Slashdot Mirror


Hotmail To Junk Non-Sender-ID Mail

William Robinson writes "If your e-mail does not have a Sender ID, Microsoft wants to junk your message. Somewhere after November, MSN and Hotmail will consider it as spam. Sender ID is a specification for verifying the authenticity of e-mail by ensuring the validity of the server from which the e-mail came. Some experts feel that 'Sender ID' is not an accepted standard and has many shortcomings. Some also feel that Microsoft is trying to strong-arm the industry into the adoption of an incomplete and not accepted standard."

651 comments

  1. Stop using Hotmail by drewzhrodague · · Score: 2, Insightful

    This means that I will stop using Hotmail -- go figure!

    --
    Zhrodague.net - I do projects and stuff too.
    1. Re:Stop using Hotmail by Blindman · · Score: 3, Insightful

      Not using hotmail is one thing, but it looks like you might not be able to continue sending e-mail to those with hotmail accounts and don't share your view.

      --
      I don't practice what I preach because I'm not the kind of person that I'm preaching to.
    2. Re:Stop using Hotmail by Marcion · · Score: 1

      But how can I block all incoming mail with an autoreply saying that I do not accept hotmail?

      Tips for GNU/Linux please.

    3. Re:Stop using Hotmail by Raistlin77 · · Score: 1, Insightful

      And that's a bad thing? Eventually, Hotmail users will get so pissed off that either Microsoft stops the stupidity or the users go elsewhere.

    4. Re:Stop using Hotmail by generic-man · · Score: 1

      Why bother? Your autoreply is going to get marked as spam unless you support Sender ID.

      --
      For more information, click here.
    5. Re:Stop using Hotmail by LWATCDR · · Score: 2, Insightful

      Time to start handing out those gmail invites.

      --
      See my blog http://ilovecookes.blogspot.com/ for light hearted technical information.
    6. Re:Stop using Hotmail by ynohoo · · Score: 2, Funny

      Quick check my address book for folks using hotmail... wow, I don't know anybody that stupid. What a relief!

    7. Re:Stop using Hotmail by G-Licious! · · Score: 1

      Most of my hotmail friends are strictly MSN messenger. But screw that, I'm going to recommend them gmail anyways. Soddy Passport service works with it anyways.

    8. Re:Stop using Hotmail by Cat_Byte · · Score: 2, Interesting

      You still have a trusted list that will redirect straight to the inbox. This will be the same as I have mine set up now because only people on my list make it to the inbox and the rest is in the junk folder. This is actually a good thing for sites like geneology.com that harvests your family tree and sends email from relatives with the same name (lame). The simple fact is, something has to be done about spam and just because Microsoft has its name attached to it doesn't make it a bad thing. No spam == good.

      --
      Two roads diverged in a wood, and I - I took the one the bus load of girls just went down.
    9. Re:Stop using Hotmail by DenDave · · Score: 1

      Shit not, you do..

      My server bumps mail from hotmail anyway.. if you can't afford a real email address, perhaps you shouldn't email! (joke..)

      --
      -if at first you don't succeed, stay the heck away from paragliding.
    10. Re:Stop using Hotmail by z0idberg · · Score: 0

      the only reason I would care about this in the slightest is if everyone bails out of hotmail and starts using the same email providers as I do (yahoo + gmail). Then all the spammers start to target those providers specifically, ignoring hotmail (particularly if hotmail blocks all spam). This means I get more spam. Although perhaps yahoo and gmail will be a little more pro-active with spam control than Hotmail was (which is why I bailed from them originally) and this wont matter too much. Time will tell I suppose.

      At the moment I am quite happy with Hotmail attracting the majority of the spam. Unless of course Spam is spread more evenly across providers and it just seems like I am getting less on yahoo and gmail because they are better at dealing with it than hotmail.

    11. Re:Stop using Hotmail by aklix · · Score: 2, Interesting

      I've been using GMail for over a year now and Not one message has been wrongfully marked spam, and the only spam that slipped through was anit-microsoft spam (curious no?).

    12. Re:Stop using Hotmail by grub · · Score: 2, Informative

      How? Simple, this is from my /etc/mail/access file:
      From:hotmail.com ERROR:"550 rejected: Hotmail is whitelist only. [20030405]"
      At the top of the file I have the allowed addresses ala "foo@hotmail.com OK"
      --
      Trolling is a art,
    13. Re:Stop using Hotmail by Anonymous Coward · · Score: 0

      That's nice, but you're assuming that the hotmail users want whatever it is you're sending them, so it's their loss. But the position could easily be reversed, when you really need to email something to someone that has a hotmail account, and you'd be the one to suffer negative consequences if they don't get it. You may not be able to wait until eventually Hotmail users get so pissed off.

    14. Re:Stop using Hotmail by WhiplashII · · Score: 0, Flamebait

      True, but here's how it will play out:

      1. Hotmail starts requiring Sender-ID.
      2. Hotmail usership drops slightly.
      3. Microsoft employees start calling customer service of your company complaining about not getting email (even if they are not your customers)
      4. The word gets to your management.
      5. Your management requires you to implement Sender-ID.
      6. ??? (You have to buy an Exchange server to comply)
      7. Profit! (For Microsoft...)

      --
      while (sig==sig) sig=!sig;
    15. Re:Stop using Hotmail by tomhudson · · Score: 4, Insightful
      ... an additional thing to think of - change your signature to the following in gmail:
      If you are receiving this at your Hotmail account, please keep in mind that you might not be able to receive it after November, when Microsoft implements YABIS (Yet Another Broken Incompatable Standard).

      You may want to switch to a GMail Account or a Yahoo Account if you want to continue receiving emails from non-Microsoft accounts.
      See ... Microsoft isn't the only one capable of spreading FUD.
    16. Re:Stop using Hotmail by Anonymous Coward · · Score: 0

      "...Microsoft has its name attached to it doesn't make it a bad thing..."

      You're right. It's not a bad thing FOR Microsoft. But can be a bad thing for the internet. Patent and 3rd party restrictions... no thanx.

    17. Re:Stop using Hotmail by QMO · · Score: 1

      I can't imagine any important reason to send an email to a hotmail account.
      I haven't yet dealt with any business that has a hotmail address.
      I don't think that any of my family or friends are silly enough to only have hotmail email.
      If anyone has only hotmail and really needs something emailed to them, they can get a throwaway on another domain.

      Actually, for anything really important I will send a fax, snail mail a letter, or make a phone call.

      --
      Exam 4/C again. Maybe I'll do better this time.
    18. Re:Stop using Hotmail by flatface · · Score: 1

      Strange, I've had more than a handful of false positives and quite a few that have slipped through (mostly Russian or Chinese). Although, I only get about 1 spam a week. I should consider myself lucky.

    19. Re:Stop using Hotmail by Slipped_Disk · · Score: 5, Interesting

      As I understand it, you're wrong:
      > You still have a trusted list that will redirect straight to the inbox.

      According to the SenderID docs from Microsoft, your "trusted list" will NEVER BE CONSULTED -- the INBOUND SMTP SERVER will reject the message if there is no SPF record published, or if the originating mail server is not in the SPF record.

      Ergo your filters never run - the message is never delivered to them because it is assumed that the message is spam.

      Someone correct me if I'm wrong.

