

      I'm not clear on how the difference can be detected

      If it were clear then mechanincal intelligence would suffice.

      I send you this file to have your advice.
      Could be legitimate, but only if the file only makes sense coming specifically from me to specifically you and if I would be asking specifically for advice. Legitimacy of messages depends critically on context. Why is this messager here? Now?

      What would be harder is to defend against:
      Subject: Hey stupid.
      Body: You forgot something.
      Attachment: payload.

    30. Re:How long... by jaeson · · Score: 1

      These are generally quite easy to detect, though, so they do not generally lead to the victim's website being shut off.

      If they shut down a website "even if junk mail messages are sent through a third-party or over a different network", then how do you propose someone detects who originated the message? Was it the site that got shut down? or one of their competitors? If the traffic came from a 3rd party network how would you ever find this out?

    31. Re:How long... by JoAnywhere · · Score: 1

      How is this post insightful.

      From the BBC Story

      "Link [sic] acknowledged that there could be problems enforcing the code if one spammer tried to get a rival shut down by sending junk mail on their behalf."

      the post is redundant. RTFA!!

      Regards
      Jo

    32. Re:How long... by RWerp · · Score: 1, Insightful

      Pursuing the analogy, leaving the keys in the car is like posting your root password on your website. Running an unpatched Windows PC is like trusting the manufacturer of the car that his locks are good, when they aren't.

      --
      "Long run is a misleading guide to current affairs. In the long run we are all dead." (John Maynard Keynes)
    33. Re:How long... by Anonymous Coward · · Score: 1, Interesting

      Is the site in question selling something or asking for CC info? Is it on a residential-type connection? Is it using an IP address or randomized hostname instead of a legitimate domain name? Is it a single page with a submit form and no other links?

      Yes to any of these? KILL THE FUCKER!
      On the .0001% of false positives, the owner can call up and explain that they've been falsely targeted, and have the account reinstated, maybe with a small credit for their hassles.

      This is NOT hard, it just requires a person to look at the site to make a final judgement call if there's not an obvious positive hit.

    34. Re:How long... by CXI · · Score: 1

      That's the first thing I thought of too...

    35. Re:How long... by soliptic · · Score: 1
      Assume sites X and Y, spammer S that is hired by X (or may be X), user J, and another spammer, T. J is not connected with X, Y, S, or T. A joe job is when S sends mail advertising X, setting the from address to J.

      What the original poster is talking about is the case where Y hires T to send spam advertising X. If T sets the return address to J, then that will also be a joe job, but that is not relevant here. I've just read that about four times and still can't follow it. *stoned*

    36. Re:How long... by maximilln · · Score: 1

      Bob may find his computer's been 0wn3d and cleans it up, but wtf, banning the ip address, unless it's fixed (which is unlikely these days) is pointless.

      Bob calls his ISP, his ISP sees that Bob doesn't have a business account, the ISP also sees Bob's usage and finds more softcore surfing than web hosting, everything is back to normal.

      Besides. I'm not worried. The people who know how to pwn my systems have better things to do than send out junk spam.

      --
      +++ATHZ 99:5:80
    37. Re:How long... by Anonymous Coward · · Score: 0

      Your argument is completely illogical. How can you conclude that spamvertising a competitor will "definitely NOT make any money" when "they don't have any significant market share"???

      Getting a competitor with a larger market share shut down will increase a company's market share, and thus make more money.

    38. Re:How long... by maximilln · · Score: 1

      Might be a little harder to convince my ISP that I didn't initiate the spam

      You actually do have a business that you're running from your website. It shouldn't be difficult to figure out whose toe you stepped on recently unless you really feel that your product is so unique and groundbreaking that you're cutting into the mafia's profit margin.

      For users this is nothing but a blessing. w00t!

      --
      +++ATHZ 99:5:80
    39. Re:How long... by rokzy · · Score: 1

      I hope you don't code with those variable names... or even worse you're a fortran programmer who doesn't use "implicit none" !?!?!?

    40. Re:How long... by Anonymous Coward · · Score: 0

      goDaddy did EXACTLY this to one of our domains: someone spammed the site via usenet to a bunch of groups. Didn't have a thing to do with us, and goDaddy INSTANTLY pulled the plug, with no proof other than complaints.

      To say the least, I was NOT impressed, and when I phoned them and actually got a techician on the line from their *abuse* department, he had NOTHING to say when i impressed upon him the idiocy of the the entire ordeal. According to what they did, goDaddy can, and will, suspend your site (with no warning) if ANYONE spams a website that is hosted by goDaddy - whether you did it or not. Plus you are responsible for the fees to re-signup after your suspension, all for doing nothing.

      So people, if you have a website or domain you don't like , and it's hosted by goDaddy, now you know how you can easily, and within 24hours, get the site removed. It's as simple as that

    41. Re:How long... by Anonymous Coward · · Score: 0

      Not long at all. This is actually a very effective method of getting a competitors website shut down. It's the inclusion of 3rd parties that makes this "policy" worthless. Its not hard to get an account or two in Russia, Romania, or even Amsterdam. Send all the mail you want to your competitor and eventually they will be shut down. They can say they are being framed all they want. They have no way to prove they are not the ones with the Russian ISP account sending mail. Its stupid.

      When are people going to wise up? SMTP is an insecure protocol. There should be no "war on spam", there should be a "war on SMTP". Lets get a clue and work on a replacement. It won't happen though, any replacements that have been developed always have some jack-ass company trying to "own" them, so no one else will co-op to give them control. How much IM spam do you get? I am sure you have gotten some, but 1000 a day? No. But who wants to go through another IM war?

      You want to know what works? Unsubscribe links. Use them! Yes, there are a-holes out there that refuse to unsubscribe you, but 90% of the mail you get in your inbox, the unsubscribe link WILL work. Spammers don't want to waste their time mailing people that won't click on their link. Stop wasting your time complaining to your ISP, their ISP, your moms ISP and follow the link. Its not that hard.

      The best defense, get a disposable e-mail address. Qmail makes it easy, set up a .qmail-default file and you can send mail to joe-anything@somewhere.com. Change "anything" to whoever, or wherever you are giving out your address, start getting spam to that address, filter it out. Filters work, they work very well. If they didn't work, they wouldn't be using l337 sp34k.

      Last, be nice to the good spammers, give the bad spammers hell. Unsolicited anything is not going to go away. If you had a solicitor come to your door to try to sell you something, you would probably say, "no thanks" politely. If you had a "no solicitors" sign on your door and you got a solicitor, you would probably be a little less polite.

      Lets face it, E-mail can be a valid advertising medium. I get e-mail from all sorts of companies, from ThinkGeek to Kraft foods. Yeah, this stuff isn't always unsolicited, but you don't exactly have a "no solicitors" sign on your mail box either. Its a good thing SMTP has a standard definition for this, ohh wait, it doesn't.

      I tell you this as someone that sends UCE. The only way to stop "SPAM" is to treat the problem, not the symptoms. If you get UCE, crying about it isn't going to prevent the message from having ever hit your inbox. Hit the remove link, they DO work. If someone still send you mail, info their ISP they will not remove you from their list. If the problem persists, inform the FTC. http://www.ftc.gov/spam/ Believe it or not, the CAN-SPAM act is on *your* side. Last, you the geeks need to be working to FIX the inherent problems with SMTP and the e-mail system as a whole. So get out there and support SPF or a similar system. UCE won't be under control until the e-mail system is changed.

    42. Re:How long... by maximilln · · Score: 1

      Not long at all. This is actually a very effective method of getting a competitors website shut down.

      If the business projects the image that it might be aided by spam then I see no problem. Maybe the web will clean up. At the same time any competition spam that tries to target a legitimate business will cause banks and credit companies to take a closer look at marketing firms. This is a win-win all around.

      They have no way to prove they are not the ones with the Russian ISP account sending mail

      So this could potentially lead to more wars between teenage script kiddies. Darn.

      there should be a "war on SMTP"

      No, there shouldn't. Any replacement system for worldwide email delivery that could possibly be written would have its exploitable flaws There are enormous logistical problems in coordinating the effort it would take to write it for all OSs on all architectures and then try to deploy it.

      How much IM spam do you get? I am sure you have gotten some, but 1000 a day? No. But who wants to go through another IM war?

      It would be extremely easy to detect and respond to an IM abuser. IM has a hard-coded delineation between two message types: advertising and other. If anyone would attempt to SPAMvertise on IM clients corporate America would kill them. Corporate America also finds it easier to try and antagonize open source IM clients when they should be watching who they give their money to. Who makes SPAMming profitable? Where does its money come from? Since corporate America holds all the money then its management is their issue. I don't know why they keep blaming users who can't be expected to know much better. It's not a secret that no one reads EULAs.

      You want to know what works? Unsubscribe links. Use them!

      "Hey Mike, that page for the unsubscribe link, did you name that .asp?57485287647823CDFGD67487265842+2e1 or 2e2?"
      "+2e1."
      "Crap. That's the opt in algorithm."
      "*whistle innocently* Looks like 2e2 now."
      "Huh."
      PROFIT!

      The only way to stop "SPAM" is to treat the problem, not the symptoms

      The symptom is the increased flow of malicious and misleading mail being delivered. The problem is that someone is making spam monetarily profitable. Someone with money must know something. Why should this be my Mom's fault just because she doesn't love her computer?

      The other option is that every spammer lives like Timothy Leary did. I doubt it. Most of them probably have pretty little houses in pretty little neighborhoods. _SOMEONE_ must know something.

      --
      +++ATHZ 99:5:80
    43. Re:How long... by Anonymous Coward · · Score: 0
      Next they'll block P2P. Still a good idea?

      What does P2P have to do with spam?

    44. Re:How long... by halowolf · · Score: 1
      I went to the LINX website to get information on their new "initiative" such as how they intend to stop abuse of this system by competitors to a company, what rights of appeal that exist to their arbitrary actions, how do companies accused of spamming get their domains off of blocked lists.

      I am in support of initiatives that will help reduce spam, but I do not support initiatives that "feel" like vigilante actions without a right to appeal, and that have steps built in to ensure that the actions they take are quite proper. Perhaps I might write them an email when I have time today to see if they do actually have safeguards built in.

      On the LINX website, after I refused their applet permission to run on my Mozilla, Mozilla promptly stopped responding, as if there was a window behind my browser stealing the focus from Mozilla, but I couldn't get behind it to check :(.

    45. Re:How long... by jnicholson · · Score: 1
      If T sets the return address to J, then that will also be a joe job, but that is not relevant here.
      That only makes it a Joe Job if the trail in the headers gives a convincing impression that J sent the mail, and that the purpose of sending the mail is to inconvenience "J" by getting him/her accused of sending spam.

      Making spam look as though it benefits someone who happens not to be the sender is the essence of a Joe Job, not the fact that a fake return address is supplied (since a fake return address is standard in spam nowadays).

      --
      "Do not drill any holes in your cat - it will not like it."
      -- Nick Davies
    46. Re:How long... by jnicholson · · Score: 1
      When spamcop and various other anti-spam organisations started making serious inroads into getting spamvertised sites shut down last year, spammers started executing DOS attacks against the various anti-spam servers.

      There is therefore demonstrably a second motivation for spammers - defense of the continued "usefulness" of spamming.

      If spammers think this scheme has a chance of succeeding, they will attempt to undermine it - by the use of such tactics as these Joe-Jobs, and others we haven't thought of yet - until such time as the scheme is abandoned. If there isn't a defense against this in the scheme, it will probably fail almost immediately. Hence it's a valid question for those interested in seeing the scheme succeed.

      --
      "Do not drill any holes in your cat - it will not like it."
      -- Nick Davies
    47. Re:How long... by Anonymous Coward · · Score: 0

      If the business projects the image that it might be aided by spam then I see no problem. Maybe the web will clean up. At the same time any competition spam that tries to target a legitimate business will cause banks and credit companies to take a closer look at marketing firms. This is a win-win all around.

      This doesn't make much sense. If you make widgets, and you SPAM your competitors websites, they will be shut down. If they are shut down, you are now have a larger market share. It has nothing to do with marketing firms, or even marketing. It has to do with you turning the UK against your competitors because they are hell bent on taking out anyone that looks like they might be associated with SPAM. They make it to easy to take out a legitimate business.


      So this could potentially lead to more wars between teenage script kiddies. Darn.

      I don't know what script kiddies you are referring too. This is corporate sabotage. Even if script kiddies were involved, it would be one way. There is no war.


      No, there shouldn't. Any replacement system for worldwide email delivery that could possibly be written would have its exploitable flaws There are enormous logistical problems in coordinating the effort it would take to write it for all OSs on all architectures and then try to deploy it.

      Right, and telnet shouldn't have to be replaced by SSH. It is to difficult and there might be exploitable flaws.


      It would be extremely easy to detect and respond to an IM abuser.

      That is the point. It is easy, and you get no spam. It was built to be easy. SMTP was developed at a time when "SPAM" wasn't a concept, and it refuses to change.


      "Hey Mike, that page for the unsubscribe link, did you name that .asp?57485287647823CDFGD67487265842+2e1 or 2e2?" "+2e1."
      "Crap. That's the opt in algorithm."
      "*whistle innocently* Looks like 2e2 now."
      "Huh."
      PROFIT!


      Right, of course, if a couple of bits are switched around it is instant profit. I hope no one else figures this out.


      The symptom is the increased flow of malicious and misleading mail being delivered.

      There is also an increased flow of legitimate mail being delivered. There are laws in place to prosecute scam artists. This is what makes a sender ID system critical. But ohh no, there would have to be a change to the way mail is delivered.


      The problem is that someone is making spam monetarily profitable.

      Someone isn't making it profitable, it *is* profitable. Spam is advertising, and advertising works. It gets a product that people might want in front of their eyes, and if they like what they see they buy it. If they don't, they don't buy it. If you don't want to be bothered, follow the unsubscribe link.

    48. Re:How long... by maximilln · · Score: 1

      This doesn't make much sense. If you make widgets, and you SPAM your competitors websites, they will be shut down

      If spam gets sent which doesn't promote the target it will easily be indentified as a spoof. If you try to spoof a legitimate business you will be dealt with swiftly and severely. If you spam a product which could seriously be relying on spammers then the world is cleaner for it. If you're selling a product which could seriously be aided by spamming and somone spams you competitively then the world is cleaner for it when you get shut down.

      They make it to easy to take out a legitimate business.

      If you spam a legitimate business you will be dealt with swiftly and severely. Unless you do it properly, as a shake-down, at which point the two parties know each other well enough where it would be a legal issue over real dollars. In that case, why not ask the banks and credit companies to take care of it?

      SMTP was developed at a time when "SPAM" wasn't a concept, and it refuses to change.

      You cannot create a world-wide system which handles the length and breadth of the load that SMTP handles and still incorporate a perfect delineation between two types: advertising and non-advertising. Unless you favor corporate ownership of e-mail.

      Right, of course, if a couple of bits are switched around it is instant profit

      You don't know much about security, do you? Even in terms of "click this link to unsubscribe!" it's widely known that they're rigged. Probably in the right to sell the list of people who've unsubscribed.

      it *is* profitable

      What makes it profitable? Who pays the spammer? Who's his employer? Who funds them? Do they file a business tax return?

      --
      +++ATHZ 99:5:80
    49. Re:How long... by Anonymous Coward · · Score: 0

      However, if the manufacturer says "These locks are not as effective as they should be, you need to do this to fix that...." and you choose not to do it...

