Slashdot Mirror
UK ISPs to Shut Down Spamvertised Websites
JebuZ writes "The Register is currently reporting that UK ISPs are targeting ecommerce websites run by spammers in a new 'get tough' policy on junk mail. ISPs belonging to the London Internet Exchange (LINX) have voted through a code of practice which gives them the mandate to shut down websites promoted through spam, even if junk mail messages are sent through a third-party or over a different network. The move is intended to remove the financial incentive to send spam." There's also a BBC story.
...as they're likely to have the same kind of site hosted in multiple places to avoid this problem. :( At best, it will drive up the costs of maintaining said sites, but those costs aren't that high to begin with.
Furthermore, this does nothing to the spammers whose hosters are in collusion with them, and who are profiting themselves.
Find out about the Lexus Rx400h Hybrid!
Or
Address of 0wn3d computer
Offshore server
Doesn't do any good for those which run scripts on open or 0wn3d servers and forward email, i.e. phishing
A feeling of having made the same mistake before: Deja Foobar
Fighting with spammers is not going to work ever, as long as they can make even a single penny of profit from their sleazy operations. If their income source is forced to dry, their flow of spam will follow the trend.
IMHO, the companies, who sell their products through the spamvertized channels should be put into the same tight squeeze. I want to see Pfizer sweat for those Viagra ads I receive day in and day out in hundreds.
__________
The more I know people, the more I love animals
To those of you saying how bad this is because you could basically DoS your competitor by spamvertising their site, here is a basic explanation of how it should work.
Complaints start rolling in. If its not caught soon, dsbl lists will start blocking the ISP. Is the spam legit? Lets contact the owner of the site. Not legit? Prove it. Usually, it IS legit. We investigate thoroughly and determine the source of said spam, and if its truly not legit spam, done by someone else (this *has* happened with us) then we notify spamcop or whatever list needed that an investigation has been done and its taken care of.
So, with due diligence when it comes to enforcing policies such as this, and not a "shoot first ask questions later" attitude toward shutting off sites, then it becomes a reasonable policy.
Nobodies Prefect
Tidbits for Techs Technology Blog
Could we do that in the United States, too?
But what about repeat offenders? Those that open up a new website and advertize by spam on that site, too? Setting up a webpage isn't too hard these days, and one could always send one's servers offshore. This needs to be an international policy.
Haec merda tauri est. Ceterum censeo Carthaginem esse delendam.
That allows the people who have been spammed to identify and track the spammer.
Fight Spammers!
Then again. providing an 800 number is nice clue for spam filters that it IS SPAM.
Of course, like most of the people I deal with at work, my email signature includes our 1-800 number.
Speak before you think
They have been doing that for years
Actually, this is different. They are going to shut of sites that are advertised in the spam, so all a spammer has to do is send out a 'free' promotion for a valid website. The addresses used in the spam mail are irrelevant, what they are looking for is site addresses included in the body of the spam.
This is already going on. Last month I got a notification from our ISP at work of a possible spam violation (a very annoying, threatening notification) on our site. It appears that a spammer included our domain name in one of his messages and our ISP was alerted. I explained the we did NOT send out the message, was NOT selling viagra and did NOT want the traffic generated from the spam message, so we still have a website and that was the end of it.
What happens if a spammer, rather than just including my address, crafts a marketing message promoting my site. Might be a little harder to convince my ISP that I didn't initiate the spam.
Find coupons in Greeley
I have mentioned this before at Slashdot and I'm always ridiculed for it. However, I greatly reduced my spam intake from well over 2,000 spams a day to well under 100 by simply blocking any email that contains a link to a server that I've put in my "that is a spam-advertised IP address" file. It isn't difficult to do. In fact, I make what I've written freely available on my website.
Every time I mention this, someone says, "Oh my God! You're going to block some good little Mom&Pop store because they share a server with a spammer!" If that is what you are thinking, you didn't read my previous paragraph. I block any email WITH A LINK TO A SERVER that is in my block list. I DO NOT block any email originating from a server in the block list.
As this article explains, the incentive is to remove the profit margin from spam. I think my method works better than kicking them off the server if my method was used by a majority of the Internet users. The reason is that my method hopes the spammers keep the same IP addresses. If you kick them off the server, they change IP addresses and I have to block the new one.
The previous comment is purposely vague and generalized, but all of the facts are completely true.
Now, my friend's boss is putting a lot of pressure on him to send these emails. My friend asked me for help but I flatly refused regardless of price. He really doesn't want to do it, but his boss is leaning on him, and his wife's opinion is that since he's getting paid for it, he should just do the work (my retort being that if his boss wanted to pay him to star in gay porn, then would he still be expected to do so?).
I've explained at great length that this is immoral, probably illegal, and a really stupid idea all around. He agrees, but his boss really wants that check from the client and I don't know the boss well enough to confront him directly.
Any suggestions on what I can do to put an early end to my friend's career as a spammer? I love the guy like a brother and don't want to see him rendered unemployable and hated by his family and friends, but I also don't want him to lose his job.
My best idea so far is to get him to convince his boss to start with a very small batch of spam (say, 1000 addresses) and to have my friend report back after a few minutes that the batch has been sent (but without actually doing it). Then, about five minutes later, call the client and scream, curse, and scream some more at them for filling my inbox with their crap. Get about 10 other people to do the same thing, perhaps even in person at the company (a restaurant), until the client keels over dead in their panic to call of the "advertising campaign". Note that my friend is the only technical person at his company, so the odds of anyone other than him being able to determine whether those 1000 test emails were actually sent is roughly zero, and if there were any question, I'm probably the person that his boss would call to seek confirmation ("Yep, looks like he sent 'em at 11:30. What? The client went out of business at 11:45? What a coincidence!").
To repeat: "my friend" is not me, so don't bother lecturing me on the evils of spamming. I just want to help him stay an honest man.
Dewey, what part of this looks like authorities should be involved?