      --
      /~mikeg
    20. Re:Stop using Hotmail by Guspaz · · Score: 1

      Indeed, I first signed up for a passport when Windows XP first came out and I started using then "Windows Messenger". Even then, YEARS ago, I was able to use a yahoo address for my passport. So as far as I know, Passport has always supported arbitrary email addresses, or at least it has as long as anybody has cared about it.

    21. Re:Stop using Hotmail by Anonymous Coward · · Score: 0

      Since when do you have to buy Exchange to add a TXT record to your DNS entry?

    22. Re:Stop using Hotmail by Anonymous Coward · · Score: 0

      is this your adress book by any chance?

      my personal
      my work
      my friends

    23. Re:Stop using Hotmail by surprise_audit · · Score: 2, Funny

      I got 50 gmail invites to give away, if you know anyone that needs one... :)

    24. Re:Stop using Hotmail by Intron · · Score: 1

      My company has various field sales and reps who get mail forwarded through our mail server @company.com to their personal accounts. My DNS provider (or any ENOM reseller) does not support TXT records, so I can't add SPF. None are using hotmail right now, but if AOL did this, it would be a headache.

      --
      Intron: the portion of DNA which expresses nothing useful.
    25. Re:Stop using Hotmail by letxa2000 · · Score: 1
      This means that I will stop using Hotmail -- go figure!

      No kidding. This is a big gamble on Microsoft's part. While they may think that everyone will bow to their standards, people might just ignore them. Then the users of Hotmail will wonder why so much good email is being considered spam and will look for other alternatives. And there is no shortage of alternative free mail providers.

      Personally, I don't plan on upgrading/changing my mail server just so I can contact people at Hotmail. If it was an industry-wide move, sure, you have no choice. But just Hotmail? Nor worth it.

    26. Re:Stop using Hotmail by drakaan · · Score: 1

      ...so who was that from?

      --
      "Murphy was an optimist" - O'Toole's commentary on Murphy's Law
    27. Re:Stop using Hotmail by drakaan · · Score: 2, Insightful
      That's an interesting post. So, Microsoft is saying that SPF records fine and dandy, I don't really care one way or the other. It's not exactly difficult to add an SPF record for your mailserver (no-ip.com even has a little SPF wizard for those on dynamic DSL connections).

      For once, this sounds like a solution I can live with. A lot better than AOL's recent decision to stop accepting mail from mail exchangers with no PTR record. Forward resolution is one thing, getting changes to x.x.x.in-addr.arpa zones can be a royal pain.

      --
      "Murphy was an optimist" - O'Toole's commentary on Murphy's Law
    28. Re:Stop using Hotmail by shmlco · · Score: 1
      My DNS provider does not support TXT records...

      Switch to one that does. Try ZoneEdit.com. Depending upon the size of your site, they're free.

      --
      Any sect, cult, or religion will legislate its creed into law if it acquires the political power to do so.
    29. Re:Stop using Hotmail by tomhudson · · Score: 1
      ...so who was that from?
      Me. Made it up on the spot (its easy to do a Microsoft-style FUD campaign. a bit of facts, a bit of mis-statement, a bit of sleight-of-hand :-).
    30. Re:Stop using Hotmail by Anonymous Coward · · Score: 0

      You may want to add an offer for one of your 50+ GMail invites, and a link to the Yahoo new user page.

    31. Re:Stop using Hotmail by rutski89 · · Score: 1

      I'm acutally qute clueless about what actions spam results from. All I can say is that I've been very activly using my gmail account just about everywhere online and I get an average of about 1 spam message per week.

    32. Re:Stop using Hotmail by KDR_11k · · Score: 1

      Heh, personally I use Hotmail to sign up to stuff I suspect of selling my address to spammers. I.e. I let Microsoft handle my spam.

      --
      Justice is the sheep getting arrested while an impartial judge declares the vote void.
    33. Re:Stop using Hotmail by Alsee · · Score: 1

      If you are receiving this at your Hotmail account, please keep in mind that you might not be able to receive it after November, when Microsoft implements YABIS (Yet Another Broken Incompatable Standard).

      You may want to switch to a GMail Account or a Yahoo Account if you want to continue receiving emails from non-Microsoft accounts.


      its easy to do a Microsoft-style FUD campaign. a bit of facts, a bit of mis-statement, a bit of sleight-of-hand


      Ummm.... where were the "mis-statements" and "sleight-of-hand"?

      Chuckle.

      Though I think you should chang/drop the YABIS part if you actually use it. Most people wouldn't get it, especially Hotmail users :)

      -

      --
      - - You can't take something off the Internet! That's like trying to take pee out of a swimming pool.
    34. Re:Stop using Hotmail by Anonymous Coward · · Score: 0

      It's called porn. I've never gotten one ounce of spam in my inbox because I don't give my e-mail address to places that will send it to me. :P

    35. Re:Stop using Hotmail by A1kmm · · Score: 1

      This is equivalent to giving in to corporate bullying. Just don't send to people who use Hotmail. After all, if they don't get your e-mail, then it is their fault for staying with hotmail.

      The change seems more politically motivated than anything else(it is not that it counts as points towards a threshold as in spamassasin, it sounds like a single test for a polluted proprietary standard). If you let them win, this sort of thing will only happen more often. There is no way they can win unless enough people assume the giant can win and then give in. This applies to any company that tries to force a proprietary "standard" on others, not just Microsoft.

      I think it would be fair to label all who add the SPF records as selfish, because they are feeding those who want to force proprietary standards on others, for their own gain(i.e. to get e-mail through). Those who do not add the SPF records are responsible and looking out for the community. I only hope responsibility prevails only selfishness. BTW I can assure you that spammers will just register lots of cheap domains purely for spam through a country where they can do so easily, and add the SPFs. So it is not only a proprietary standard, but also an ineffective one that will kill more signal than it kills noise.

      --
      X-Has-Sig: yes
    36. Re:Stop using Hotmail by Anonymous Coward · · Score: 0
      when Microsoft implements YABIS (Yet Another Broken Incompatable Standard).

      May I make one suggestion. Replace 'YABIS' with 'Sender ID'. You see, that way you inform people of a name they can google for and complain about. And you don't sound like you're on a jihad.

    37. Re:Stop using Hotmail by Anonymous Coward · · Score: 0

      What a terrible thing to contemplate!

      My mail client flags all email coming from hotmail as junk by default, and only lets through a few specific addresses in a white-list type setup.

      Ditto Yahoo.com and other popular engines of spam. Add to this dns rbl running on my mailserver, and the regular beyesian filters that identify mail from the nigerians and viagra salesman, and you have a pretty spam free email experience.

    38. Re:Stop using Hotmail by Anonymous Coward · · Score: 0

      I can't imagine any important reason to send an email to a person who wouldn't send someone email just because its a hotmail account. So I guess we're even.