    50. Re:How long... by maximilln · · Score: 1

      Good luck getting Redmond to issue a release admitting to the full scope of that.

      --
      +++ATHZ 99:5:80
    51. Re:How long... by Antique+Geekmeister · · Score: 1

      Couple this with SPF, at http://spf.pobox.com, to implement more usable verification of the sending email address, and we can get some useful tracking of senders and blocking of the spammers.

      It sounds good, and is the sort of policy that US backbone connectivity providers should have taken up years ago. Unfortunately, the biggest backbone providers here are unwilling to act against spamming customers, such as UUnet not acting against their client ISP's that sell spam hosting setups.

    52. Re:How long... by Antique+Geekmeister · · Score: 1

      And 100% of al .biz email is pure spam. Just block it all, honestly.

    53. Re:How long... by einhverfr · · Score: 1

      Let's see if we can get the network connections for Bush's re-election campaign taken off-line by spamming the Canadians and British :-D

      J-k. But how long before this starts to happen?

      You see the response to a security incident can be as damaging as the threat. This is not the forum to go into particulars regarding airport security and the ways that it could be used to shut-down US airspace anonymously, but suffice it to say that when everyone is paranoid, that paranoia makes a powerful weapon.

      --

      LedgerSMB: Open source Accounting/ERP
    54. Re:How long... by the+real+darkskye · · Score: 1

      I've had one of my e-mail addresses joe job'd before now, its not fun or pleasent.
      Aside from the torrent of spam it caught, it was now getting undeliverable errors and abusive messages from people I'd never heard of.

      None of this happened before tiscali assimilated my previous isp however ...

      On the plus side, I now have a pop3 mail box with ~100 spams a day, since everyone who knows me knows not to use the address anymore, so my filters get trained on pure spam.
      Its the only reason I keep the address around really.

      --
      Music is everybody's possession.
      It's only publishers who think that people own it.
      Fuck Beta
      ~John Lenno
    55. Re:How long... by Anonymous Coward · · Score: 0

      If spam gets sent which doesn't promote the target it will easily be indentified as a spoof. If you try to spoof a legitimate business you will be dealt with swiftly and severely. If you spam a product which could seriously be relying on spammers then the world is cleaner for it. If you're selling a product which could seriously be aided by spamming and somone spams you competitively then the world is cleaner for it when you get shut down.

      Okay, you are missing the point here, I make widgets. My competitor makes widgets. I contact a foreign ISP, say in Russia. I proceed to promote my competitors website. Yes, maybe it brings them some business, but I know that the more UCE I send to their website, the faster they will be shut down. Under these policies, my competitors website is as good as dead. There is no way to prove it was me, and no way to stop me from doing it.


      You don't know much about security, do you? Even in terms of "click this link to unsubscribe!" it's widely known that they're rigged. Probably in the right to sell the list of people who've unsubscribed.

      Security? I guess not, I don't know what is insecure about an unsubscribe link. When you click on the link, does your credit card information get downloaded to their computers or something? There really is no such thing as a "rigged" unsubscribe link. It would be pointless, either you honor unsubscribes or you don't. 90% of spammers do. As far as the right to sell a list if someone has unsubscribed, I hate to break it to you, but your e-mail address had probably already been sold 10 times over again before you ever even saw the unsubscribe link. Just keep following the unsubscribe links, you *will* reduce the amount of spam you get.


      What makes it profitable?

      What makes advertising profitable? It costs you X amount of $'s to get your message to X amount of people. This in turns brings in X amount of $'s. As long you have more money coming in than going out, it is profitable.


      Who pays the spammer?

      Who pays the spammer? Each and every person that buys a product that has been promoted by spam. I can't believe so many people don't get this. They are profitable, because people read their spam, click on the advertisements, and buy the product. Like a regular affiliate, spammers usually get a percentage of the sales they are able to generate. A lot of companies set up their own mail campaigns, so there isn't even a middle man.


      Who's his employer?

      Most of them are self employed. Some e-mail marketing companies do have employee's, so I guess they employ themselves.


      Who funds them?

      Like any other business, they fund themselves until they are profitable.


      Do they file a business tax return?

      Again, like any other business, they file tax returns. They are normal people, with normal lives. They have legitimate businesses with real EIN numbers, and they do pay their taxes, as well as their bandwidth bills and server costs. They don't "steal your information", they are just trying to sell you a product.

      But don't get me wrong. There are a lot of BAD apples out there. Sadly, these are the people the don't honor unsubscribe requests, or don't have unsubscribe links at all. Eventually, this ends up being all that people see in their inbox. If you see a scam, report it to the FTC as soon as possible. They do their best to track these people down to end this sort of thing.

    56. Re:How long... by Khasmo · · Score: 1

      Yeah, I thought of this, but between the fact that it would not be secure(some people do check), ISPs (hopefully) watching for this kind of thing, SP2, and the limited upsteam speed of most 0wnabl3 systems; this may not be easy or profitable for spammers.

  2. SDOS by cryms0n · · Score: 1


    SDOS

    Spam Denial Of Service?

    Okay, that acronymn is pretty crappy. What can YOU come up with?

    1. Re:SDOS by Anonymous Coward · · Score: 0

      FreeDOS! Because it's free...after all, the costs of spam are borne by recipients, not senders.

      Teehee.

    2. Re:SDOS by julesh · · Score: 1

      Okay, that acronymn is pretty crappy. What can YOU come up with?

      ReVDoS - Reversed Vigalante Denial of Service?

    3. Re:SDOS by Anonymous Coward · · Score: 0
      Okay, that acronymn is pretty crappy. What can YOU come up with?
      STD -- Spammed To Death. :P
    4. Re:SDOS by dsbaha · · Score: 0

      SCer: Spam Cooker!

    5. Re:SDOS by The+UberDork · · Score: 0

      MSDOS Malicious Spam Denial Of Service

    6. Re:SDOS by nacturation · · Score: 1

      Withdrawal of UBE Spam Site -- WUSS.

      --
      Want to improve your Karma? Instead of "Post Anonymously", try the "Post Humously" option.
    7. Re:SDOS by 2sheds · · Score: 2, Funny

      Multiple Spammed Denial of Service?

      --

      Absit Invidia
    8. Re:SDOS by ctr2sprt · · Score: 5, Funny
      Duh. Multitarget Spamming Denial of Service.

      Another common type of attack, though not spam-related, is the Distributed Relay Denial of Service. A recent Slashdot story covered the Politically Conceived Denial of Service.

      And let's not forget the Systemwide Offensive Linking All Remote Internet Sites, a truly ghastly crime against nature, itself second only to the destructive powers of the terrorist organization known as the Society for the Literal Annihilation of Sites Hosting Data Oriented to Technology (motto: Nothing Ever Withstands the Society; Fear Our Response. Now Eventually Readers Duplicate Stories, Stories That Unfortunately Flopped the First Time, Horribly. Although Taco May Attempt to Tend Things, Evil Results Somehow.)

      This message brought to you by the Key Atomic Benefits Office of Mankind.

    9. Re:SDOS by Anonymous Coward · · Score: 0

      You done gone and used too many capitols there, Jebediah. Getcher blindfold on, you know what you have to do...

    10. Re:SDOS by Mycroft_VIII · · Score: 1

      I'm eigther mildly impressed or severly traumatized.

      Mcyroft

      --
      https://signup.leagueoflegends.com/?ref=4c3ed6600b6ea
  3. And this is interesting how? by toygeek · · Score: 4, Insightful

    The Web Hosting company I work for has been doing this for years. You spam, you lose. Simple. From our AUP:
    # UBE ("spam"): sending unsolicited bulk e-mail, using UBE, even if not sent from American Internet, to advertise (spamvertise) your site, providing any service to spammers such as mailboxes or Web sites.

    Is this just now catching on? Shocking.

    1. Re:And this is interesting how? by toygeek · · Score: 5, Interesting

      To those of you saying how bad this is because you could basically DoS your competitor by spamvertising their site, here is a basic explanation of how it should work.

      Complaints start rolling in. If its not caught soon, dsbl lists will start blocking the ISP. Is the spam legit? Lets contact the owner of the site. Not legit? Prove it. Usually, it IS legit. We investigate thoroughly and determine the source of said spam, and if its truly not legit spam, done by someone else (this *has* happened with us) then we notify spamcop or whatever list needed that an investigation has been done and its taken care of.

      So, with due diligence when it comes to enforcing policies such as this, and not a "shoot first ask questions later" attitude toward shutting off sites, then it becomes a reasonable policy.

    2. Re:And this is interesting how? by Short+Circuit · · Score: 1, Informative

      Except the more agressive (and popular) anti-spam organizations do take a "shoot first, ask questions later" policy.

      Oh, and

      "I don't even have a little dog Toto..."

    3. Re:And this is interesting how? by PsiPsiStar · · Score: 1

      Lets see. Legitamate spam is illegitamate. Right?

      --

      ___
      It's the end of my comment as I know it and I feel fine.
    4. Re:And this is interesting how? by MBAFK · · Score: 2, Insightful

      From the article: "Many UK ISPs already close 'spamvertised' websites under their terms of service", the same way you have apparently been doing it, so no they aren't 'just catching on'.

      Also from the article: "The new BCP (Best Current Practice) will raise the baseline, making the worldwide acceptable minimum standard tougher. We will be working to spread this standard beyond the UK and asking for support from the UK government at WSIS"

      This is the interesting bit - I seems like a step in the right direction. If enough ISPs band together like this it will be increasingly difficult (sure not impossible - but harder) for ISPs to offer shelter to spam outlets.

    5. Re:And this is interesting how? by Anonymous Coward · · Score: 0

      Damn... and I was considering ALL spam as legit.

    6. Re:And this is interesting how? by stratjakt · · Score: 2, Insightful

      Not legit? Prove it

      Ahh, the old guilty until proven innocent.

      You do know that it's usually logically impossible to prove a negative?

      Ie; Prove to me you have not used google.com today. Logs and caches dont mean anything, anyone could delete google references in them. Just because google's logs dont show your IP doesn't mean you didnt use a proxy or anonymizer, etc..

      --
      I don't need no instructions to know how to rock!!!!
    7. Re:And this is interesting how? by harlows_monkeys · · Score: 1
      Lets contact the owner of the site. Not legit? Prove it

      Suppose the spam comes from a network of trojaned Windows machines. Just how am I suppose to prove that I didn't hire some Polish or Russian cracker gang to use their trojan spamming network on my behalf?

    8. Re:And this is interesting how? by dirk · · Score: 1

      The problem I see is how do you prove you didn't send the spam? Proving you didn't do something that is basically untraceable is very difficult. Unless you can actually track the spam to a competitor there is no way to prove you didn't send it. Even if it came from a 3rd party, there is no way to see who paid that 3rd party (or who is controlling the 3rd party in the case of zombies). Even if they didn't send it, they still lose valuable resources trying to prove they didn't send it, and still may have their site shut down if they can't conclusively prove it. Either way, whoever really sent the spam gets what they were after.

      --

      "Information wants to be expensive" - Stewart Brand, the same guy who said "Information wants to be free"
    9. Re:And this is interesting how? by Anonymous Coward · · Score: 0

      on the flip side.
      your right to do business with the hosting company is not absolute.

      basically if you have competitors that play that dirty, it IS going to cause problems for the hosting company. (and no not all companies are that evil in competing)

      and the hosting company wants to protect itself. they have that policy so they dont get a bad reputation, and they are trying to protect that. yes that can be in conflict to a legit nonspamming customer that might get the short end. but in the end it is business (it sometimes is cold)

    10. Re:And this is interesting how? by eaolson · · Score: 2, Informative
      Except the more agressive (and popular) anti-spam organizations do take a "shoot first, ask questions later" policy.

      No, they don't. Most, like SpamCop list the origin of the spam. Not the spamvertized website, but the IP address of the sending mail server. The place where the spam is actually coming from, whether or not it's a joe-job.

      One of the few blacklists that lists web addresses (well, their respective IP addys) is SPEWS, which generally lists only after persistent spamming has been ignored by the hosting ISP. That's hardly "shoot first, ask questions later."

    11. Re:And this is interesting how? by Short+Circuit · · Score: 1

      Correct. But my point applies to the attitude of the aggressive and popular organizations...not specifically the services they provide.

      Should hosting services and ISPs take on a similar attitude, and some already do, then the service that was advertized will be targeted "to be on the safe side," before any sort of investigation takes place.

    12. Re:And this is interesting how? by Dimensio · · Score: 1

      Legitamate spam is illegitamate.

      "Legitimate spam" is an oxymoron. All spam is theft.

    13. Re:And this is interesting how? by mks113 · · Score: 1

      I got burned by SpamCop this week. Someone sent out Viagra spam that appeared to be from the IP of my site. There were no complaints to my hosting company, but I couldn't send mail to a SpamCop user's domain.

      My host looked things over, I looked things over, and we found no logical reason why the Spam appeared to originate at my site.

      I'm still a little concerned about it, but the host isn't.

    14. Re:And this is interesting how? by mikeswi · · Score: 1

      "Most, like SpamCop list the origin of the spam. Not the spamvertized website, but the IP address of the sending mail server. "

      Actually, someone reported a Kim Kommando newsletter as spam to Spamcop. My site happened to be featured in that issue. Two days later my host forwards a Spamcop complaint forwarded from the owner of their datacenter.

      A few issues here.
      First, Spamcop did report a so-called spamvertised site (mine)
      Second, it was a legitimate newsletter, not a spam. They managed to track down the owners of dozens of sites linked in the newsletter but never bothered to notice it wasn't spam
      Third, if I hadn't know my host's owner personally, I would have had my site shut down because they have no mercy for real spammers using their service.

      I do hope these UK ISPs are a little more careful than is Spamcop.

    15. Re:And this is interesting how? by eaolson · · Score: 1
      I got burned by SpamCop this week. Someone sent out Viagra spam that appeared to be from the IP of my site. There were no complaints to my hosting company, but I couldn't send mail to a SpamCop user's domain. My host looked things over, I looked things over, and we found no logical reason why the Spam appeared to originate at my site.

      I'm assuming you mean kijabe.org, or 209.152.169.186. Not currently listed at SpamCop or any or DNSBL.

      You say your hosting company received no complaints, so it's not clear what they "looked over." If your machine was sending to SpamCop's spamtraps, they would have receive no reports, because that would give away the spamtrap address.

      I'm not quite sure what you mean that it "appeared to be from your site." The receiving server should know the IP address of the sending server. I don't think that can be spoofed, but what do I know? Anyway, the receiver should know where the spam originated, or at least what the last hop was.

      Of course, if the receiving mail server somehow misrecorded the sending mail server's address, anything is possible. SpamCop can't really do much if it's given incorrect data.

      Without more detail, it's hard to judge what's really going on here.

    16. Re:And this is interesting how? by blane.bramble · · Score: 1

      Ie; Prove to me you have not used google.com today. Logs and caches dont mean anything, anyone could delete google references in them. Just because google's logs dont show your IP doesn't mean you didnt use a proxy or anonymizer, etc.

      Prove to me you did use Google today. Logs and caches don't mean anything, anyone could add google references in them. Juse because Google's logs show your IP doesn't mean someone else didn't use your IP address or computer.

    17. Re:And this is interesting how? by greenrd · · Score: 1
      Spamcop is a spam reporting service. It is not a substitute for investigating a complaint.