    39. Re:Stop using Hotmail by StikyPad · · Score: 1

      OMG.. EBay them d00d. ul b $uper rich

    40. Re:Stop using Hotmail by WhiplashII · · Score: 1

      You have obviously never worked in corporate america

      --
      while (sig==sig) sig=!sig;
    41. Re:Stop using Hotmail by Anonymous Coward · · Score: 0

      That's the stupidest thing that people keep repeating. These people are not customers of their respective DNS providers because the providers the most nerdy one out there and hated Microsoft the most. It's for other reason which might be financial. Or feature-related. Just move! That's sounds like baby talk. I don't like Microsoft and I'm gonna move all my business around, my site to the other end of the world, and my customer thru twenty different scenarios, just so I can stick to the man! C'mon, businesses don't have personal childish agendas against or for Microsoft. They're out there to do something and it is really foolish of self-important l33ts to try to brainwash everyone into running away from Microsoft. Most of the time people don't even understand the problem (admittedly) but they don't like the answer because it has the word Microsoft in it.

      The heck?

    42. Re:Stop using Hotmail by Anonymous Coward · · Score: 0


      Fifty? 50?!?

      Try 500. Yes, I have roughly 500 Gmail invitations.

      Selling them on eBay is worthless. If you look at the prices, the return on your efforts and time isn't worth it. Every time I send them out, they replace them.

    43. Re:Stop using Hotmail by MysteriousPreacher · · Score: 1

      Ah Hotmail account users.. In my experience, they are the number 1 senders of emails like..

      "If you don't send this email to 50 of your true friends, they will die..."

      "Microsoft will donate x dollars if you forward this email..." ...and a whole boat load of cheesy 'uplifting' stories about angels and children.

      Damn I'm bitter ;-)

      --
      -- Using the preview button since 2005
    44. Re:Stop using Hotmail by surprise_audit · · Score: 1
      Is anybody actually stupid enough to buy gmail invites?? Anyone who even knows what it is almost certainly knows someone with invites to spare...

      On the other hand, this is the land of the gullible, so maybe I'll make a few bucks... :)

    45. Re:Stop using Hotmail by Mehtuus · · Score: 1

      Would you send me an invite please?

      kasper@hotmail.com

      --
      http://mehtuus.googlepages.com
    46. Re:Stop using Hotmail by drakaan · · Score: 1
      I think it would be fair to label all who add the SPF records as selfish, because they are feeding those who want to force proprietary standards on others, for their own gain(i.e. to get e-mail through). Those who do not add the SPF records are responsible and looking out for the community.

      I'm trying to make sense of that. So, people who properly identify their mailservers are selfish, and those that choose not to are being responsible? SPF is a proprietary standard? SenderID, maybe, but not SPF.

      I only hope responsibility prevails only selfishness. BTW I can assure you that spammers will just register lots of cheap domains purely for spam through a country where they can do so easily, and add the SPFs. So it is not only a proprietary standard, but also an ineffective one that will kill more signal than it kills noise.

      You *really* don't understand what SPF records are good for, do you? Spammers can register cheap domains until their ears fall off. If a given domain has to use an SPF record to send mail, and that domain starts sending lots of spam, you can cut it off in a heartbeat by not accepting mail from that domain anymore. The spammer cant use forging as a workaround if you implement SPF verification before allowing a mail server to send.

      The only way it kills more signal than noise is if lots of people act in the way you identified as "responsible". If people spend the 2 minutes it takes to put an SPF record in place, you kill none of the signal, and make it easy to stop further noise in an instant.

      --
      "Murphy was an optimist" - O'Toole's commentary on Murphy's Law
    47. Re:Stop using Hotmail by ssimontis · · Score: 1

      I'm already directing a lot of my friends with hotmail accounts to gmail. And they're all loving gmail. I say let Microsoft continue with their stupdity, other free e-mail services will enjoy the new customers!

      --
      Scott Simontis
    48. Re:Stop using Hotmail by gbjbaanb · · Score: 1
    49. Re:Stop using Hotmail by tomhudson · · Score: 1

      Nah, there *is* a dfference between having something be optional and making it mandatory for your users :-)

    50. Re:Stop using Hotmail by Curtman · · Score: 1
      "Yet Another Broken Incompatable Standard"

      I've been using a slight variation of this for a few days, and just heard back from someone who noticed a typo:

      Incompatable -> Incompatible

      Thanks. In the interests of submitting my changes back for this contribution, what I ended up using was:

      NOTE: If you are receiving this at your Hotmail account, please keep in mind that you might not be able to receive it after November, when Microsoft implements YABIS (Yet Another Broken Incompatible Standard).
      You may want to switch to a GMail Account or a Yahoo Account if you want to continue receiving emails from me and other non-Microsoft accounts. Ask me how.
  2. And then... by It+doesn't+come+easy · · Score: 1

    Once people aren't able to receive email from their friends and family, I predict a mass exit to other free email systems.

    --
    The NSA: The only part of the US government that actually listens.
    1. Re:And then... by garcia · · Score: 1

      Very true. I really don't see that much e-mail from people on Hotmail anyway. Then again, most of the people I know don't use MSN Messenger either. Obviously people do use it or it wouldn't exist.

      GMail and Yahoo could get a huge boost in their userbase from this *or* MSN could gain users as the spam level drops to near zero.

      Thing is, do I really want to worry about my GMail storage capacity if more people leave Hotmail in droves? ;)

    2. Re:And then... by log0n · · Score: 1

      Or Hotmail users will start telling people (where everyone is near and dear to each other) so sign up for Hotmail to get their messages.

      It could go both ways. People do this all the time with IM.

    3. Re:And then... by bhtooefr · · Score: 3, Insightful

      Heh... I use a GMail account for normal use, and have a Hotmail account for use with Hotmail users. (it appears that Hotmail automatically blocks GMail e-mails)

      I tell the person in the first e-mail (from the Hotmail account) to make my GMail address a contact - therefore whitelisting it. I also usually send a GMail invite their way once they whitelist me.

    4. Re:And then... by Blindman · · Score: 1

      However, it isn't possible for everyone to switch everything over to Hotmail. Furthermore, from a consumer perspective, things will have changed from working to not working because of something Hotmail did. I don't think Hotmail is big enough to cause people to change to match it as oppposed to the reverse. This will get tricky however, if most e-mail doesn't have a problem. I don't know if yahoo or Gmail already support Sender ID, and if they do it will be a problem only for the marginal players.

      --
      I don't practice what I preach because I'm not the kind of person that I'm preaching to.
    5. Re:And then... by LordSnooty · · Score: 1

      (it appears that Hotmail automatically blocks GMail e-mails)

      Is that true? It's scandalous.

    6. Re:And then... by drsmithy · · Score: 1
      Is that true?

      No, it's FUD.

    7. Re:And then... by JFitzsimmons · · Score: 1

      No, it isn't. I do it all the time.

      --
      Beware he who would deny you access to information, for in his heart he dreams himself your master. -Anonymous
    8. Re:And then... by jskiff · · Score: 1

      I had this happen quite often when I first got a GMail account about a year ago. All of my non-techy friends on Hotmail were not receiving my messages...because Hotmail was flagging them as spam.

      To test it, I signed up for a Hotmail account, and then sent the new Hotmail account a GMail invite...right into the spam filter it went!

      --
      It's "no one," not "noone." Who the hell is noone anyway?
    9. Re:And then... by bhtooefr · · Score: 1

      This could have been a bad test, as my Hotmail and GMail accounts have the same username, but weirdly, the e-mail I JUST sent went in the Inbox as questionable (but not spam)...

      The two accounts have no prior knowledge of each other, FWIW.

      I DO know that a friend told me that she didn't get my e-mails because they landed in her Spam folder...

    10. Re:And then... by john_is_war · · Score: 1

      Except they'll still probably allow whitelisting for non-sender IDed mail... because MSN is like that.

      --
      Live life to the fullest. It's not that life is short, but that you are dead for so long.
    11. Re:And then... by Karl+Cocknozzle · · Score: 1
      Very true. I really don't see that much e-mail from people on Hotmail anyway.

      I still have a Hotmail account that I setup in 1996 for web-site registrations. If I didn't have so many site registrations tied to it (for password resetting purposes) I probably would never use it for anything.

      FURTHER, I haven't received a non-spam message from Hotmail since at least 2001...
      --
      Who did what now?
    12. Re:And then... by Robert+The+Coward · · Score: 1

      Gmail and AOL both have published SPF records witch senderID is based off of. My quess it both providers wont have any problems. Add a few more major regional providers like Comcast.net, road runner to that list and that will make it look more like a sender problem then Hotmail problem. If a few of the bigger boy don't then it could get ugly.

    13. Re:And then... by metricmusic · · Score: 1

      yes it is.

      --
      http://www.livejournal.com/users/metricmusic
  3. Who uses hotmail? by richieb · · Score: 1, Interesting
    Does anyone besides spammers use hotmail anymore?

    --
    ...richie - It is a good day to code.
    1. Re:Who uses hotmail? by Anonymous Coward · · Score: 1, Informative

      My sister's boyfriend does. I don't think he is smart enough to be a spammer.

    2. Re:Who uses hotmail? by defkkon · · Score: 5, Interesting
      Unfortunately, yes.

      There are a large number of people who haven't heard of Gmail. These are people who use the Internet to casually browse, and who check their email every other day. Hanging out in the geek community, its hard to believe people don't know their alternatives - but its true!

      Many of these people view email as a very set-in-stone thing. Their friends and family all know their Hotmail address, and all their favourite news letters are delivered there. To them, its a huge pain in the arse to switch addresses. Its almost unthinkable.

      Its these people that will happily put up with whatever Microsoft does to Hotmail, just so they don't have to bother with all this technical nonsense.

    3. Re:Who uses hotmail? by diegocgteleline.es · · Score: 1

      Do you know this little thing called "messenger"? You can use any email adress, but 99% of the people who uses messenger uses hotmail.

      BTW, many of the "hotmail spam" is not "hotmail spam", it's just normal email with the "from" address faked. Also, hotmail has already been using spam filters for a long time.

    4. Re:Who uses hotmail? by dupont54 · · Score: 1

      I have to admit that most of the spam I receive come from Hotmail.

      But let's see the positive side:
      Those poor Viagra and low-priced softwares sellers from fnreo_123@hotmail.com or ubguigb_7533@hotmail.com will be much less annoyed by unsolicited mail for Viagra and low-priced software (at least from other domains).

    5. Re:Who uses hotmail? by porcupine8 · · Score: 1

      My dad does, but I'm willing to bet it won't be too hard to get him to switch to Yahoo or gmail when I tell him that all emails from my sister and I (who both use yahoo) are going to go to his spam box soon.

      --
      Warning: Apple/Nintendo fangirl. Likes her electronics cute & cuddly. May be rabid.
    6. Re:Who uses hotmail? by harlows_monkeys · · Score: 2, Interesting
      Does anyone besides spammers use hotmail anymore?

      Yes. A lot of ordinary users use it. Examining a database of customer addresses from people who have contacted technical support where I work, I see the following:

      • 13.7% from aol.com
      • 12.7% from yahoo.com
      • 12.3% from hotmail.com
      • 5.1% from msn.com
      • 4.0% from comcast.net
      • 3.1% from sbcglobal.net
      • 2.1% from earthlink.net
      • 1.9% from bellsouth.net
      • 1.6% from cox.net
      • 1.2% from charter.net
      • 1.1% from verizon.net

      Those are all the ones that are above 1%.

    7. Re:Who uses hotmail? by cecille · · Score: 1

      I've had my hotmail account for years (back before it was msn when it was one of a very few free email services around, and the only one I knew about). It started as a spam-catching email address, and it remains as one to this day. And it works fantastically well for it. I run it through outlook with my work mail so it doens't get shut down and clear it out every few days. Then every time I sign up for a list I can use that address and not worry about making one up and maybe sentencing someone else to receive my spam (yeah, yeah, I know there are addresses you can use for that, but this works just fine, plus I can actually check it if I ever DO need anything)

      Back ... er ... a few years ago, maybe...when they started using that spam filter, it DRASTICALLY reduced the amount of spam I received. It went from me having to clear it out every day or so to avoid hitting my limit, to receiving ~5 or 6 spams a day. And this is with no filtering on my part, using an address I've whored out all over the internet for like 8-9 years or so. Now I don't know how well it does on false positives, because I don't get anything BUT spam to that email address, and I'd worry about the false positive rate for this new scheme (especially for people who actually still use hotmail for real), but what they have in place so far really impressed me, and I hope they just don't go messing it up by going overboard and junking valid emails.

      --
      ...no two people are not on fire.
    8. Re:Who uses hotmail? by Mithrandir86 · · Score: 1

      My father believes GMail represents a dangerous precendent that sets the stage for unregulated legal intrusions into an inbox.

    9. Re:Who uses hotmail? by porcupine8 · · Score: 1
      Well, there's always Yahoo then. :)

      I actually had similar thoughts when it first came out and people were talking about the whole scanning your email to put in text ads thing, until someone pointed out that it's highly likely that all the other free services do something similar for their ads.

      --
      Warning: Apple/Nintendo fangirl. Likes her electronics cute & cuddly. May be rabid.
    10. Re:Who uses hotmail? by TERdON · · Score: 1
      I'm a geek and I still view emails as a set in stone thingie. That's because it's a PITA to spread the new adress to absolutely everybody who might want to contact you. Actually, this is worse for geeks - having the adress all over the place and not only with their friends...

      Especially as I made my adress available in files around 98. I actually got contacted through one of thoes adress notes in '02 or something, so I was kinda lucky I hadn't scrapped it yet...

      --
      I have a really elegant proof for Fermat's last theorem. If this sig was only a bit longer...
    11. Re:Who uses hotmail? by drsmithy · · Score: 1
      There are a large number of people who haven't heard of Gmail. These are people who use the Internet to casually browse, and who check their email every other day. Hanging out in the geek community, its hard to believe people don't know their alternatives - but its true!

      A lot of people in the "Geek community" seem to have forgotten GMail is still *invitation only*. Unless you know someone who can invite you it's not even an option that _can_ be considered.

      To them, its a huge pain in the arse to switch addresses. Its almost unthinkable.

      To anyone with an established email address it's a massive pain to change email addresses. If Google were to start charging $50pa tomorrow for access, I'd prefer to pay that rather than try and change email addresses.

    12. Re:Who uses hotmail? by Mithrandir86 · · Score: 1

      Yeah, he uses the paid Yahoo service for personal Email. He's more worried of supporting the precedent in concept than actually worrying that "they" are going to read his emails.

    13. Re:Who uses hotmail? by JFitzsimmons · · Score: 1

      His loss. Maybe you should remind him that emails are sent in plaintext?