    18. Re:And this is interesting how? by maximilln · · Score: 1

      Except the more agressive (and popular) anti-spam organizations do take a "shoot first, ask questions later" policy.

      I've never used any of the products. From what I understand they're a filter which interacts with a mail daemon. I don't suspect we'll see SpamCopNAMED replacing BIND any time soon. Then again I don't work in the computer industry. I don't know how much large networks do with routing tables.

      --
      +++ATHZ 99:5:80
  4. Third-partying by Anonymous Coward · · Score: 3, Funny

    1. Start up competitor to /.

    2. Send out spam promoting /.

    3. See /. shut down.

    4. Profit!!!!

    1. Re:Third-partying by jonbryce · · Score: 5, Funny

      1. Start up competitor to /.

      2. Send out spam promoting /.

      3. See /. shut down.

      4. Have your site DOSed by a hoard of angry slashdotters

      5. Bankruptcy

    2. Re:Third-partying by SirLanse · · Score: 1

      Can we DOS spammers?
      Post some of the worst offenders and let us /. them.
      Make sure you have scripts turned off.
      I got spam from this domain today.
      Fire all of your guns at once and explode into space.

  5. Good idea, but... by Anonymous Coward · · Score: 1, Interesting

    what will just happen is that these fine folks (cough) will just move elsewhere. It's not like they haven't done it already.
    Since there is apparently less than 100 people worldwide responsble for sending out the spam, just find them and shoot say, half of them as a warning to others.

    1. Re:Good idea, but... by penguinoid · · Score: 1

      Since there is apparently less than 100 people worldwide responsble for sending out the spam, just find them and shoot say, half of them as a warning to others.

      You don't even need to go shoot them yourselves. Simply place their names, addresses, and pictures along with number of spam sent and references, and I am quite certain that some local assasin will volunteer for the job. I mean, assasins also recieve plenty of spam, do they not?

      --
      Don't waste your vote! Vote for whoever you want, unless you live in a swing state it won't matter anyways
    2. Re:Good idea, but... by misleb · · Score: 1

      It is called a "Joe-Job." It happens, but it isn't very common. I imagine there'd be a lawsuit. The Internet may be a commercial wasteland, but it isn't anarchy.

      -matthew

      --
      "THERE IS NO JUSTICE, THERE IS ONLY ME." -Death
    3. Re:Good idea, but... by pclminion · · Score: 1
      Since there is apparently less than 100 people worldwide responsble for sending out the spam, just find them and shoot say, half of them as a warning to others.

      I realize that you are, at some level, joking here, but this cry of "Kill the spammers" is really getting tiresome.

      Aren't there worse things in the world than spam? I could name specific examples, but that isn't my point: my point is, calling for the deaths of people who do nothing more than create a nuisance for everyone is quite childish. Whether joking or not. It's just stupid.

      It shows a lack of rational perspective on the world, the degree of which is monumental, and actually quite frightening.

    4. Re:Good idea, but... by Kwil · · Score: 1

      However the idea is still sound, it's just the degree it was taken to.

      Instead, find the spam-kings and queens and apply huge fines and a short jail term for "economic damage over one million dollars".

      Apply proportional fines to those companies that are the spammers customers for "encouraging behavior leading to.."

      Hell, these days you could probably even get it classed as a terrorist activity.

      Yeah, there'd be others popping up, but if you pursued this aggressively enough it'd be a significant deterrent both to those companies that don't do their research before hiring, as well as the individuals responsible for it. In turn, that allows all of us to be more productive.

      --

      That Jesus Christ guy is getting some terrible lag... it took him 3 days to respawn! -NJ CoolBreeze

    5. Re:Good idea, but... by Sylver+Dragon · · Score: 1

      Aren't there worse things in the world than spam? I could name specific examples, but that isn't my point: my point is, calling for the deaths of people who do nothing more than create a nuisance for everyone is quite childish. Whether joking or not. It's just stupid.

      Yes, there are far worse things, but this is a constant annoyance, and sometimes those can be worse than a single large occurance. Consider the difference between being hit once by a sledgehammer and being hit once every day by a tack hammer in the same spot.
      The sledgehammer hurts like hell, but after a while you get over it, and the pain goes away. On the other hand, the tack hammer doesn't hurt much each time, just a little; but, over time, the spot it hits brusies, rubs raw, and just aches constantly. Eventually, you'd simply kill the guy with the tack hammer to make him stop. Spam is similar, its a constant minor annoyance.
      Now, granted, it's certainly unwarranted to kill a spammer, but some days it would really feel nice to simply beat one's skull in with a crowbar. Maybe there's a good opportunity for a small game, a GTA style game where you're entire goal in life is to track down and violently stop spammers.

      --
      Necessity is the mother of invention.
      Laziness is the father.
    6. Re:Good idea, but... by maximilln · · Score: 1

      What happens when spammers do a "fake" spam run to try to get a (non-spamming) competitor's website removed?

      If you run a business which could possibly be associated with spam then maybe you need to be poked in the ribs.

      The moment spam tries to associate with legitimate business then the venture capital agents who manage business loans will start to be more critical of marketing agencies.

      --
      +++ATHZ 99:5:80
  6. Re:So, to shut down my competitor... by AKAImBatman · · Score: 2, Insightful

    Based on the phrase "given authority", I gather that law enforcement will investigate the situation before forcibly shutting down the site. Failing to do so could result in a counter-suit claiming that law enforcement did not do their job.

  7. This will only be marginally effective... by datastalker · · Score: 5, Interesting

    ...as they're likely to have the same kind of site hosted in multiple places to avoid this problem. :( At best, it will drive up the costs of maintaining said sites, but those costs aren't that high to begin with.

    Furthermore, this does nothing to the spammers whose hosters are in collusion with them, and who are profiting themselves.

    1. Re:This will only be marginally effective... by dave420 · · Score: 3, Insightful

      It will do something to those spammers - the ISPs can (and will) block the IP addresses. We're not talking about a citizen's action group here, but a collaboration of every major ISP in Britain.

    2. Re:This will only be marginally effective... by misleb · · Score: 3, Interesting

      You know, it doesn't really matter. It is the Right Thing To Do(tm) regardless of how effective it actually is on the problem as a whole. In the end, I don't really care how many other people are in in collusion with spammers. I can say with pride that the ISP I work for is tough on spam. And I can say with pride that the ISP I use for home Internet is tough of SPAM. And that is about as much as I can really expect. The idea is to get others to do the right thing and I commend these UK ISPs. Good for them.

      -matthew

      --
      "THERE IS NO JUSTICE, THERE IS ONLY ME." -Death
  8. How tolerant? by mopslik · · Score: 2, Funny

    I suppose it all depends on how much investigation ISPs are required and/or willing to do.

    gives them the mandate to shut down websites promoted through spam

    So in theory:

    1. Pay spammer $N to include competitor's website in massive deluge of email
    2. ???
    3. Profit!
    1. Re:How tolerant? by LiquidCoooled · · Score: 2, Insightful

      You just paid to advertise a competitor?

      Thanks!

      --
      liqbase :: faster than paper
    2. Re:How tolerant? by stratjakt · · Score: 1

      Some of the best (read: most effective) political campaigning techniques involve campaigning for your opponent.. By cold calling at 3 AM, or putting bumper stickers on cars without the owners permission, etc..

      A good campaign for Burger King would be "Try McDonalds' new Big Mac, now contains 75% more rat feces!" or "Eat at Applebees! We fired the guy who was pissing in the barbeque sauce!"

      --
      I don't need no instructions to know how to rock!!!!
    3. Re:How tolerant? by Anonymous Coward · · Score: 0

      > You just paid to advertise a competitor?

      Whatever gets their site shut down...

    4. Re:How tolerant? by maximilln · · Score: 1

      You don't have a thick enough tin-foil hat.

      So in theory:

      1. Start ISP
      2. Notify business customers that they seem to be associated with a spam organization...
      3. ...but, for an extra $5k/mo., we can make that problem go away, can't we Guido?
      4. Guido says yes.
      5. Shake down.
      6. Profit.

      --
      +++ATHZ 99:5:80
  9. Three cheers for idiocy... by Anonymous Coward · · Score: 0, Redundant

    Spam is a pain and we all know it, but shutting down websites advertised in spam is not a good way to stop people from spamming.
    What it is good for is making sure that your competitor's web presence gets taken offline.

  10. This is the way it should go by nomad63 · · Score: 5, Interesting

    Fighting with spammers is not going to work ever, as long as they can make even a single penny of profit from their sleazy operations. If their income source is forced to dry, their flow of spam will follow the trend.

    IMHO, the companies, who sell their products through the spamvertized channels should be put into the same tight squeeze. I want to see Pfizer sweat for those Viagra ads I receive day in and day out in hundreds.

    --

    __________
    The more I know people, the more I love animals
    1. Re:This is the way it should go by Asterixian · · Score: 2, Insightful

      Discouraging, boycotting, or flat-out disallowing companies from hocking their products through spam would be great. This would probably cover a minority of spam-financed revenues, however. It seems that the real money comes from spam campaigns that are already illegal. They're from shady or non-existent companies. They're selling counterfeit products that sometimes even have recklessly dangerous ingredients added. And, of course, there are also the get-rich-quick scams. Going after Viagra makes no sense here unless it can be shown that Pfizer is actually contributing to the spam campaign in some way. AFAIK, all the Viagra emails you see are fraudulent ads not sent by Pfizer. Viagra is a prescription drug, remember - how is it even possible for legit online vendors to sell Viagra without verifying the prescription?

    2. Re:This is the way it should go by Anonymous Coward · · Score: 0

      we cant stop every murderer, as long as people get angry or are greeedy.

      so we should just give up now ?

      just cause you cant absolutely stop everything doesnt mean you cant try and make it atleast better.

      nothing is perfect. but if a solution makes it better (without too much tradeoff) it is worth it.

      im guessing you are one of those people that constantly skim over something, forgetting about the good it will do, and say "it doesnt go far enough"

    3. Re:This is the way it should go by Linker3000 · · Score: 2, Informative

      Before you make such incorrect statements about Pfizer's involvement with the V1agr@ ads you should do some basic research.

      According to recent news articles, Pfizer are playing an active role in trying to close down as many of these spammers as possible.

      I suppose you might be one of the "25% of men [who] believed that Pfizer was responsible for sending the Viagra-themed spam."

      --
      AT&ROFLMAO
    4. Re:This is the way it should go by avida · · Score: 1

      Pfizer is not the one who is sending out those spams. Pfizer manufactures the drugs but they don't sell to the public.

    5. Re:This is the way it should go by jumpingfred · · Score: 1

      You think you can really get viagra through spam email?

  11. Nothing new.... by julesh · · Score: 5, Funny

    My company had one of its accounts suspended briefly last year when one of our clueless clients hired a US company to send e-mails for them to "1 million opt-in UK addresses".

    BTW: how gullible can you get? A single opt-in list with about 5% of the Internet-connected population on it? Wow.

    1. Re:Nothing new.... by nacturation · · Score: 0, Redundant

      ... to "1 million opt-in UK addresses".

      BTW: how gullible can you get? A single opt-in list with about 5% of the Internet-connected population on it? Wow.


      Wow, indeed! The internet has only 20 million users?

      --
      Want to improve your Karma? Instead of "Post Anonymously", try the "Post Humously" option.
    2. Re:Nothing new.... by Ford+Prefect · · Score: 1

      Note the 'UK'. :-)

      --
      Tedious Bloggy Stuff - hooray?
    3. Re:Nothing new.... by 5m477m4n · · Score: 1

      The company I work for was blacklisted for having an open relay mail server (which we don't) because one of our customers was pissed off at our pricing or something. Took a lot of work to get our server off the list, even though it was not an open relay.

      --

      ---
      Those who can, do
      Those who can't, teach
      Those who don't know how, supervise
    4. Re:Nothing new.... by antispam_ben · · Score: 1

      The company I work for was blacklisted for having an open relay mail server (which we don't) because one of our customers was pissed off at our pricing or something.

      It appears your company knows it was that customer. Can you prove it in court? It may not be good business to sue a customer, but I would imagine this is now a FORMER customer...

      What blacklist was this and who uses it? Any decent list should actually TEST for an open relay (it's easy and cheap enough to do as an automated function) before adding an alleged/reported problem. It's regrettable that the antispam community (there is no antispam community...) isn't always as rigorously honest and proper as "we" (tinw...) should be.

      Took a lot of work to get our server off the list, even though it was not an open relay.

      It appears your company has a case for damages against the blacklist (though these often try to stay as anonymous as spammers) as well as the customer.

      --
      Tag lost or not installed.
    5. Re:Nothing new.... by maximilln · · Score: 1

      BTW: how gullible can you get? A single opt-in list with about 5% of the Internet-connected population on it? Wow.

      Microsoft made the opt-in so easy that it was just like clicking on an EULA.

      --
      +++ATHZ 99:5:80
  12. Start sending spam from Microsoft and SCO by StDave · · Score: 1

    This is the solution to all of our troubles. Spam as a DOS attack.

    I think this is a pretty stupid way to regulate spam. I had a freind that simply set up a dialer to dial the 800 number in the spam 24 hours a day. This seems like a better disincentive to me.

    1. Re:Start sending spam from Microsoft and SCO by Anonymous Coward · · Score: 0

      Albeit illegal, but since when has that stopped anyone from doing something?

    2. Re:Start sending spam from Microsoft and SCO by Anonymous Coward · · Score: 0

      But all the V14qgr@ company has to do is add their 800 number to the do-not-call registry to defeat dialers like your friend.

    3. Re:Start sending spam from Microsoft and SCO by StDave · · Score: 1

      Uh..No.

      They could block the number from calling them, and perhaps even press charges based on Caller ID, but the do not call registry has absolutely nothing to do with this.

      Thanks for playing.

  13. ... and thus the casualties begin ... by Montreal+Geek · · Score: 4, Insightful
    I can see it now...

    You have a competitor in UK? Eating through your market share?

    We can take care of that! We, at SPAM, inc, will simply do a wave of aggressive spamming "touting" the virtues of your competitor, and arrange for a few hundred copies of that mailing to reach the sysadmin of the hosting ISP. Say "Goodbye!" to your competitor's web site!

    And, for a small extra, we'll even include some advance fee fraud or otherwise illegal contents to the spam. Watch in glee as your competitors are harrased by the authorities to boot!

    Hmmm. Sounds like a really, really good idea now doesn't it?

    -- MG

    1. Re:... and thus the casualties begin ... by dave420 · · Score: 1, Interesting

      Give them some credit - I'm sure they actually thought about it. Sheesh. They're a bunch of ISPs. Not just one pokey little one with no clue, but many large ISPs. The police are pissed off with spammers just as much as anyone else, so investigating the spammer and the sites involved will be high on everyone's list.

    2. Re:... and thus the casualties begin ... by dmayle · · Score: 0

      Hmmm. Sounds like a really, really good idea now doesn't it?

      We really can't have it both ways. This is a good thing, and the fact that there may be companies who will try to take advantage of it in reverse doesn't change that fact. The amount of money in reverse spam is sure to be lower than in normal SPAM, decreasing the number of people who are interested in it...

    3. Re:... and thus the casualties begin ... by BigDu · · Score: 2, Insightful

      This is indeed possible which is why it's important that whoever is in charge of actually shutting down the sites conducts proper due diligence (i.e. makes a case that any reasonable person could follow). That being said, I think this is also good because it's at least a start--if we want to get rid of spam (not that I'm saying that's possible) the ISPs and companies will have to work together which is what this is starting to do--companies may find that they can work with Linx to follow best practices or some such that will make it more difficult for competitors to do what you're talking about. As the sayings go--you have to start somewhere, and this is as good as anything yet.