      --
      Beware he who would deny you access to information, for in his heart he dreams himself your master. -Anonymous
    14. Re:Who uses hotmail? by ShieldW0lf · · Score: 1, Insightful

      I wouldn't use gmail anyways, and I won't send emails to a gmail account.

      No, no privacy concerns. That's all FUD.

      I mean, they scan all your personal email to build and keep a profile on you, but that's not a privacy concern.

      And they keep duplicate copies of all your email forever, even if you try to delete it from the server, but that's not a privacy concern.

      And they make it all searchable by any government agency that might want a peek, but that's no concern.

      And then, aside from privacy concerns, there's the fact that they will be manipulating you with targeted advertising every single time you use their service to communicate. I don't know about you, but I stopped watching TV because I hate advertising, and stopped listening to the radio because I hate advertising, and don't visit websites whose advertisements I can't block. Why would I want to sign up for gmail? It's like having a telephone where every time you get a call, a telemarketer who's been tracking your conversations whispers in your ear telling you what you should buy. Would you buy a phone like that?

      Me neither. Hotmail might be bad. But GMail is WORSE.

      --
      -1 Uncomfortable Truth
    15. Re:Who uses hotmail? by SIGALRM · · Score: 1
      I don't think he is smart enough to be a spammer.
      Your boyfriend isn't the only one. The latest email I received from Microsoft doesn't contain the Sender-ID in the header:
      Return-Path: <20_16637_9ysiPH5q/KYjZgVB8GWI4A@newsletters.micro soft.com>
      X-Original-To: xxx@xxx.com
      Delivered-To: xxx@xxx.com
      Received: from delivery.pens.microsoft.com (delivery.pens.microsoft.com [000.00.248.67])
      by xxx.xxx.xxx () with ESMTP id F0F657299
      for <xxx@xxx.com>; Wed, 22 Jun 2005 11:49:23 -0700 (PDT)
      Received: from TK2MSFFDDSQ09 ([10.40.5.33]) by delivery.pens.microsoft.com with Microsoft SMTPSVC(6.0.3790.211);
      Wed, 22 Jun 2005 12:25:33 -0700
      Thread-Topic: Business Insight Newsletter, June 2005: Get a handle on expenses; improve reporting; evaluate business solutions; try new software; and more...
      thread-index: AcV3YCiZ6IY1ucRyRQmlNuxdYiFQlQ==
      Reply-To: "Microsoft" <20_16637_9ysiPH5q/KYjZgVB8GWI4A@newsletters.micro soft.com>
      From: "Microsoft" <20_16637_9ysiPH5q/KYjZgVB8GWI4A@newsletters.micro soft.com>
      To: <xxx@xxx.com>
      Subject: Business Insight Newsletter, June 2005: Get a handle on expenses; improve reporting; evaluate business solutions; try new software; and more...
      Date: Wed, 22 Jun 2005 12:25:33 -0700
      Message-ID: <97946201d57760$289e83d0$2105280a@phx.gbl>
      MIME-V ersion: 1.0
      Content-Type: text/html;
      charset="iso-8859-1"
      Content-Transfer-Encoding: 7bit
      X-Mailer: Microsoft CDO for Windows 2000
      Content-Class: urn:content-classes:message
      Importance: normal
      Priority: normal
      X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
      X-OriginalArrivalTime: 22 Jun 2005 19:25:33.0184 (UTC) FILETIME=[289C8800:01C57760]
      Status:
      --
      Sigs cause cancer.
    16. Re:Who uses hotmail? by Flinx_ca · · Score: 1

      When all of those favourite newsletters stop arriving in November, will people yell at the newsletter providers or Microsoft? If Hotmail and MSN users get upset with Microsoft they could effectively kill SenderID

    17. Re:Who uses hotmail? by tepples · · Score: 1

      There are a large number of people who haven't heard of Gmail.

      Even if one has heard of Gmail, now that the invite code spoolers have been shut down, how much does it cost to get invited?

    18. Re:Who uses hotmail? by Anubis350 · · Score: 1

      It's not just that, I've used a hotmail account (the same one) for ~10 or 11 years (maybe more, can't remem right now). This dates back btw to before M$ owned hotmail. Its very hard for me to simply abandon hotmail now.

      For ex. I just recieved an email from a friend who I lost touch with about 4 years ago. She was able to get back in contact with me because I had not changed my email. Yes I have other accounts (6 of them that I use regulary) but I absolutely must maintain my hotmail account for both professional and personal reasons.

      --
      "goodbye and hello, as always" ~Prince Corwin, from Zelazny's Amber series
    19. Re:Who uses hotmail? by Gunzour · · Score: 1

      What are you expecting to see in the header? Sender ID info is stored in DNS, not message headers.

    20. Re:Who uses hotmail? by Anonymous Coward · · Score: 0

      It is posted in the headers, and resolved by the DNS.

    21. Re:Who uses hotmail? by Anonymous Coward · · Score: 0

      There's a simple explanation for that: Any time I have to give out my e-mail address to someone when I don't want to receive mail from them, I give them my Hotmail address. Not to doubt my own superior intellect, but I'm sure I can't be the only person on earth who uses this practice.

    22. Re:Who uses hotmail? by harlows_monkeys · · Score: 1
      There's a simple explanation for that: Any time I have to give out my e-mail address to someone when I don't want to receive mail from them, I give them my Hotmail address. Not to doubt my own superior intellect, but I'm sure I can't be the only person on earth who uses this practice

      Uhm...you must have missed the part where I said these were from people who sent mail to our tech support. Generally, such people give out their real email addresses, because they do want to receive mail from us.

    23. Re:Who uses hotmail? by aztracker1 · · Score: 1

      Get your tinfoil hat out.. if you don't think hotmail, and yahoomail do the same things...

      --
      Michael J. Ryan - tracker1.info
  4. I can't seem... by fyngyrz · · Score: 2, Funny

    ...to verify where this story came from. I'm sorry, it'll have to be rejected.

    --
    I've fallen off your lawn, and I can't get up.
  5. Brilliant Move Microsoft. I salute you! by cmefford · · Score: 5, Funny

    Been wanting to get friends to get off the hotmail bandwagon for years. As an isp, I'd be telling my customers to tell their friends who use hotmail to get on the stick and go to yahoo or gmail before november so their ability to communicate isn't cut off. Please note, SenderID and SPF are both bad ideas. SPF didn't start off that way. In fact it made a strange kind of sense. It was co-opted. The IETF marid working group archives are a great place to go read about how MS really helped screw the pooch. Hotmail and MSN orphaning themselves is probably a good thing in the long run. It's a shame though. And yes, I publish spf records, no I do not make use of them. They are not useful.

    1. Re:Brilliant Move Microsoft. I salute you! by MilenCent · · Score: 1

      I agree completely. I haven't been able to shift any of my 50 Gmail invitations since most people are satisfied (read: complacent) with their current webmail, and it's mostly only the cognoscenti who've even heard of Gmail.

      Once I'm able to explain why they've suddenly stopped receiving most of their stuff over at Hotmail, it'll be a lot easier to use up those invites.

    2. Re:Brilliant Move Microsoft. I salute you! by __aaahtg7394 · · Score: 2, Informative

      it'll be a lot easier to use up those invites.