      --
      "Your thinking privleges have been revoked."
      ----Nicholas Cage, "Gone in 60 Seconds".
    4. Re:... and thus the casualties begin ... by adamh526 · · Score: 1

      This is just another reason as to why it's near impossible to regulate technology with policy. The technologists don't understand (or don't care about) policy and the policy makers don't understand (or don't care about) technology. If things are ever going to get better, both sides are going to have to somehow start mixing and working together.

    5. Re:... and thus the casualties begin ... by danharan · · Score: 1

      ISPs could bundle AV software with their service, close down open relays, etc...

      This however is lame, exactly for the reason you pointed out. Until people can be protected from joe jobs, the only people that will be victims will be innocent, while the rest already get bullet-proof hosting somewhere overseas.

      --
      Information: "I want to be anthropomorphized"
    6. Re:... and thus the casualties begin ... by misleb · · Score: 1

      Bah! Sounds like a pretty rare scenerio to me. Certainly too rare for a spammer to actually advertise this as a "service." For one thing, sites being advertised via spam are generally pretty small time. I doubt they have any sense of a particular competitor taking a significant portion of their market share. Do you really think one penis enlargment pill pusher gives a shit about another penis enlargment pill pusher? Do you think one porn site really has it in for another porn site? There are just so many of these organizations out there. Unless there was something personal between the two competetors, I doubt they care what each other does. I know the Internet is becoming a commercial wasteland, but come on, it isn't anarchy.

      -matthew

      --
      "THERE IS NO JUSTICE, THERE IS ONLY ME." -Death
    7. Re:... and thus the casualties begin ... by Anonymous Coward · · Score: 0

      Give them some credit - I'm sure they actually thought about it
      Yeah: as pointed out in the BBC article.

    8. Re:... and thus the casualties begin ... by mdfst13 · · Score: 1

      "The amount of money in reverse spam is sure to be lower than in normal SPAM"

      On what do you base this?

      If I am the number two link on Google and I get the top link's site shut down, I will probably make more money from increased Google referrals than I would from spam (realize that a spam that successfully reaches one person in fifty targets is considered effective even though less than one person in a thousand will buy; thus, one purchase in 50,000 emails is considered very good). Further, note that the amount of spam to be sent out is smaller. Send out a few thousand emails and have a friend enter the spam complaint. Thus, for a spam effort that would not have netted a single purchase, you can cancel a whole competitor. I know of at least one niche site that gets about ten orders (from 2000 referrals) a day from Google (it is first for many of its products). Thus, the better Google rank from a reverse spam is probably more profitable than regular spam.

      Someone else also pointed out that it is likely that spammers will start randomly targetting legitimate web sites to confuse the issue. Much the way they use legitimate addresses as the sender of spams (joe jobs).

      I would agree that increased attention to this would be a good thing, but it is easy to see how the system can be abused.

    9. Re:... and thus the casualties begin ... by canajin56 · · Score: 1

      You're making the same assumption that some other people posting today have: That the people paying to have a competitor "advertised" with spam are the same people who pay to to have their OWN website advertised. Why would they be? Sure, some small beans 0rg4nic V1agr4 website may not really have any competitors they care enough about to eliminate. But what about big companies? What is to stop them from hiring a third party to do just this? Just as an example, why couldn't Microsoft hire somebody to spamvertise Redhat? If they hire some Russian to use some zombies to send it, how could it be traced back to Microsoft? How could Redhat prove they didn't hire the Russian themselves? They can't, short of arresting him and seizing his records...assuming they could even trace the zombies back to him in the first place.

      --
      ASCII stupid question, get a stupid ANSI
    10. Re:... and thus the casualties begin ... by misleb · · Score: 1

      Oh hell, there are any number of ways one company could sabotage another. Some legal, some not. Why not just hire someone in a foreign country to DDoS or hack into your competetor or their website? Or just find some way to sue your competetor into submission. Or maybe some good ol' fashioned anti-trust. Or just buy them! Sending out SPAM in the name of your competetor sounds like one of the more lame methods of corporate sabotage. I'm sorry, but I just don't see this as being a problem. For as much as I hate the corporate world, I dont' think many will resort to the methods you are proposing.

      Also, you assume that system administrators at ISPs are stupid. If I get a SPAM (I work at and ISP) supposedly coming from R3dh@T advertising fr33 l1nux dow nloads, I'm probably going to assume it is either a virus or forged to make it look like it is Redhat spamming. You assume that administrators are going to boot websites without the least bit of investigation. Why would they when the "spammer" in question is large and otherwise respectable?

      -matthew

      --
      "THERE IS NO JUSTICE, THERE IS ONLY ME." -Death
  14. So will ISPs shut down Hotmail... by Anonymous Coward · · Score: 0, Offtopic

    ...for sending me all of those "increase your storage" emails every week?

    1. Re:So will ISPs shut down Hotmail... by Anonymous Coward · · Score: 0

      ive never heard of a dick referred to as 'storage' before

  15. i can imagine all kinds of complications here by InternationalCow · · Score: 3, Insightful

    In theory it sounds nice. However, there are several problems here. First, the offending web site may be hosted by an ISP that doesn't give a damn. It may be overseas. It may be in Russia, or North Korea for that matter. If it is in a non-british jurisdiction all they can do is block access to it. There is no way to take it down. The link may be a referral. As others have already noted, the linked address may be that of someone the spammer doesn't like, resulting in the shutdown or blocking of an innocent web site. With so many potential problems, I doubt whether this initiative has a chance of succeeding.

    --
    ----- One learns to itch where one can scratch.
    1. Re:i can imagine all kinds of complications here by Phroggy · · Score: 2, Insightful

      In theory it sounds nice. However, there are several problems here. First, the offending web site may be hosted by an ISP that doesn't give a damn. It may be overseas. It may be in Russia, or North Korea for that matter. If it is in a non-british jurisdiction all they can do is block access to it. There is no way to take it down. The link may be a referral.

      You're being retarded.

      Of course you can get spam that links to a web site hosted in Russia or North Korea. This isn't about them. This is about getting spam that links to a web site hosted in the UK. They're not trying to stop all spam, they're trying to make sure that 1) spammers with web sites hosted in the UK don't make money from stupid gullible people that buy stuff from spammers, 2) spammers with web sites hosted in the UK will be inconvenienced by having to move their site elsewhere if they want to continue spamming, and 3) spammers who need web hosting won't try to do business in the UK, because they know they'll just be shut down.

      As others have already noted, the linked address may be that of someone the spammer doesn't like, resulting in the shutdown or blocking of an innocent web site.

      This is an issue, and I've seen it happen. Hopefully this new policy will be enforced carefully, and ISPs will try to contact their customers before taking action.

      With so many potential problems, I doubt whether this initiative has a chance of succeeding.

      Of course it will succeed, because the goals of this plan are the ones I listed above, not whatever your goals are.

      --
      $x='S24;r)>63/* h@<5+oZ)32"5cz';$me='phroggy'x$];
      $x=~y+ -xz+\0-Tx+;print$_^chop$me for split'',$x;
    2. Re:i can imagine all kinds of complications here by gurps_npc · · Score: 1
      You are missing the main point. They are not asking the Hosting ISP to shut down. They are having the British ISP's block that IP address. SO it does not matter WHAT jurisdiction it is in, they don't care about taking it down.

      Their is only ONE probem, which has been mentioned before, the Joe-Job, where your competitor spams pretendign to be you.

      And it has a solution: legal action. When someone spams pretending to be you, that is fraud. If a company is committing fraud to hurt your business, that is a lot more serious than mere Spam, will happen a lot less often than mere spam, and will be investigate a lot more seriously with a lot more resources.

      Frankly, that kind of stuff happens already, but tno often because it is clearly criminal and the punishment FAR outweighs the minor benefits. I seriously doubt that the low level barely criminals who do Spam will suddenly start committing felonies.

      That is ONE problem, not "so many". So the idea has a pretty good chance of suceeding.

      --
      excitingthingstodo.blogspot.com
    3. Re:i can imagine all kinds of complications here by RealAlaskan · · Score: 1
      If it is in a non-british jurisdiction all they can do is block access to it.

      So, before the spamming, they got a few dozen hits a day in their server logs from Britain. After the spamming, they get a brief spike, followed, soon, by zero hits from Britain ever after. Now, how much would you pay the spammer to send out another round of spam? Blocking will work just fine.

      We can imagine this being misused by evil competitors, but the British ISPs aren't idiots, and with minimal care on their part, this won't happen much. How many legitimate businesses in North Korea or Russia are doing business in the UK via intarweb? I'd guess that the number is right about zero, for both countries. That alone means there isn't much room to go wrong.

      I'll guess that most U.S. ISPs will cooperate with British ISPs if some U.S. company decides to bugger a competitor that way, so again, there won't be nearly the opportunity for problems that you might think. What will make this work is the fact that everyone is bothered enough by spam to put some effort into making it work.

    4. Re:i can imagine all kinds of complications here by InternationalCow · · Score: 1

      Dear Phroggy Please refrain from using words like "retarded" in the near future unless you are specifically looking to start a flame war. I was looking for a discussion, not waiting for someone I don't know to start being rude. Thank you. That said, the first thing that will happen when this gets through is that sites in the UK will be blocked only to be replaced by sites overseas that cannot be taken down (which is what i was saying in the first place). The spamming business is an international one.

      --
      ----- One learns to itch where one can scratch.
    5. Re:i can imagine all kinds of complications here by RWerp · · Score: 0

      You are missing the main point. They are not asking the Hosting ISP to shut down. They are having the British ISP's block that IP address. SO it does not matter WHAT jurisdiction it is in, they don't care about taking it down.

      There is still one problem: people are paying their ISPs for the access to the Internet, not to the "Internet without these awful spammers' sites". I, personally, would object to my ISP blocking any websites from me.

      --
      "Long run is a misleading guide to current affairs. In the long run we are all dead." (John Maynard Keynes)
    6. Re:i can imagine all kinds of complications here by Phroggy · · Score: 1

      Dear Phroggy Please refrain from using words like "retarded" in the near future unless you are specifically looking to start a flame war. I was looking for a discussion, not waiting for someone I don't know to start being rude. Thank you.

      I thought a flame war might be entertaining. Sorry.

      That said, the first thing that will happen when this gets through is that sites in the UK will be blocked only to be replaced by sites overseas that cannot be taken down (which is what i was saying in the first place). The spamming business is an international one.

      Having them hosted overseas where they "can't be taken down" isn't really any worse than having them hosted in the UK where they can be taken down but not actually taking them down, is it? And of course they can be taken down, if they're hosted in other countries - they can be taken down by ISPs in those countries. That may not happen, but the more ISPs that start forming policies like the UK policy under discussion here, the harder it will be to find an ISP that doesn't. It will never be impossible, but the more inconvenient it is for the spammers, the better.

      Meanwhile, if all the spammers get funneled onto only a handful of ISPs, the rest of us just blackhole them. :-D

      Yeah, we're nowhere near there yet. But, this is a step in the right direction, not a step backwards. Many more steps will, of course, be needed to have any significant impact.

      --
      $x='S24;r)>63/* h@<5+oZ)32"5cz';$me='phroggy'x$];
      $x=~y+ -xz+\0-Tx+;print$_^chop$me for split'',$x;
  16. Get a B1GGER p3nis with L1N UX! (here you go) by Qinopio · · Score: 5, Funny

    Dear friend, The only operating system proven by science to enlarge your penis and make you wealthy is Linux, powered by SCO Technology. visit SCO.com to learn more! refrigerator penguin lovely tang information fr4556631

    --
    __________
    [Big Brick Wall]
  17. About time.. by MysteriousPreacher · · Score: 1

    As long as they investigate correctly to make sure that the web site in question isn't being framed by someone else, this is excellent.

    I'm fairly tired of sites, particularly 'meds and pharms' sellers in Canada. Quite a few seem to have an associate program where 'associates' get paid for the referalls they send. Of course spamming is an ideal way to get these referalls.

    Sites using these spam privateers deserve to be shut down.

    --
    -- Using the preview button since 2005
  18. *applause* by thephotoman · · Score: 5, Interesting

    Could we do that in the United States, too?

    But what about repeat offenders? Those that open up a new website and advertize by spam on that site, too? Setting up a webpage isn't too hard these days, and one could always send one's servers offshore. This needs to be an international policy.

    --
    Haec merda tauri est. Ceterum censeo Carthaginem esse delendam.
  19. Not just shut down. by www.sorehands.com · · Score: 4, Interesting
    Not just shut down the site, but set up a page saying they were shut down and have the real data on the spammer, and some of the original page.

    That allows the people who have been spammed to identify and track the spammer.

    1. Re:Not just shut down. by pclminion · · Score: 0, Troll
      That allows the people who have been spammed to identify and track the spammer.

      This assumes they give a shit.

      Only basement-dwelling dorks like yourself are interested in "tracking down" spammers. The vast majority of people just want it to stop. It's an annoyance, not a national security threat for fuck's sake.

  20. is that bad? by Anonymous Coward · · Score: 0

    You seem to forget that even though a spammer may use that to shut down another spammer, at the end of the day it's still one less spammer in the world.

    I consider that a good thing(TM).

  21. Good thinking by RPI+Geek · · Score: 2, Interesting

    Other than the obvious abuse possibilities, this is a good way to remove the incentive to spam people. Until I started getting too much junk mail to keep up with, I would go to the website that was advertised (stripping out the personal identifier junk-text string) and e-mail the webmaster saying that I would never buy their product because of their advertising techniques and that I would actively warn people away from them. I doubt that they took me seriously, but it was nice to rant anyways, and yes I did follow through in my threat for many of those advertisers.

    Also, if the spammers are getting a [very low percentage] click-through number, I wonder how many of those are people who have never gotten spam before. The number of people on the internet is growing so quickly, I'd imagine that many of the click-throughs are actually people who have never seen a "bulk unsolicited e-mail" before.

    --

    - "Nobody came out that night, not one was ever seen. But Old Man Stauf is waiting there, crazy sick and mean!"
  22. i need you help by coshx · · Score: 4, Funny

    DEAR SIR,

    i want assure you this no spam i found you email by search web i son very important buznes man who in some politcal truble now rite and need you help get money out bank
    in case you no believe you go see please his site SCO

    PLEASE TO HEAR YOU RESPONSE.

    N!GTXBALU GNTEMBI


    darn filter won't let me submit in all caps :(

  23. Code of practice not law... by Numen · · Score: 5, Informative

    Please note the article is refering to a code of practice not a law. There will without doubt be different ways in which ISPs might and will implement it. If a competitor is spamming "on your behalf" then you're going to get a warning from your ISP saying that they're considering yanking your plug... you'll then get to address that and show circumstance.

    Then if the chaps framing you are in the UK there's legal action you might take against them.

    This is a good thing. It's not a draconian law, it's a business consortium agreeing that they they to focus on an issue and deciding common policy on how to address it.

    Code of practice, not law.

    1. Re:Code of practice not law... by BigDu · · Score: 1

      ^^Ditto this. As I noted in another comment above, this isn't necessarily a perfect system, but its a good start, and especially so if it is adopted in other countries, as some of Linx's other policies evidently have been.
      Linx's former policy, drawn up in May 1999, has been widely adopted in the web world as a model of best practice.
      This system gives a good logical starting point to help eliminate at least some of the spam that is distributed each day.

      --
      "Your thinking privleges have been revoked."
      ----Nicholas Cage, "Gone in 60 Seconds".
    2. Re:Code of practice not law... by nacturation · · Score: 2, Insightful

      Right, and what happens when someone who really does want to purchase a year's supply of "Colon Blow 5000" sues them because the ISPs implementing the block are preventing them from accessing the site? Unless it's backed by a law saying that the spam is illegal (thereby making the block legal) I don't see this as holding up in court. Obviously people *do* buy these stupid products, so this is ripe for a lawsuit from the spammers.

      --
      Want to improve your Karma? Instead of "Post Anonymously", try the "Post Humously" option.
    3. Re:Code of practice not law... by Steve+B · · Score: 1
      Right, and what happens when someone who really does want to purchase a year's supply of "Colon Blow 5000" sues them because the ISPs implementing the block are preventing them from accessing the site?

      What happens is that the judge throws the suit out of court on the grounds that some idiot's desire to purchase "Colon Blow 5000" is irrelevant to the issue (which is that ColonBlow5000.com is in breach of contract). Ideally, the process involves a pee-pee whacking from the baliff.

      --
      /. If the government wants us to respect the law, it should set a better example.
    4. Re:Code of practice not law... by nacturation · · Score: 1

      ... some idiot's desire to purchase "Colon Blow 5000" is irrelevant to the issue (which is that ColonBlow5000.com is in breach of contract)

      Which contract is that?

      --
      Want to improve your Karma? Instead of "Post Anonymously", try the "Post Humously" option.
    5. Re:Code of practice not law... by Anonymous Coward · · Score: 0

      Under what law are ISP's not allowed to block stuff?

    6. Re:Code of practice not law... by multimed · · Score: 1

      The Terms of Service the website owners agree to when they sign up for hosting with the ISP says they can and the courts have to recognize valid contracts agreed to by two parties. I can't imagine too many ISPs (though I'm sure there are few out there) who don't have a clause in the TOS that says you can't spam.

      --
      Vote Quimby.
    7. Re:Code of practice not law... by Anonymous Coward · · Score: 0

      Then if the chaps framing you are in the UK there's legal action you might take against them.

      This costs money - meanwhile your source of income is removed because you've been blocked. Which means snuffing out the little guy with dirty tricks just became a trifle easier.

    8. Re:Code of practice not law... by antispam_ben · · Score: 1

      ... some idiot's desire to purchase "Colon Blow 5000" is irrelevant to the issue (which is that ColonBlow5000.com is in breach of contract)

      Which contract is that?

      The one like THIS ONE, which says in part:

      2. VIOLATIONS OF EARTHLINK'S ACCEPTABLE USE POLICY ...

      g.Unsolicited commercial email/Unsolicited bulk email. Using the Services to transmit any unsolicited commercial email or unsolicited bulk email. Activities that have the effect of facilitating unsolicited commercial email or unsolicited bulk email whether or not that email is commercial in nature, are prohibited.


      No doubt "facilitating" covers hosting a website advertised with spam.

      --
      Tag lost or not installed.
    9. Re:Code of practice not law... by nacturation · · Score: 1

      The Terms of Service the website owners agree to when they sign up for hosting with the ISP says they can and the courts have to recognize valid contracts agreed to by two parties. I can't imagine too many ISPs (though I'm sure there are few out there) who don't have a clause in the TOS that says you can't spam.

      There are many ISPs who happily allow spammers to host their sites and send spam from their connections. There's no signed agreement between an ISP in China and the various ISPs in the UK as to what traffic they do and do not allow, so what contract would be broken here? If a Chinese spammer sends Viagra emails to a UK user, whose Terms of Service is applicable? The "anything goes" TOS from China?

      --
      Want to improve your Karma? Instead of "Post Anonymously", try the "Post Humously" option.
    10. Re:Code of practice not law... by nacturation · · Score: 1

      Okay, but how is that going to be enforced? I could go out and get a spamming server from China tomorrow, ssh into the machine, and setup a bulk email run. It would be untraceable back to me. Even if my ISP is Earthlink, how are they to know that my ssh connection resulted in spam being sent out from China? So the colonblow5000.com website, hosted in China, isn't in violation of any of the Chinese hosting company's terms of service, since the hosting company would be spammer friendly.

      Spammers are stupid, but they're not going to sign up for hosting with Earthlink when there are many readily available spam-friendly operations willing to take their money and relay spam for them.

      --
      Want to improve your Karma? Instead of "Post Anonymously", try the "Post Humously" option.
    11. Re:Code of practice not law... by antispam_ben · · Score: 1

      It would be untraceable back to me. Even if my ISP is Earthlink, how are they to know that my ssh connection resulted in spam being sent out from China? So the colonblow5000.com website, hosted in China,

      I (and I presume those I was responding to) was assuming colonblow5000.com was hosted by Earthlink or a similar "first-world" ISP. The question was whether taking down the site denies someone the "right" to buy Colon Blow.

      But you're right and have a point, such "offshore" severs won't take down a site because of spam. This is where ISP's use of (here come the flames) blocking lists come in...

      Spammers are stupid,...

      First-time spammers (see the comments on the guy's friend whose boss wants to spam), are really, really, really stupid.

      --
      Tag lost or not installed.
  24. Increase your Manhood with Microsoft! by Anonymous Coward · · Score: 1, Funny

    Microsoft has a temendous new product guaranteed to increase your manhood by up to three full inches! For a no-risk trial, simply click on the link below:

    I want to increase my manhood with Microsoft

    Hey, a guy can try...

    1. Re:Increase your Manhood with Microsoft! by Dogtanian · · Score: 2, Funny

      Microsoft has a temendous new product guaranteed to increase your manhood by up to three full inches! For a no-risk trial, simply click on the link below: I want to increase my manhood with Microsoft

      Micro? Soft?

      That's as inappropriate a name for a peni-spammer as you're likely to get.

      --
      "Slashdot - News and Chat Sites Deviant". (Click "homepage" link above for details).
    2. Re:Increase your Manhood with Microsoft! by LiMikeTnux · · Score: 0

      its so the spam filters dont get it ;)

      --
      yap
    3. Re:Increase your Manhood with Microsoft! by sharkey · · Score: 1

      That's more of a Google-bomb. Like this: Bigger Penis

      --

      --
      "Outlook not so good." That magic 8-ball knows everything! I'll ask about Exchange Server next.
  25. Spam Whiners: Shit or get off the pot by swb · · Score: 2, Insightful

    I've noticed that many of the people who bitch the most about spam are also the first one to produce simplistic and pedantic retorts to steps people make to do something about it. "But somebody might not get their email for a day."

    Spam Whiners: Shit or get off the pot.

    Either somebody does *something*, however imperfect or flawed, or they do nothing. The whining and the complaining and the doing of nothing adds up to exactly nothing but noise.

    I want actions taken, and I want them taken *now*. Collateral damage? Unavoidable -- any solution strong enough to work is going to cause collateral damage. This isn't a kernel bugfix, the patch doesn't have to be formally proved at an academic conference, it has to be implemented and adjusted as needed for maximum effectiveness.

    If you're not making mistakes, you're not making anything, and not doing anything about spam has been how effective?

  26. This is a Very Good Thing by tao_of_biology · · Score: 4, Insightful
    SPAM has become a total cancer on the internet. It's growing and sucking resources away from legitimate activities... it's discouraging use of email and costing ISPs and corporations way too much money.

    This tumor is so rooted in the Internet, that there is no way to cut it all out without removing some healthy tissue. There is probably no perfect solution to this problem, but it HAS to be addressed.

    I truly can't see people resorting to trying to advertise competitor's web sites via SPAM to get them shut down. They'd open themselves up to way too much liability if that actually happened.

    IMHO: This solution does a pretty decent job of targetting the tumor without removing much healthy tissue. Again, no solution will perfectly home in on just spammers... innocents will always get caught up in the effort to remove this problem. The trick is to just come up with items and balance it's positive effects against its negative effects.

    --

    -- "A chicken is an egg's way of making another egg."

    1. Re:This is a Very Good Thing by maximilln · · Score: 1

      I truly can't see people resorting to trying to advertise competitor's web sites via SPAM to get them shut down.

      Indeed. The moment that someone sends out a SPAM which targets a legitimate company the funding for mass-marketing firms is going to start drying up at the bank level.

      --
      +++ATHZ 99:5:80
  27. Re:all my base are belong to me by Anonymous Coward · · Score: 2, Funny
    Those that want or claim to have a 12 inch penis annoy the hell out of those of us that actually have one.

  28. Re:Spam Whiners: Shit or get off the pot by Short+Circuit · · Score: 2, Insightful

    "Collateral damage is just fine--Until I'm the one being damaged."

  29. Not news. by Anonymous Coward · · Score: 0

    No, theregister reported yesterday (morning for the US)! Slashdot is just getting lazy (er).

  30. Re:Spam Whiners: Shit or get off the pot by FatRatBastard · · Score: 5, Insightful

    Either somebody does *something*, however imperfect or flawed, or they do nothing. The whining and the complaining and the doing of nothing adds up to exactly nothing but noise.

    It wasn't a whine nor a complaint. And it can have very serious reprocussions. How happy would you be if your legitimate, non-spamming online business was blacklisted because someone else forged fake spam?

    I want actions taken, and I want them taken *now*. Collateral damage? Unavoidable -- any solution strong enough to work is going to cause collateral damage.

    Wonderful attitude. "Fuck the innocent as long as I'm happy (and it doesn't happen to me)"

    This system could be useful, but considering there was no detailed mention of how they're going to deal with this potential problem its a valid question.

  31. Spam is hillarious. by Anonymous Coward · · Score: 0

    Yesterday I got one with the title "Got beer? Homeless."

    It was one of those "g 3t Y u0R h1gh sc h0 0l d1 p10 m a !!1" ones. You know, those things are starting to get harder to read even though I read l33tsp34k at a college level!

  32. Another nail in the spam coffin then by SmallFurryCreature · · Score: 4, Insightful
    Spam is already becoming unreadable with the leet spelling and insertion of random words and phrases. Now they are going to link to random sites as well? So the customer, already not very bright, will now have to first do a enigma style decoding to get the sales messages and then do a guess as to wich link to click?

    The harder spam becomes to send the better it is. There is no instant cure, stop watching Oprah you american. The real world requires you to work had on multiple fronts to solve a problem. This is just one tiny drop on the hot plate. But together with all the other little drops it is making a difference.

    --

    MMO Quests are like orgasms:

    You may solo them, I prefer them in a group.

    1. Re:Another nail in the spam coffin then by demonbug · · Score: 1
      There is no instant cure, stop watching Oprah you american.


      Lol, as I read this I got a new email message advertising Oprah's secret diet.

      Dammit Oprah, quit spamming me! Wait, maybe that is her secret diet! She sends all her spam to other people!

    2. Re:Another nail in the spam coffin then by WoodstockJeff · · Score: 2, Interesting
      Now they are going to link to random sites as well?

      Obviously, you haven't been examining spam messages. Putting dozens of random, unclickable links in spam has been going on for more than half a year. It's used to break up words, as in:

      Buy Vi<a href=bob.com></a>agra by <a href=reallinkhere.biz>clicking here</a>!

      With nothing between the anchor and its close for "bob.com", there's nothing to click on, so a user doesn't go to the "wrong" website... but a spam checker has to weed through all the links to find which ones are valid, and, therefore, which ISPs to complain to.

      I have a few that had more than 40 links in them, only a couple of which were to the real spam site.

  33. Other than the obvious abuse possibilities by nuggz · · Score: 1

    The first line is more important than your headline.

    Killing the patient is the wrong way to stop a diesease.

  34. Re:Very interesting... by ekw · · Score: 1

    > It's good, but there's some potential for abuse.

    Good reason to forget the whole idea.

    Same for the Internet.

    --
    -- "Is that so?"
  35. I think parent means in the U.K. by Anonymous Coward · · Score: 0

    That's all.

  36. Correction by McDutchie · · Score: 2, Insightful
    Woops... I wrote:
    In any case, the existence of joe jobs is no reason to penalize actual spammers [...]

    This should have been: the existence of joe jobs is no reason not to penalize actual spammers.

  37. Of course they are going to investigate by SmallFurryCreature · · Score: 1

    They are closing of their own paying customers. You can bet they are going to check, this is not the bubble anymore when ISP's ruled.

    --

    MMO Quests are like orgasms:

    You may solo them, I prefer them in a group.

  38. Wait, wait... by Anonymous Coward · · Score: 0

    ...they've implemented the first step of my plan for a spam-free internet, but it's the *second* step! Where's the first step, UK? Where's the vicious ass-raping of Scott Richter and Alan Ralsky on a pay-per-view event on the scale of the World Cup?

    You missed the best part, you limey bastards!!

    1. Re:Wait, wait... by meringuoid · · Score: 1
      We can't do a thing to Scott Richter and Alan Ralsky. They're in the US.

      We've got Steve Linford, and we're quite happy with that state of affairs ;-)

      --
      Real Daleks don't climb stairs - they level the building.
  39. So now I can Joe Job any .uk site right offline? by stratjakt · · Score: 1

    Any measures in place to prevent that?

    What (if any) recourse does a site accused of spam-vertising have? Do the ISPs just refer to the vague "we can do whatever we want with your account and redefine what's acceptable as we see fit" language in the FAP to drop sites?

    I've never seen spam redirect me to a .uk page, I dont know if spammers are just smart enough to keep geography in mind, or what..

    --
    I don't need no instructions to know how to rock!!!!
  40. Mod point frenzy! by Anonymous Coward · · Score: 1, Insightful

    About ten of the first replies to this topic all come up with the genius suggestion of spamvertising the competition, revealing they have not read the article (which admittedly does not addresss how to stop it), and got modded Insightful 2-5.

    What is this, some sort of circle jerk?

  41. How many spamvertised sites are in the UK? by EboMike · · Score: 5, Insightful

    When I submit my daily dose of spam to Spamcop, I can see that 90% of all websites referred to by spam mails are hosted in China and Brazil, and I don't think either country will do a similar move anytime soon.

    It is already common practice for spammers to use bullet-proof hosts (which is even mentioned in TFA).

    So I don't think this move will change anything as far as spam goes, but the potential for abuse (see some of the previous comments) will increase, given that most sites hosted by UK ISPS are legitimate.

  42. What's this going to do? by AndyChrist · · Score: 1

    So you shut down a spammer's porn site. They move it to a new host (outside the UK), and continue to spam. If they can kill or gain control of the domain name along with shutting down the site, perhaps this could work.

    I hope it does.

    I hope they punish more than just email spam, too. Usenet, IRC, and instant messengers need help, too.

  43. new DOS ? by Atreide · · Score: 1

    great, now I just have to send SPAM for my competitor to this provider (with fake ads so that it is not a very intersting product), i blur the trace to me and the competitor loses market shares

    might that happen ?

    --
    The world belongs to those who get up early. - I'm far from being the king of Earth then :-(
  44. Good idea, but... by EdMcMan · · Score: 1

    What happens when spammers do a "fake" spam run to try to get a (non-spamming) competitor's website removed?

  45. 123 by RPI+Geek · · Score: 1

    Sorry, I've never been good at writing headlines.