      Unless, of course, hotmail doesn't like gmail's SPF records =)

    3. Re:Brilliant Move Microsoft. I salute you! by wcdw · · Score: 2, Informative

      I disagree that SPF records are completely useless. They do pick off about 1% of my incoming spam.

      And if more people would use them, I'd get fewer bogus bounce messages. They're annoying, and it's not that hard to DDoS my mail server by sending out a few zillion messages with known bogus addresses and a forged from address through one's favorite botnet.

      People that configure them to 'soft fail', now that's pretty worthless.

      --
      If you're not living on the edge, you're just taking up space!
    4. Re:Brilliant Move Microsoft. I salute you! by djbckr · · Score: 1

      Let me preface the below with the statement that this is not intended to be a troll...

      I realize that this would be a painful/inconvenient move for everybody, but if the end-result is more of what we want, isn't this a good thing?

      Never mind the fact that this may be an incomplete standard; I realize that. But standards can be revised. Yes, we're talking Micro$oft here, but if they have the ability to do this when nobody else can, I say it's a Good Thing!

    5. Re:Brilliant Move Microsoft. I salute you! by cmefford · · Score: 1

      I know it's not a troll. What I meant, (and didn't expressly state) is that stuff that annoys folks, breaks communication, fragments the internet, I don't think is a good thing. This move by Microsoft, -while some would say is typical- is kinda a shame. It just fragments things, creates frustration, and is awkward. The end result is likely to be a better thing, yes.

    6. Re:Brilliant Move Microsoft. I salute you! by jon3k · · Score: 3, Informative

      And yes, I publish spf records, no I do not make use of them. They are not useful.

      Anyone who makes statements like this truely doesn't understand the purpose of SPF.

      Its "sender policy framework" - not "spam prevention framework."

      SPF isn't designed to stop spam, why is that so hard to understand? Its just used to make sure that whatever domain an email was sent from, that the envelope sender matches. Thats it. End of discussion.

      This doesn't stop spam, but it makes sure that no one can forge an address from your domain, unless it wasr eally sent from your domain.

      If everyone respected it, your users wouldn't be getting any more phishing scams from "someuser@paypal.com" - or "attn@bankofamerica.com".

      You're going to sit there and tell me that its "not useful" ? Get your head out of the sand.

    7. Re:Brilliant Move Microsoft. I salute you! by Trepalium · · Score: 3, Insightful

      It's an incomplete standard covered by a patent awarded to Microsoft who is only providing it under non-OSI compatible terms (it's non-transferrable, so each party needs to get a license directly from Microsoft). This is Microsoft trying to bully everyone else into adopting their patented standard. However, I believe they have overestimated their strength in this matter.

      --
      I used up all my sick days, so I'm calling in dead.
    8. Re:Brilliant Move Microsoft. I salute you! by Malc · · Score: 2, Interesting

      Complacent? Don't talk such rubbish. Gmail doesn't offer me anything worthwhile, so I stick with Yahoo.

      I've had the same Yahoo address since about 1998. It's followed me from ISP to ISP, and country to country. I got sick of constantly changing my email address, be it personal, work or academic, which was my main reason for sticking with Yahoo. On top of that, they forward all email to my personal domain account, and tag spam in the process. I only use the web interface when I'm on the road, although I could set up a web interface on my own mail server. They also provide 2GB of disk space, which I doubt I'll ever need.

      So tell me again, what is the "got to have" feature of Gmail? I certainly don't think I'm being complacent. Maybe you're just gullible and will jump at every piece of marketing foisted in your direction ;)

    9. Re:Brilliant Move Microsoft. I salute you! by kosmicki · · Score: 1

      I'm only a few days out from launching my own email server, IMAP complete with webmail. There is nothing like being able to control all aspects of your email experence.

    10. Re:Brilliant Move Microsoft. I salute you! by CokeBear · · Score: 2, Funny
      So tell me again, what is the "got to have" feature of Gmail?

      They're not evil.

      --
      Reality has a liberal bias
    11. Re:Brilliant Move Microsoft. I salute you! by cmefford · · Score: 2, Interesting

      "Anyone who makes statements like this truely doesn't understand the purpose of SPF." Did I say spf was designed to stop spam? uhh, nope. SPF breaks things, and fixes nothing. A primer on some broken things; http://homepages.tesco.net/~J.deBoynePollard/FGA/s mtp-spf-is-harmful.html As to me not understanding, that's an assumption on your part. I spent a lot of time in the marid working group. I thought this was a very interesting concept. I paid attention, I participated. I, as in *I* decided, that for my users, it held no value. I am certainly not at all alone in this point of view.

    12. Re:Brilliant Move Microsoft. I salute you! by Anonymous Coward · · Score: 0

      SPF has nothing to do with the From header seen by end users, it allows domain owners to create policy rules for SMTP SERVERS!

      MS SenderID is an attempt to prevent phishing, it relies on message headers that can be trivially forged. The PRA patent is nonsense and belies the fact that SenderID is not a realworld solution, it's an insult to the intelligence of every person involved in email infrastructure.

    13. Re:Brilliant Move Microsoft. I salute you! by vanyel · · Score: 1

      Blocking forged mail is not useful? For once I truly *do* salute Microsoft. It's a minor nuisance for users who use multiple accounts, and you have to whitelist forwarders, but that's much less of a nuisance than all the phishing scams that depend on forged mail...

    14. Re:Brilliant Move Microsoft. I salute you! by SirCyn · · Score: 2, Insightful

      Your link is barely more than a long rant.
      The examples given apply to 1% of internet mail users.
      Most of the examples are such extreme exceptions to the norm that I would have no qualms with blocking them alltogether.

      I understand what SMTP was designed to be, but that was what the internet needed 20 years ago. What we need now has changed. SMTP can still work, just not entirely as it was designed; and SPF is a step in the right direction.

      How can you say SPF fixes nothing? Numerous examples have been given of how SFP can help alot. Phisher are one good example. Many of the virii that went around last summer would have been stoped by SPF and were on the networks I admin (those virii that use from admin@yourdomain.com, "run this program please")

      SPF Records and Filters need to be configured correctly to be effective. But critisizing SPF because it breaks antiquated "features" of SMTP is no excuse to totally reject it.

    15. Re:Brilliant Move Microsoft. I salute you! by jrumney · · Score: 1
      Blocking forged mail is not useful?

      Not when it blocks legitimate email from mailing lists etc at the same time.

    16. Re:Brilliant Move Microsoft. I salute you! by Anonymous Coward · · Score: 0

      What you fail to tell us is that the "envelope sender" is completely uninteresting. What matters is what the users see in Outlook, and they will still see false domains and phishing scams.

    17. Re:Brilliant Move Microsoft. I salute you! by lawpoop · · Score: 2, Interesting
      "They also provide 2GB of disk space, which I doubt I'll ever need."

      Do you think Yahoo would have given you those two gigs if gmail hadn't done it first?

      "Maybe you're just gullible and will jump at every piece of marketing foisted in your direction ;)"

      And how much marketing has Google given gmail? Absolutely none.

      --
      Computers are useless. They can only give you answers.
      -- Pablo Picasso
    18. Re:Brilliant Move Microsoft. I salute you! by cmefford · · Score: 1
      There are other links. (that wasn't *MY* link btw, it was a reference).

      Good ole Pollard's page concerning spf is very rantish, true. But if you think that's bad, try having an exchange with him sometime.:0

      However, that doesn't make him wrong. The primary criticism of spf lies in the "it's not an anti-spam measure, it's a reputation system" mantra on the one hand, coupled with "spf is a great anti-spam tool" on the other. There's something strange about this approach.

      Again, I can continue to point folks to the marid archives http://www.imc.org/ietf-mxcomp/mail-archive/mail12 .html and ask them to read for themselves. But overall; for my 2cents, spf relies on dns to do things it isn't designed to do, in order to accomplish things I feel (and others) are better accomplished in other ways. A very short list begins with bringing MX and SMTP hosts up to full compliance with the published relevant rfcs and their bcp recomendations. That would be a better start, imho, than just jumping on spf.

      As to the antiquated features, well, a lot of them are still very much in use, and still very valid. Agreed, hardly anyone still does uucp email anymore, and I dropped support for bang-path email when I moved to Postfix last year. Those 1 percenters are still real however, and the job of the postmaster is to see that the mail gets delivered, not dropped. And to take the extra effort if required.

      There was a really nice presentation on this at MAAWG a couple of months back.

      and btw, I will always criticise stuff that breaks things that are configured correctly and according to the published best current practices.

      Also that rational was only one of many considerations for totally rejecting it.

    19. Re:Brilliant Move Microsoft. I salute you! by panda · · Score: 1

      JDB Pollard and the grandparent are right.

      There are studies that indicate the majority of SPF records are setup by spammers to legitimize their spam.

      SPF allows you to set up a record that says any domain is allowed to send mail from me and should be considered legitimate. As long as it allows that, it is pointless.

      --
      Just be sure to wear the gold uniform when you beam down -- you know what happens when you wear the red one.
    20. Re:Brilliant Move Microsoft. I salute you! by sobachatina · · Score: 2, Insightful
      I'll concede that it may not be worth the work to change email addresses especially since you have had that email address for so long.

      When it really comes down to it there probably isn't a "got to have" feature of any webmail except recieving and displaying text messages. I tried out various php based webmail systems on my home server and they all were functional. You could log in and read and send mail. Some, however, were easier to use, provided more options, etc.

      Gmail offers quite a bit that is worthwhile compared to Yahoo's free webmail. Threaded conversations, POP access, powerful filters that include forwarding to other addresses, simpler and more responsive interface.

      Some of those options are available from Yahoo if you pay for it but that is an irrelevant comparison.

      The point is, as with so many of Google's offerings, what you have may be good enough but they've improved upon it greatly. Whether it is important enough to you to invest the work to switch is your business but it isn't just another "peice of marketing".

    21. Re:Brilliant Move Microsoft. I salute you! by Malc · · Score: 2, Informative

      "Do you think Yahoo would have given you those two gigs if gmail hadn't done it first?"

      And that's a reason to switch to Gmail? I think not.

      "And how much marketing has Google given gmail? Absolutely none."

      And what do you call this whole thing with invites? It's viral marketing. It's much more subtle than tradition approaches, and clearly sneaked past your marketing detector.

    22. Re:Brilliant Move Microsoft. I salute you! by vanyel · · Score: 1

      All you have to do is whitelist the list servers --- not really that big a deal, even for me who's on a large number of them.

    23. Re:Brilliant Move Microsoft. I salute you! by JFitzsimmons · · Score: 1

      You get a copy of the invite in your sentbox; you can just send them a copy of the link provided in the invite via some other means, like IM, forums, or even by phone.

      --
      Beware he who would deny you access to information, for in his heart he dreams himself your master. -Anonymous
    24. Re:Brilliant Move Microsoft. I salute you! by thdexter · · Score: 3, Interesting

      Hmm.

      I have a domain, glitterandtwang.org, which is hosted by suffusions.net. Suffusions.net has an SMTP server, but it requires authentication (in the form of having checked your email in the last 15 minutes over POP) and so I use my ISP's SMTP server. So my email is from dexter@suffusions.net, but it's sent from adelphia.net... am I going to be shitlisted by everybody with SPF and Sender ID?

      --
      I'm on a road shaped like a figure eight; I'm going nowhere but I'm guaranteed to be late.
    25. Re:Brilliant Move Microsoft. I salute you! by Seumas · · Score: 1

      Microsoft mostly just wants to get every email server that isn't run by a corporation off the internet. Small guys and hobbiests and community groups can go fuck themselves or pay some sort of licensing fee. Yay.

    26. Re:Brilliant Move Microsoft. I salute you! by Fulcrum+of+Evil · · Score: 2, Interesting

      This doesn't stop spam, but it makes sure that no one can forge an address from your domain, unless it was really sent from your domain.

      So, if I want to send mail from my personal domain, won't SPF screw me? I'm on speakeasy and, while they certainly are decent at CS, I doubt they'll add spf records for my domain.

      --
      "We returned the General to El Salvador, or maybe Guatemala, it's difficult to tell from 10,000 feet"
    27. Re:Brilliant Move Microsoft. I salute you! by UnrefinedLayman · · Score: 0
      If everyone respected it, your users wouldn't be getting any more phishing scams from "someuser@paypal.com" - or "attn@bankofamerica.com"
      If everyone respected the intended purpose of email, we wouldn't get spam. And if everyone respected each other, there would no crime, every person would get their own kitten, rivers would run flush with beer and no one would post stupid comments on slashdot. If only people were better.
      Get your head out of the sand.
      Kettle- thou art black!
    28. Re:Brilliant Move Microsoft. I salute you! by gclef · · Score: 1

      Unless suffusions.net is willing to publish SPF records that allow email from their domain to originate from adelphia, yes, there will be problems.

      If your ISP will forward @glitterandtwang.org to your domain, you could publish SPF records for glitterandtwang.org allowing its mail to originate from adelphia, but that's a couple steps away from where you are now.

      Or, you could do the POP-before-SMTP that suffusions is requiring.

    29. Re:Brilliant Move Microsoft. I salute you! by gclef · · Score: 2, Informative

      I'm on speakeasy, and I'm fine. The only trick is that I'm running my own DNS for my domain, and am publishing my own SPF records. Is speakeasy running DNS for your domain, or is that somewhere else?

      (Speakeasy will put reverse DNS on your IPs, if you have statics, which also helps immensely.)

    30. Re:Brilliant Move Microsoft. I salute you! by zsazsa · · Score: 3, Informative

      You will be shitlisted unless suffusions.net adds an 'include:adelphia.net' directive in their SPF entry. You of course could add this line yourself to your glitterandtwang.org DNS if you started using that domain for your your email, as you have control over your own domain.

    31. Re:Brilliant Move Microsoft. I salute you! by Atzanteol · · Score: 1

      Me thinks you need to lookup the definition of complacent . I don't think it means what you think it means.

      --
      "Ignorance more frequently begets confidence than does knowledge"

      - Charles Darwin
    32. Re:Brilliant Move Microsoft. I salute you! by quantum+bit · · Score: 1

      Or if the list server does the right thing and uses MAIL FROM: its own domain (i.e. a bounce catcher or list owner).

      I check SPF at my mail server and have absolutely zero problems with the various FreeBSD lists that I'm subscribed to.