    --

    - "Nobody came out that night, not one was ever seen. But Old Man Stauf is waiting there, crazy sick and mean!"
  46. Not a way to create denial of service attacks. by malx · · Score: 4, Informative

    The LINX Best Current Practice on Unsolicited Bulk E-mail ("the spam BCP") is carefully written so as to avoid being a way to create denial of service attacks.

    LINX does not adjudicate complaints; our ISPs members do. You can complain to an ISP for tolerating spamvertised web sites just like you can complain to them for tolerating someone sending spam. If they follow Best Practice they will cut off the web site if, only if, and not before they satisfy themselves that the spam was sent by or with the consent of the web site owner.

    Of course, it is possible that they could get it wrong; miscarriages of justice do occur in every area of life. This is not a reason not to have any rules at all. It is up to the ISP to take care when considering a complaint so as not to cut their customers off without good reason. Naturally, some will consider this an unnecessary delay - and even evidence that the ISP is not serious about cancelling the account. Well, it's not possible to please everybody all the time; you've just got to craft the best policy you can and run with it.

    Malcolm Hutty
    LINX Regulation Officer.

    1. Re:Not a way to create denial of service attacks. by timerider · · Score: 1

      so what will happen is this:

      company X hosts their website with one of the LINX members, and pays some asstart in the USA to spamvertize it. mistreated users from all over the world complain with the ISP who hosts the site; ISP contacts customer; customer says "no i would never order or consent to a spam run, must have been a joe job."; case dismissed.

      there is only ONE way to cut down spam: drop the whole AS of any spam-friendly ISP out of the BGP tables at all major exchanges. not only mail-blocking, but ANY tcp traffic. for the whole AS is it can be confirmed that the ISP in question is spam-friendly (or as they say, "sells pink slips").

      'nuff said.

    2. Re:Not a way to create denial of service attacks. by Anonymous Coward · · Score: 0

      Well, it's not possible to please everybody all the time; you've just got to craft the best policy you can and run with it.

      Nice one Malc - that's what the Nazi's did.

  47. Re:BBC link to UK story by Anonymous Coward · · Score: 0

    The ISO 4217 currency code for the UK is GBP and always has been. It is based on the ISO 3166-1 country code followed by an initial for the currency, and since the code for the United Kingdom is GB, it's GBP.

  48. Check out this hot new wesbite! by Anonymous Coward · · Score: 0

    Want to en*large your m*ember? Click here.

    Need a low-rate mor-gtage? Our special e-rate: 2.718281828459045% !

    Can't get enough g@y pr@n? We've got teh h0tties!#!!

    portman gnaa new-here kur0shin duplicate fp penisbird overlord base belong russia grits lameness evil bit beowulf goatsex

    1. Re:Check out this hot new wesbite! by julesh · · Score: 1

      portman gnaa new-here kur0shin duplicate fp penisbird overlord base belong russia grits lameness evil bit beowulf goatsex

      I'm thinking that you could rearrange these words into the definitve slashdot comment.

      I've made a start, it goes like this:

      In soviet russia, all your evil natalie portman duplicate goatse grits belong to base. (fp!)

      Obviously this needs some work, but I can see it going places...

  49. FUCED by bshroyer · · Score: 1

    Forged Unsolicited Commercial Email DOS

    --
    The cure for cancer is coming: Reovirus
  50. Re:Spam Whiners: Shit or get off the pot by penguinoid · · Score: 1

    How about requireing any business email to be signed by the company signature (which I think should be done anyways)? This would certainly eliminate joe jobs, and if the signatures are registered/checked somewhere, it would help agains spammers.

    --
    Don't waste your vote! Vote for whoever you want, unless you live in a swing state it won't matter anyways
  51. Why not do it yourself? by Kainaw · · Score: 3, Interesting

    I have mentioned this before at Slashdot and I'm always ridiculed for it. However, I greatly reduced my spam intake from well over 2,000 spams a day to well under 100 by simply blocking any email that contains a link to a server that I've put in my "that is a spam-advertised IP address" file. It isn't difficult to do. In fact, I make what I've written freely available on my website.

    Every time I mention this, someone says, "Oh my God! You're going to block some good little Mom&Pop store because they share a server with a spammer!" If that is what you are thinking, you didn't read my previous paragraph. I block any email WITH A LINK TO A SERVER that is in my block list. I DO NOT block any email originating from a server in the block list.

    As this article explains, the incentive is to remove the profit margin from spam. I think my method works better than kicking them off the server if my method was used by a majority of the Internet users. The reason is that my method hopes the spammers keep the same IP addresses. If you kick them off the server, they change IP addresses and I have to block the new one.

    --
    The previous comment is purposely vague and generalized, but all of the facts are completely true.
    1. Re:Why not do it yourself? by gorgonite · · Score: 2, Insightful

      Yes, I'm doing the same with very good success.

      One property of this system is really attractive: Spamvertizing a webpage damages the IP number of this webpage, so that the owner of that IP number will probably seek damages against the spammer.

    2. Re:Why not do it yourself? by LiMikeTnux · · Score: 0

      you must have a nice list of them, can i borrow it so i can block them? im sick of spam, and so are my friends... miketNO@SPAMwideopenwest.com

      --
      yap
    3. Re:Why not do it yourself? by gl4ss · · Score: 1

      too bad that mom&pop store doesn't need the profit margin to be good to _try_ it once someone has gently offered to sell them a list of 6 zillion email addresses and a mass mailer.

      --
      world was created 5 seconds before this post as it is.
  52. Three strikes law by arf_barf · · Score: 1

    Get cought sending spam 3 times and receive a mandatory 25 year vacation in your state's club med :-)

  53. What really bothers me... by Dimensio · · Score: 2, Insightful

    ...is people acting like it's a bad thing.

    Anti-spammers have always maintained that ISPs should kill the websites of known spammers. That's what a number of the blacklists out there are about -- they list ISPs that don't kick off websites that have been advertised through spamming, even if the spam was sent from a different ISP.

    This is a good thing. Spammers should lose their Internet access, period. They should also lose their lives, but ISPs aren't really in the position to do that kind of thing.

    So much whining about a very good practice. Any ISP that allows spammers on their network should be shunned, and their management shot.

    1. Re:What really bothers me... by LiquidCoooled · · Score: 2, Insightful

      They should also lose their lives

      Rapists, molestorers and murderers are examples of people who need putting out of their misery.

      Lets keep things in perspective, spam is an electronic message, if it bothers you that much, setup a whitelist.

      By your reckoning, should I have my fingers chopped off for pinging you?

      --
      liqbase :: faster than paper
    2. Re:What really bothers me... by Dimensio · · Score: 1

      Spamming is not a "mistake", it is an act of theft. Spammers often deliberately circumvent mail filters, making their theft malicious. Spam costs businesses billions of dollars per year.

      I have no problem throwing them on the same pyre as the rapists, murderers and child molesters.

    3. Re:What really bothers me... by LiquidCoooled · · Score: 1

      Firstly, I never said it was a mistake.

      There is no instance where spam has caused a child to be orphaned, where a family has been ripped apart, where lives have been ruined.

      An advertising campaign no matter how vigerously pushed is just that - advertising.

      You yourself are advertising your own spamming campaign, the "savesamandmax" campaign is in your eyes commendable, but your just as guilty of mass mailing and telephoning to the same amount of individual recipient annoyance, should you be thrown on the pyre as well?

      I can only imagine your campaign has not got the same level of support as others, but if it was, you could quite easily DOS their website, fry their mail servers, make the secretary pull her hair out cos the phone wont stop ringing, and you could even give the postman a hernia!

      I'm not saying it isn't a problem, and I'm not happy to put up with it myself, but it does have to be put into perspective.

      The problem with spam and the internet is one of volume, every advertiser does their own little part and we the consumers do suffer, but its a problem of software implimentation, not life sentencing.

      --
      liqbase :: faster than paper
  54. SCO spams IBM by saur2004 · · Score: 1
    I hate to give narcissistic folks ideas but Ild like to make a point about bad laws.

    Suppose SCO decides to hire 3rd parties to conduct a massive spamming campain FOR IBM web sites.

  55. Slow down, "-1 Redundant" mods by Anonymous Coward · · Score: 0

    Only on /. can you post within 5 minutes of the story breaking, 3 minutes within the first comment, and have your karma pummelled into the ground as 'redundant'.

    Use the points for the power of good, not for evil!

  56. will spyware/malware sites be next? by schatten · · Score: 1

    This is at least a good start, but what about the spyware / malware sites? Will those be next? Or will there be a hosts file blacklist generated to block them out from company domains?

  57. An alternative idea by Anonymous Coward · · Score: 0

    Most of these spammers profit from people purchasing their product - whether thats some viagra tablets or whatever, the gullible fools who buy from them are using credit cards.

    So, the credit card companies need to act. Once any spam has been detected it gets reported to the credit card companies and they block the rogue merchants.

    1. Re:An alternative idea by ZB+Mowrey · · Score: 4, Informative
      Most of these spammers profit from people purchasing their product - whether thats some viagra tablets or whatever, the gullible fools who buy from them are using credit cards.

      No, most spammers profit by re-selling their spamming services. Spam is a remarkably low-hit, low-margin, and very unreliable advertising vehicle.

      Where the real spammers make their money is in creating the *illusion* that you, too, can make your fortune by paying them to send out 1,000,000 emails. In a way, spammers are like the online equivalent of those huckster-like classified ads in the backs of tabloid papers. They aren't selling any product themselves... they are selling an advertising service to normal people operating under the pretenses that there is money to be made.

      In fairness, I'm sure there are citable examples of spammers who made money selling product. I'm just willing to bet that those are the exception, not the rule.

      --

      Self-referential sigs are rarely entertaining.

  58. good intentions by redJag · · Score: 1

    They don't really specify what will be considered spamvertised web sites in the article, but consider the possibility of hiring a spammer to shutdown a website for you by advertising their site through spam :)

    Also, how can they determine the difference between warranted and unwarranted emails so easily? Just because people didn't uncheck the "Send me offers.." box doesn't mean they didn't accept it. Turning off access to a website is a pretty big deal..

    1. Re:good intentions by swordgeek · · Score: 1

      It will be pretty easy to determine if someone is spamming to bring down a competitor/enemy. Likewise, it will be QUITE easy to tell if a spamvertised site is the result of 'legitimate' advertising (not unchecking boxes) vs. fullscale massive spamming.

      If there are borderline cases, then ignore them for the time being--there are SO many UTTERLY contemptible spamvertised sites that should be shut down that it'll be a long while before getting to the borderline cases.

      --

      "People who do stupid things with hazardous materials often die." -- Jim Davidson on alt.folklore.urban
  59. Drug companies too. by Anonymous Coward · · Score: 0

    Certain drug companies (for Viagra, analgesics, anxiolytics, etc...) also benefit indirectly from all the spam. Those companies should also be liable unless they adopt policies which prevent their customers/clients from spamvertizing and from selling to spamvertizing websites with appropriate penalties.

  60. No. by Anonymous Coward · · Score: 0

    If USA ISP's try to do this, it may be seen as collusion and anti-competitive behavior.

  61. Too many competitors... by rsilvergun · · Score: 1

    Since the problem with spam is it's low barrier to entry (any s'kiddie sans morals can be a spammer), what good will it do to kill off one competitor? As soon as you nail one two or three more will pop up. Meanwhile you've just set in motion as nasty little email war that's bad for every spammer.

    --
    Hi! I make Firefox Plug-ins. Check 'em out @ https://addons.mozilla.org/en-US/firefox/addon/youtube-mp3-podcaster/
    1. Re:Too many competitors... by ebyrob · · Score: 1

      Meanwhile you've just set in motion as nasty little email war that's bad for every spammer.

      It's also bad for every email user, and spills over into web-browsing. Not a fun notion.

  62. Who cares about what *you* want by apankrat · · Score: 1

    Wait till you start your new and shiny ecommerce company, get the website up, customers coming and money flowing. Then watch it got struck down because some competitor spammed on your behalf.

    And then come back and we'll talk about Collaterial Damage.

    --
    3.243F6A8885A308D313
    1. Re:Who cares about what *you* want by Anonymous Coward · · Score: 0

      Then *if* it happens, call up your ISP and bitch them out and get your site reinstated. If they can't tell the difference between spam sites and your legitimate business, then your webpage is worthless anyway.

  63. Re:BBC link to UK story by Anonymous Coward · · Score: 0

    Wow, wake me when I give a fuck, would you? Thanks.

  64. Quick! by starphish · · Score: 2, Funny

    Quick! Everyone send spams promoting microsoft products!

    --
    Yeah, yeah, yeah. The story is a dupe, the topic is boring, the facts weren't checked. WE GET IT!!
  65. Re:Spam Whiners: Shit or get off the pot by gillbates · · Score: 1

    Collateral damage? Unavoidable -- any solution strong enough to work is going to cause collateral damage...

    No, collateral damage is not unavoidable, nor is it necessary for a solution to SPAM.

    The problem with SPAM isn't technical, but social; people like the simplicity of email more than they hate the nuisance of SPAM. There already exist several proposed, effective solutions to the SPAM problem; many of which could be implemented without *any* collateral damage, as they add on to existing systems. But, people don't care.

    --
    The society for a thought-free internet welcomes you.
  66. i applaud the effort by m2bord · · Score: 0

    now can someone please help me figure out how to educate the public to quit buying items offered in spam?

    --
    Is it 5:30 yet?
    1. Re:i applaud the effort by saturndude · · Score: 1

      I have heard that people believe something about the third time they hear it, so:

      The local newspaper's computer columnist and the local TV "consumer affairs" reporter are always quick to point out the latest phishing scams. ISPs have a vested interest in stopping spam, viruses (or virii) and spyware, some are already taking steps to educate users. Can we get mail-order and big-box stores to raise awareness too (a booklet in the box or a video tutorial on the hard drive) for people to read ("because we care")?

      The best way to educate people is probably one friend to another. I've helped a couple of people with spyware problems. I tell them how to avoid getting virii (or viruses), spyware and spam (and that spam offers are bogus). If they are hearing this for the third or fourth time, they are more likely to think, "this guy matches what I've been hearing from other sources. He knows his stuff. I should pay more attention so I'm not cheated."

      But we see a new generation of net users every few years, so educating people can never stop. I'm ready to do my part, are you?

    2. Re:i applaud the effort by m2bord · · Score: 1

      well if you're asking me...i do my part. i encourage people to avoid doing business with any company that sends email, unsolicited, to your inbox. but you know...so many people are so desperate for things they cannot afford, that they will gamble a chance with the little money they do have on something that sounds too good to be true and then be mad at themselves for going against their better judgement.

      --
      Is it 5:30 yet?
  67. Re:Spam Whiners: Shit or get off the pot by Sique · · Score: 1

    This is no different than requiring spam messages having "ADV:" in their Subject: line. It doesn't stop spammers from sending out spam which doesn't comply. And it surely doesn't stop schemes like Nigeria 419ers.

    --
    .sig: Sique *sigh*
  68. LINUX by andrewa · · Score: 0

    I think it should be called the London InterNet User eXchange. That would make for a much better acronym... Oh wait...

    --
    :(){ :|:& };:
  69. Why don't ISP's install effective mail filters ? by tglx · · Score: 1

    Maybe I'm too stupid, but I do not understand why all this crap is going unfiltered through mailservers as long as the recipient exists. Most of the spam/virus crap can be filtered out by well known and effective mechanisms like Reverse lookup, Open Relay Databases, Spamassasin, Virus filters ...

    My mailserver gets rid of hundreds of them per day. I'm not a professional IT-Admin, I'm just running my own server for business and private usage and host some friends. Some of this things make it through from time to time, but the ratio is less than 1:1000. Look also on public mailing lists where the spam rate is impressingly low.

    Things which are not available are not annoying and cannot do any damage.

    Sure ISP's might argue that this costs to much, is violating freedom of information or whatever.

    Costs: I'm sure that most users would be willing to pay a +$1 fee, if the spam/virus mail plague is removed or at least significantly reduced.
    Freedom of Information: Default setting should be spam/virus filter on. If somebody want's to get it, he must enable that feature by clicking the "I want to be spammed and infected button. I confirm that I'm responsible for the resulting damage myself. I acknowledge that I'm aware of the fact that this makes me a part of the spam/virus problem and therefor I will be prosecuted in case of damage of uninvolved parties."

    Mailservers are the optimal place to fight this plague IMHO. I'm positive that most of the big email virus attacks could have been defeated this way before they even reached the critical distribution count.

  70. Stopping by www.sorehands.com · · Score: 2, Informative
    Spammers don't stop. One spammer I asked to stop after the first spam said they would stop, but didn't. After the 91st spam, I made a demand for money and for them to stop -- they continued to spam. I sued, they stopped and paid me money.

    Spammers will stop spamming when it stops being profitable. If every time they spam, they get sued and have to pay money to attorneys and plaintiffs, they will stop -- BECAUSE it destroys their business model.

    1. Re:Stopping by pclminion · · Score: 1
      Sorry, but I'm not willing to sacrifice my time and money to take legal action against somebody who is little more than an annoyance.

      He's not costing me money, and because my spam filters work very well, he's not costing me time, either. It would be nice if it stopped altogether, but am I going to plonk down a retainer fee to a lawyer and go through that entire process just to avoid receiving a few emails each day that end up filtered into a spam folder anyway? Of course not.

      There are things in this world worth being idealistic about. This is not one of them.

    2. Re:Stopping by maximilln · · Score: 1

      Spammers will stop spamming when it stops being profitable

      What makes it profitable?

      --
      +++ATHZ 99:5:80
  71. About an hour. by Ungrounded+Lightning · · Score: 1

    How long...until people start spamming using their competition's address to facilitate them getting thrown off their host?

    About an hour after the first site thrown off.

    Not because the competition did it.

    The spammers will start doing unsolicited, plausible-looking, freebies for large, rich corporations with significant internet components to their business model. This costs the spammers virtually nothing.

    The ISPs will then be unable to enforce this policy. If they kick off the big guys when they were innocent, they're in for a big suit. If they kick off only little guys, they're in for a different big suit - over discrimination AND improper termination. If they try to sort out real spam from disinformation spam and only kick out the spammers real customers they're in for suits claiming they're wrong - even when they're right.

    --
    Bantam Dominique roosters crow a four-note song. Once you've heard it as "Happy BIRTHday" you can't NOT hear it that way
  72. Re:SDOS (Parent: +10, Hilarious!) by ggvaidya · · Score: 1

    Thank you. You just made my day :D.

  73. Re:Why don't ISP's install effective mail filters by guitaristx · · Score: 1

    Hear, here!

    Perhaps people should start suing their ISPs for failing to do at least minimal filtering.
    There's all these statistics about how much internet traffic is consumed by spam... you'd think that ISPs, for a minimal investment in some decent filtering software, would be able to reclaim that supposed two-thirds of their bandwidth.

    I will not instigate revolution...
    I will not instigate revolution...
    I will not instigate revolution...
    I will not instigate revolution...
    ...

    --
    I pity the foo that isn't metasyntactic
  74. Not necessarily. by cduffy · · Score: 1

    Let's say I'm a spammer. Let's say that for every spam I'm getting paid to send out, I send out another advertising a site that isn't paying me and (for that matter) wants nothing to do with me.

    Now, how can the ISPs shut down the sites that pay me without also harming hundreds of legitimate sites in the process? Consequently, in order to avoid doing harm to innocents, they'll (presumably) eventually end up canning their plans to cut of service to my customers.

    Sure, I'm doubling my costs -- but those are negligible anyhow. Have a solution? (As a non-spammer, I certainly *hope* so).

    1. Re:Not necessarily. by FreeTheFurniture! · · Score: 1

      I would think that this type of tactic would cross more that a few easily enforced legal limits. From there it would be easy to shut down an offending spam house.

      It's not perfect, but it's worth a shot.

    2. Re:Not necessarily. by cduffy · · Score: 1

      Since when did spammers care about legal limits? Very few of them are on the right side of every "easily enforced legal limit" that applies to them right now, so I hardly see how a few more will make any difference.

  75. Screw the spammers. Go after the market... by crovira · · Score: 1

    The Spammers will keep on doing this as long as there's a buck to be made. They'll stop when you dry up the well.

    Their market is all the 'drug'stores and wet-dream merchants who want to use this technology to shill their crap.

    Fine them BIG time, leaving the collection of the fines to the local authorities, and I can garantee you that Spam will become just sh*t in a can again.

    Don't worry about the corruption of the authorities somewhere (off-shore havens for porno crap and drug 'factories',) because, the more corrupt they are, the more its is in their personal interest to execute the prosecution of the law.

    We get Spam, we go to court, we get a summary judgement, and let the local authorities collect.

    In some jurisdictions, Spammers' CUSTOMERS will need armed escorts to the out-house.

    Say "Bye bye" to Spam for good.

    --
    MSBPodcast.com The opinions expressed here are my own. If you don't like 'em... Think up your own stuff.
  76. Re:Why don't ISP's install effective mail filters by narcc · · Score: 1

    The average user will pay for the 'spam blocking' service, and then complain that they still get tons of spam in their Yahoo! mailbox every day...

    To most users, computers are indistinguishable from magic...

  77. I think you missed the parent poster's point. by frostman · · Score: 1

    I think you missed the point there.

    If I am a spammer and I train my robot to send out 1% of the spamload as appearing to genuinely advertise each random UK site then I can very quickly make this initiative unworkable.

    The point would not be to hide an innocent URL within an otherwise normal spam, but to make a spam specifically intended to result in complaints against the innocent site.

    Having a foot in the anti-spam business myself, I'd say this is pretty much guaranteed to happen as soon as the first shutdown causes a spammer any real inconvenience.

    --

    This Like That - fun with words!

    1. Re:I think you missed the parent poster's point. by maximilln · · Score: 1

      Having a foot in the anti-spam business myself, I'd say this is pretty much guaranteed to happen as soon as the first shutdown causes a spammer any real inconvenience.

      I doubt it. Most people are sick of seeing spam on their inbox. Tales of good, honest people who lost e-mail accounts due to spam rewriting are extremely low. No one at work complains that their ISP called to eliminate their e-mail address.

      If it didn't happen for e-mail addresses, why woud it happen for websites?

      --
      +++ATHZ 99:5:80
  78. Censorship is a Defect by tokered · · Score: 1
    and the internet routes around it, right? (can't remember where that quote came from). If we really want a censorship free internet, than we shouldn't trust a code or legal agreenment to enforce anti spam measurements.

    The backbone of the internet is advertising. Yahoo mail does a great job at seperating out my spam. The google toolbar blocks most of the popups that result when I accidentaly (or idly) click onto a spammer's site. We already have many technological tools that allow us to combat spam, we don't need to regulate the internet with paper legislation.

    Thoughsometimes it is annoying, spammers have a right to spam. I use a lot of free services online, and for those "free" services I trade my personal information for valuable commodities. Somehow, I traded my email address to someone who supplied that to spammers in the first place. So we didn't write up a formal contract, but I agree to view information in return for trading my information. My ISP really doesn't need to have anything to do with it.

    Is it ethical to say "your business model is annoying, so we are going to squash it?"

    How much control should we give a gaggle of ISPs?

    1. Re:Censorship is a Defect by antispam_ben · · Score: 1

      I didn't agree to getting over 100 spams a day with no practical upper limit other than what my ISP will/can hold for me between the times I get my email. If it weren't for filters to sort out the mailing lists I DO subscribe to, I'd be tempted to give up on the idea of email.

      Phuque spam.

      Phuque spammers.

      --
      Tag lost or not installed.
  79. Darn, I just got more spam for the BBC ! by Anonymous Coward · · Score: 0

    I guess they'll have to shut down the BBC then?

    I just got spam from www.whitehouse.gov,
    and from NBC, FOX, ABC, CBS, and the Disney channel! . . . see where this leads to, forget the 1st Amendment (not that Europe even hopes to have the rights USA has...)

    Stupid idea.

  80. Help me keep a new spammer from being created! by Just+Some+Guy · · Score: 4, Interesting
    A friend of mine (a real friend; not a thin abstraction of "me") works for a company who designed and hosts another company's website. That company procured a list of "millions of guaranteed opt-in email addresses!" and contacted my friend's boss to send them all a newsletter.

    Now, my friend's boss is putting a lot of pressure on him to send these emails. My friend asked me for help but I flatly refused regardless of price. He really doesn't want to do it, but his boss is leaning on him, and his wife's opinion is that since he's getting paid for it, he should just do the work (my retort being that if his boss wanted to pay him to star in gay porn, then would he still be expected to do so?).

    I've explained at great length that this is immoral, probably illegal, and a really stupid idea all around. He agrees, but his boss really wants that check from the client and I don't know the boss well enough to confront him directly.

    Any suggestions on what I can do to put an early end to my friend's career as a spammer? I love the guy like a brother and don't want to see him rendered unemployable and hated by his family and friends, but I also don't want him to lose his job.

    My best idea so far is to get him to convince his boss to start with a very small batch of spam (say, 1000 addresses) and to have my friend report back after a few minutes that the batch has been sent (but without actually doing it). Then, about five minutes later, call the client and scream, curse, and scream some more at them for filling my inbox with their crap. Get about 10 other people to do the same thing, perhaps even in person at the company (a restaurant), until the client keels over dead in their panic to call of the "advertising campaign". Note that my friend is the only technical person at his company, so the odds of anyone other than him being able to determine whether those 1000 test emails were actually sent is roughly zero, and if there were any question, I'm probably the person that his boss would call to seek confirmation ("Yep, looks like he sent 'em at 11:30. What? The client went out of business at 11:45? What a coincidence!").

    To repeat: "my friend" is not me, so don't bother lecturing me on the evils of spamming. I just want to help him stay an honest man.

    --
    Dewey, what part of this looks like authorities should be involved?
    1. Re:Help me keep a new spammer from being created! by antispam_ben · · Score: 2, Informative

      I've explained at great length that this is immoral, probably illegal, and a really stupid idea all around. He agrees, but his boss really wants that check from the client and I don't know the boss well enough to confront him directly.

      Any suggestions on what I can do to put an early end to my friend's career as a spammer? I love the guy like a brother and don't want to see him rendered unemployable and hated by his family and friends, but I also don't want him to lose his job.


      Do you know what ISP the company uses? Here's one idea: Call them up, say "I'm an anonymous friend of a friend of a friend ... who works at such-and-such company, a customer of yours, which is thinking of advertising their business with spam. Would you call this company and perhaps discuss the possible actions that could result from them spamming? Thanks." I can see where this might have questionable consequences, the boss might say "okay, how the hell did our ISP hear that we were thinking of spamming?" but this should get the message across.

      A really good place to ask this and get many other good (probably better) ideas is the SPAM-L mailing list:
      http://www.claws-and-paws.com/spam-l/

      --
      Tag lost or not installed.
    2. Re:Help me keep a new spammer from being created! by Dark+Lord+Seth · · Score: 1

      Check the CAN-SPAM law/act/whatever it is. If you're in the US, chances are it applies to you, your friend, his boss AND the client. Have your friend nail both his boss and the client by reporting this to whoever's in charge of the whole CAN-SPAM ordeal.

      Alternatively, have your friend make the spam so damned obvious that each and every spamfilter will tag it as spam and delete it. Go poke around the spamassassin source code and think up a spam that will maximize the chance it will get marked as spam and deleted. Don't forget to include actual data on your company, your boss, the client and the client's company.

      Also, post the data here in Slashdot. If we know where your friend works, admins that visit Slashdot can block your mailservers in advance. Even better if you could give the mail servers to be used for the spam run in advance. Have your friend on the lookout for a new job and then have him report his own company at blacklists, etc.

    3. Re:Help me keep a new spammer from being created! by Just+Some+Guy · · Score: 1
      That's not a bad idea. If I can find a wide enough pool of other people that know about (so I can avoid implicating myself) I might think about doing just that.

      I've also considered telling Large Other Client that Friend's Boss is thinking about spamming. You can switch ISPs pretty easily, but it's not so easy to find another customer that accounts for more than 50% of your company's income. I don't think Large Client would drop them, but I think they might be able to bring enough pressure to bear to convince Friend's Boss to forget the idea.

      --
      Dewey, what part of this looks like authorities should be involved?
    4. Re:Help me keep a new spammer from being created! by maximilln · · Score: 2, Informative

      a list of "millions of guaranteed opt-in email addresses!"

      It's not that difficult to fathom. Home mortgages, car rental agreements, car purchase agreements, EULAs, employee agreements... any of them could bury a legal jargon form of "opt-in". The majority of people don't read them and those who do usually don't have a positive option.

      my retort being that if his boss wanted to pay him to star in gay porn, then would he still be expected to do so?

      I understand exactly what you're saying but allow me to mediate. Gay porn is probably outside the job description. The legal rub is that, if his boss were conniving enough, there's really nothing that you can do to prove that his boss is using his position in the company, and access to personal records, to manipulate your friend into gay porn. In reality it would be nearly impossible to push things that far but, legally speaking, your friend has little recourse should his boss decide to sit back and smugly think,"I'm going to tank your career because you wouldn't spam for me."

      and a really stupid idea all around

      You're right.

      --
      +++ATHZ 99:5:80
    5. Re:Help me keep a new spammer from being created! by Just+Some+Guy · · Score: 1
      Oh, I'm sure we could figure a way to stick "Nigeria", "enlarge", and "lottery" in there somewhere unobtrusively. :)

      As far as the other suggestions, my friend just bought a new house and probably isn't in a position to quit his job before finding a new one. I'm sure that if he manages to land one then the situation will change radically and quickly. In the mean time, though, I'm mainly looking for ways to save his job and keep his boss (who I like and worked for before I moved to a different city) from doing something that could ruin his business.

      However, if they insist on going through with this, then their ISP (and every blacklist I use) will know about the problem before the first batch starts going out. I've written quite a few HOWTOs on blocking spam (see my homepage for the Wiki hosting them) and have no intention of letting more loose upon the world when I can do something about it.

      --
      Dewey, what part of this looks like authorities should be involved?
    6. Re:Help me keep a new spammer from being created! by Just+Some+Guy · · Score: 1
      It's not that difficult to fathom. Home mortgages, car rental agreements, car purchase agreements, EULAs, employee agreements... any of them could bury a legal jargon form of "opt-in". The majority of people don't read them and those who do usually don't have a positive option.

      I think that's how his boss is justifying the project - those people didn't say that they didn't want random spam, so they're fair game.

      As far as the gay porn example, you're right. The main point I was trying to get across to his wife was that just because your boss wants to pay you for something doesn't mean that it's moral, ethical, or legal.

      your friend has little recourse should his boss decide to sit back and smugly think,"I'm going to tank your career because you wouldn't spam for me."

      That's the most depressing thing I've heard all day. :-/ On the other hand, I also used to work for the guy before my wife accepted a job in another city and we moved away. If it weren't for that, I'd probably still be working there, and as the senior sysadmin I would be the one with that sucky choice. Therefore but by the grace of God go I...

      --
      Dewey, what part of this looks like authorities should be involved?
    7. Re:Help me keep a new spammer from being created! by maximilln · · Score: 1

      That's the most depressing thing I've heard all day

      Usually the boss isn't smart enough to try it or be able to pull it off. It takes enormous nerve to misrepresent the truth so deftly as to focus it clandestinely on a single person. If the request did turn out to be illegal (watch the technicalities) most managers wouldn't have what it takes to start a vendetta over it. His yearly bonus might not be so shining but any prolonged social ostricism requires extreme and precise craft to orchestrate.

      --
      +++ATHZ 99:5:80
    8. Re:Help me keep a new spammer from being created! by Anonymous Coward · · Score: 1, Interesting

      Tell your friend to push the mail out through the same smtp server that corporate mail goes outbound from. It will land on blacklists, corporate mail will start bouncing, people might see a little clearer.

    9. Re:Help me keep a new spammer from being created! by maximilln · · Score: 1

      Tell your friend to push the mail out through the same smtp server that corporate mail goes outbound from.

      It's more in the business model to outsource that part of it. People have companies which will push the mail for you.

      The bottom line still is: who makes it profitable? Some bank agent somewhere knows something.

      --
      +++ATHZ 99:5:80
    10. Re:Help me keep a new spammer from being created! by Anonymous Coward · · Score: 0

      That's usually true, but in this case the poster said his friend would be sending the mail, not outsourcing.

    11. Re:Help me keep a new spammer from being created! by Just+Some+Guy · · Score: 1

      Correct, and from the /26 netblock that they use to run their web hosting service (and SMTP relaying for customers). Oh, and my backup MX and DNS until this whole plan came to light and I pulled my services back to safer accomodations.

      --
      Dewey, what part of this looks like authorities should be involved?
    12. Re:Help me keep a new spammer from being created! by maximilln · · Score: 1

      But if the manager felt like pressing the issue he could come up with a grand outsourcing plan to make it all work and thus hamstring the friend into being a willing combatant in the forces of spam.

      --
      +++ATHZ 99:5:80
    13. Re:Help me keep a new spammer from being created! by Mal-2 · · Score: 1

      He should send real e-mails to people he thinks will participate, asking them to call up and act like irate spam recipients. Some of them need to go to his boss. If that doesn't work, then maybe he SHOULD start looking for another job... after all, they may want to test their v1@gr4 out on him and put him in gay porn, once they know he's weak in the knees.

      BTW, don't bother testing your v14gr@ on lawyers... they just get taller.

      Mal-2

      --
      How is the Riemann zeta function like Trump rallies? Both have an endless number of trivial zeros.
  81. Want to crush your competitors? by dtfinch · · Score: 2, Interesting

    Just send spam on their behalf.

    1. Re:Want to crush your competitors? by maximilln · · Score: 1

      If you're competing with anyone who could even be remotely associated with a spammage then maybe you should think about your moral obligation to go into a different line of business.

      The moment someone tries to reverse spam a legitimate business two things will happen: they'll rue the day and venture capitalists will start auditing marketing firms.

      --
      +++ATHZ 99:5:80
  82. the same assumption by guet · · Score: 1

    I'm not sure you know, but I think, just maybe, perhaps, the ISPs in the UK ARE NOT THAT STUPID. They're talking about shutting down sites that are obviously peddling illegal items via spam.

    Spam from RedHat (or any large company) would not be very convincing, and I seriously doubt it's the sort of site that the ISPs are thinking of targeting. The ISPs know who is behind most of the spam, and it's fairly easy to pinpoint the most egregious sites (one selling v1Agru is never legit) and close them down.

    Leave off the conspiracy theories till you see it happening, then start complaining. Yes this is a stopgap measure, but it's better than nothing for now.

  83. Internet by Anonymous Coward · · Score: 0

    The British aren't quite as hung up on 'Freedom' as you lot are; I'm sure they'll manage just fine without that particular freedom, just as they manage fine without the freedom to carry a gun in public, or the freedom to smoke on trains. I'd welcome blocking *illegal*, *nusiance* sites.

    Individual freedom is relative to other people's.

  84. O villain, villain, smiling, damned villain! by Anonymous Coward · · Score: 0

    Tell him to get a new job, you owe it to him.

    Doubtless you don't feel that's possible. So just get them to send 1000 with a link for complaints going to your boss's (oh, sorry his boss's) inbox.

    1. Re:O villain, villain, smiling, damned villain! by Just+Some+Guy · · Score: 1
      I've tried. I think he's looking, but he lives in a city with an even worse tech market than the one I'm in. The sad thing is that other than this, he seems to have a pretty decent work situation - full-time telecommuting, good pay, etc.

      You know, "accidentally" aliasing the "Remove me!" address to his boss's account and then being unavailable for the next 24 hours or so may not be a bad idea.

      I also had the idea of explaining to his boss that being a spammer means that your IP will be blacklisted by the time your finger leaves the "submit" button (or the enter key after typing "cat msg | sendmail"). Even if his ISP doesn't dump him on the spot, one of their much larger clients who sends out about 30,000 newsletters per week to legitimately opted-in customers and who uses email to send receipts for online sales may get pretty pissed off when their messages start bouncing.

      --
      Dewey, what part of this looks like authorities should be involved?
  85. Spam is more than a nuisance. by antispam_ben · · Score: 1

    Aren't there worse things in the world than spam?

    Yes, Nazi Germany is worse than spam. What's your point?

    I could name specific examples, but that isn't my point: my point is, calling for the deaths of people who do nothing more than create a nuisance for everyone is quite childish. Whether joking or not. It's just stupid.

    Calling for spammers' deaths is definitely over the top, but email has become an important communication medium for millions, and spam is threatening to destroy it. There have been occurrences of people losing email because the ISP's mail servers crashed due to being overwhelmed with spam.

    As for the original story, I recall that many US hosts started shutting down spamvertised websites around 1998-1999, and I wonder why other "first-world" hosts are only now doing this.

    Yes, there's the danger of sites being taken down as the result of "joe jobs" (spamvertising a site the spammer hates, to get it brought down, joes.com was an early victim of such an attack), but the admins and joe-jobbed sites can work that out, either beween each other or in the courts.

    --
    Tag lost or not installed.
  86. This is not censorship. It is prevention of theft. by Derleth · · Score: 1
    spammers have a right to spam

    Bzzt, wrong, but we do have some lovely parting gifts.

    Spam is wrong because it hijacks a useful service I pay for (that is, email) and subverts it into something only useful for the minority who abuse it. In other words, it is a theft of my resources, made even worse by the blatant subversion of my will my stolen resources are put to.

    Is it ethical to say "your business model is annoying, so we are going to squash it?"

    Is it ethical to say "your computer is mine, and I'm going to use it to annoy you"?

    Technical solutions are a pragmatic "best try" effort at best, and worthless gewgaws at worst. But they also do something more sinister: They legitimize the idea that anything we create and we pay for can be used by others without our permission in ways detrimental to our own use of that property.

    Anyway, if you think filtering is a solution, come back and talk with me when your servers are grinding under the effort of hundreds of thousands of junk messages and you're still expected to provide an acceptable level of service to the people who actually pay your salary.

    --
    How can you use my intestines as a gift? -Actual Hong Kong subtitle.
  87. The real casualtiy is email. by antispam_ben · · Score: 1

    This has already been happening for years, google for joe job. I've not heard of "I'll spam for your competitor to their detriment" advertised as a spamming service, but many spammers have sent spams for other entities, and/or forging antispammers' email addresses in the From: field of spams, as revenge for being turned in/losing hotmail accounts or Geocities sites and such.

    Consider this spam for Presidential candidate John Kerry, where the text and links were taken straight from johnkerry.com:
    http://it.slashdot.org/~antispam_ben/journal/

    It's not really a spam "for" or "against" John Kerry (I must be losing my touch, it took me a few hours to determine this), but it was the spammer phishing for "donations" to the Kerry campaign: the donate link goes to a page that looks like it belongs to johnkerry.com, but accepts donations and sends them to the spammer.

    So it's really no different from the Ebay and Citibank phishing spams. THIS is what "unsolicited email" has come to.

    --
    Tag lost or not installed.
    1. Re:The real casualtiy is email. by misleb · · Score: 1

      I don't think Joe-Jobs are all that common. These days admins are pretty alert to the potential forgedness of email. Anyway, my point was that I don't see competetors forging spam just to get the other guy off the 'net. I think it woudl have to be something persona like revenge, as you say. This "new" idea of killing spamvertised sites shouldn't have much effect on the rate of "Joe-Jobs." It has been mentioned by other people here, there are far too many obviously SPAM related sites to shut down that borderline ones can be ignored. I don't think it'll be a problem.

      -matthew

      --
      "THERE IS NO JUSTICE, THERE IS ONLY ME." -Death
  88. Re:Spam Whiners: Shit or get off the pot by maximilln · · Score: 1

    How happy would you be if your legitimate, non-spamming online business was blacklisted because someone else forged fake spam?

    Whose dog did you kick? Maybe you deserve it.

    The likelihood that a good, honest business getting nailed by forged spam is extremely small unless you really feel paranoid that your product or service is so infinitely better than anything else out there that you've really taken the proverbial rug out from under the industry's feet.

    No one bemoans losing their personal e-mail address because they were targeted by a spammer using e-mail rewriting. People just bemoan getting spam. It hasn't been a large problem with e-mail addresses. Why should it be a problem with web addresses?

    --
    +++ATHZ 99:5:80
  89. Re:Spam Whiners: Shit or get off the pot by FatRatBastard · · Score: 1

    Go ask anyone who's been Joe Jobbed (I haven't, but there are those who have and are not happy about it).

    Or think in terms of eBay/PayPal. There's a lot of fraud on eBay/PayPal. PayPal has been especially "tough" when it comes to dealing with it. According to you this is a good thing. Of course, innocent folks who have had hundreds or thousands of dollars of dollars frozen with little to no recourse / no help from PayPal aren't so happy.

    No one bemoans losing their personal e-mail address because they were targeted by a spammer using e-mail rewriting.

    RIIIIIIIGGHHHTT! Because getting everyone you know to use a new account is such fun.

  90. Re:Spam Whiners: Shit or get off the pot by rokzy · · Score: 1

    er, except that everyone knows ADV but no-one else would know your signature.

    let me guess, you don't use credit cards because that's no different from telling the shop "I'm John Smith" and having someone else's account billed?

  91. Re:Spam Whiners: Shit or get off the pot by Sique · · Score: 1

    You didn't get my point.
    If every spammer would comply with the request and sign the spam messages, then we had a way to check if a spam message is really originating from a certain website.
    If every spammer would put "ADV:" at the begin of the Subject: line, then building a spam filter would be easy.
    But, alas. Spammers don't put "ADV:" in their messages very often, and many of them will refrain from signing their spam messages.

    --
    .sig: Sique *sigh*
  92. You're an idiot. by Anonymous Coward · · Score: 0

    Do everyone a favor and kill yourself.

    1. Re:You're an idiot. by maximilln · · Score: 1

      You're an idiot. (Score:0)
      by Anonymous Coward on Thu 19 Aug 05:24PM (#10018244)
      Do everyone a favor and kill yourself.


      Editors: Is this some sort of weird death threat? Does this make an AC a terrorist under the PATRIOT Act?

      Could you really legally say that to someone in society without being held responsible for it?
      --
      +++ATHZ 99:5:80
    2. Re:You're an idiot. by maximilln · · Score: 1

      You're an idiot. (Score:0)
      by Anonymous Coward on Thu 19 Aug 05:24PM (#10018244)
      Do everyone a favor and kill yourself.

      Now, if you were my boss, you would set about trying to make my life so miserable that this would be a viable option.

      The intent is clear. This is a death threat.

      It just means that the AC doesn't have what it takes to do it themselves.
      --
      +++ATHZ 99:5:80
    3. Re:You're an idiot. by maximilln · · Score: 1


      You're an idiot. (Score:0)
      by Anonymous Coward on Thu 19 Aug 05:24PM (#10018244)
      Do everyone a favor and kill yourself.

      Now, if you were my boss, you would set about trying to make my life so miserable that this would be a viable option.

      The intent is clear. This is a death threat.


      Now I have to wonder... what's the proper way to deal with this? This would be a nightmare for the SO at work.

      --
      +++ATHZ 99:5:80
  93. Re:Spam Whiners: Shit or get off the pot by maximilln · · Score: 1

    Go ask anyone who's been Joe Jobbed (I haven't, but there are those who have

    If it was a prevalent concern then it would be mentioned in the media. Everyone talks about their inbox. Few people talk about having an e-mail address shut down. Aggressive attacks against profitable business will be dealt with quickly and severely. Aggressive attacks against questionable businesses will be used as a political weapon or a shake down by the ISPs. I don't think you're guilty if your ISP comes to you with a million incidents of a spam e-mail and your website sells stuffed teddy bears.

    There's a lot of fraud on eBay/PayPal

    Tiddlywinks. Any fraud against a business entity will result in another 16-year old on the bench because he wrote a nasty java script. It's good PR. Where were his parents?

    Because getting everyone you know to use a new account is such fun

    Stories are thin about people who have lost an e-mail address more times than they've relocated. It's not fun and it's also not a problem because it doesn't happen.

    --
    +++ATHZ 99:5:80
  94. Sadly your right, I don't get spam by SmallFurryCreature · · Score: 2, Interesting
    Well not entirely true, I do get a few of the nigerian types on my address for the apache mailing list but they are pretty straightforward.

    Only spam I see is what people show in stories like these.

    So I was wrong. Lets just hope then that since these ISP's will be kicking paying customers from their networks that they will make certain that they got the right person. I can see it being a problem for "shady" but non-spamming companies that have spamming rivals, think porn sites. But non-spamming porn companies are good customers and ISP's need those.

    --

    MMO Quests are like orgasms:

    You may solo them, I prefer them in a group.

  95. Re:Spam Whiners: Shit or get off the pot by FatRatBastard · · Score: 1

    Ahhh... I get it. Trolled. My hat's off to ya.

  96. Re:Spam Whiners: Shit or get off the pot by Antique+Geekmeister · · Score: 1

    Ask anyone who's angered a Usenet troll, spammer, or script kiddie. The threats, attacks, and joe jobs against your legitimate business can add up to a hell of a lot of work and legal expense to deal with.

  97. Re:95% by herbierobinson · · Score: 1

    95% ?

    You mean you have actually seen a legit .biz or .info web site?

    I haven't.

    --
    An engineer who ran for Congress. http://herbrobinson.us
  98. Use SpamByte code 0 with my CF13-POP3(TM).... by iamcf13 · · Score: 1

    No more 'spammy' email that could be construed as containing email addresses, URLs, file attachments, HTML, quoted printable content, numbers, $'s and %'s.

    That way, spamvertised websites can be totally ignored...

    Bryan Taylor
    iamcf13@hotpop.com
    SpamByte code: 7
    (see http://www.cf13.com/game-over-spammers.htm )
    http://www.cf13.com/press-release.htm
    All email containing unwanted content will be summarily deleted or reported as spam.