    33. Re:Brilliant Move Microsoft. I salute you! by wohlford · · Score: 1

      You'll be fine as long as you put your ISP in your SPF record. Like this:

      "v=spf1 mx mx:mx.adelphia.net ~all"

      --
      Jason Wohlford
    34. Re:Brilliant Move Microsoft. I salute you! by benw1979 · · Score: 1
      I like Gmail because of the "perceived performance" of the web interface. The brilliant developers at Google did a lot to eliminate round trips to the server for common tasks.

      Want to reply to a message? Instead of requesting a "Compose" page from the server, Gmail just instantly snaps open a hidden message editor. There are quite a few other instances where round tripping appears to have been eliminated.

      It's the same with Google Maps. I use them for their user interface, which blows away any other mapping website at the moment. Smooth scrolling and background image loading make this site function with all the performance of a client side application.

    35. Re:Brilliant Move Microsoft. I salute you! by Reziac · · Score: 1

      [laughing] I was going to point out the same thing. Why pay a marketing department, when half a million slashdot-smitten geeks will do it for you, for free?!

      Like yourself, I want stability in my email address. I've had my BBS and Earthlink addys since 1996, and my Yahoo and Hotmail addys since 1998 (tho the Hotmail addy is pretty useless due to spamflooding. Conversely my Yahoo addy never gets spam.) I also have email thru GMail, AIM, and my own domain, but seldom use any of those. Yahoo's main advantage as webmail goes, is that it still works fine in an old browser, with javascript and images disabled. (GMail is fairly good that way now too, tho)

      The main problem with Yahoo is that their email is intermittently unreliable, sometimes for months at a time. -- One reason why I'd keep my ELN account even if I had another ISP (if fixed wireless ever gets here, our only hope of broadband) is because ELN email is nearly 100% reliable, per my running cross-check of stuff that's carboned to the BBS.

      --
      ~REZ~ #43301. Who'd fake being me anyway?
    36. Re:Brilliant Move Microsoft. I salute you! by MilenCent · · Score: 1

      Gmail's killer features are its unobtrusive advertising (as opposed to banner ads), its killer Javascript interface (with a plain HTML interfact for slow connections and unsupported browsers), a killer spam filter, the beginnings of phishing protections, 2GB+ of mail space, free POP access, its filtering system, and the Archive-vs-Trash concept. There are some things I've left out, but those are the reasons I use it. (And it's not perfect -- I know two people who had to suffer through personal Gmail outages.)

      I don't know if Yahoo Mail is better or worse than Gmail; judge for yourself based on the above. But I'm reasonably sure it's better than Hotmail.

    37. Re:Brilliant Move Microsoft. I salute you! by 51mon · · Score: 1

      SPF isn't quiet that useless, but it is of limited value in the fight against spam.

      It can be used to reduce those irritating paypal phishing messages, if they come from paypal.com. That is essentially it's goal. It doesn't stop someone registering a "paypal.com" like domains. "paypal-support.com", "paypal.com.id" or whatever, so it may not reduce the volume of such much.

      By advertising genuine email servers for a domain it does facilitate other email filtering schemes, and may allow you to reduce unwanted backscatter when people use your domain, by permitting those that choose to reject messages that fail.

      (Actually it is relatively easy to mitigate backscatter - at least from an end user perspective - if you know all the email will be sent from a small number of servers you control.)

      What it doesn't address directly is spam. The spammer can advertise SPF records for the domains he choses to send spam from. You could then decide to blacklist the domain, but then you've probably gone from blacklist IP addresses (range less than 2^32) to blacklisting domains (range many orders of magnitude greater than 2^32).

      I advertise SPF records for new domains where I control the email set-up, and know people can easily send email via the proper servers (web interface, SMTP AUTH etc). I don't think it is worth reworking established big email domains with lots of forwarding and other weird stuff happening just to be able to advertise an SPF record.

      I haven't yet deployed any filtering on other peoples SPF records, indeed with my current spam filtering I've yet to see the point, most of the viral dross, and paypal scams are killed by other techniques - RBL, greylisting, mime type filtering for Windows executables.

    38. Re:Brilliant Move Microsoft. I salute you! by jrumney · · Score: 1

      Its not a big deal for you, because you are in control of your own mail server. Most people do not have that luxury.

    39. Re:Brilliant Move Microsoft. I salute you! by deman1985 · · Score: 1

      I have an OSU email account which I use as one of my primarily personal accounts since it is one of the few that isn't flooded by spam and I never use it to register for sites; anybody who knows that address will be able to get ahold of me now and still be able to 20 years from now.

      Unfortunately, OSU SMTP servers don't allow sending outside of the university's domain, so I have to resort to using my authenticated sbcglobal server for all outgoing messages from that address. As a result, SPF would effectively prevent me from using my OSU address (the only permanent account I have) for any practical emailing.

      This is why the standard isn't useful.

    40. Re:Brilliant Move Microsoft. I salute you! by jaeson · · Score: 1

      Just use a Sender: header and publish your own SenderID TXT record for your domain. It really isn't too difficult.

    41. Re:Brilliant Move Microsoft. I salute you! by vertinox · · Score: 1

      I'm in the same boat and I can't even use my hosted domains SMTP server from home because I have comcast as my ISP and they block at port 25 connections. That means my @domain.com will always be tagged under comcasts SMTP server. Oh well...

      --
      "I am the king of the Romans, and am superior to rules of grammar!"
      -Sigismund, Holy Roman Emperor (1368-1437)
    42. Re:Brilliant Move Microsoft. I salute you! by lawpoop · · Score: 1
      "Do you think Yahoo would have given you those two gigs if gmail hadn't done it first?"
      And that's a reason to switch to Gmail? I think not.

      No, that's not a reason to switch, but don't make like yahoo mail has given you two gigs all along. You have benefitted from gmail coming along and offering 2 GB, because otherwise you would be stuck with your 200 MB or whatever it was.

      I have a friend who is on her 3rd hotmail account because she went over her limit twice already.

      "And what do you call this whole thing with invites? It's viral marketing. It's much more subtle than tradition approaches, and clearly sneaked past your marketing detector."

      OK, this viral marketing is a form of marketing, but it's not like google has plastered posters of gmail all over buildings, billboards, buses and pedestrians. In fact, how successful would this viral marketing campaign be if gmail wasn't something actually worth using?

      Sanjay: "Hey Bob, check out this gmail invite I just sent you?"
      Bob: "Thanks, Sanjay, what is it good for?"
      Sanjay: "Are you ready?! Get this: It's Google's email service!!
      Bob: "Okay... what's so great about it?"
      Sanjay: "Didn't you hear me? It's Google!"
      Bob: "So what? I alread have Hotmail/Yahoo, I don't need another webmail service..."

      Instead it went like:

      Bob: "Okay... what's so great about it?"
      Sanjay: "It gives you 2 gigs of storage and has great search capabilities."
      Bob: "Excellent! I've been waiting for this all along!"

      Bottom line is,
      1. Gmail wouldn't have been so popular if it didn't actually offer something worthwhile, regardless of whatever marketing campaign they used, and
      2. you wouldn't have your 2 GBs if it wasn't for Gmail, so don't pretend like you haven't benefitted at all from Gmail.

      --
      Computers are useless. They can only give you answers.
      -- Pablo Picasso
    43. Re:Brilliant Move Microsoft. I salute you! by MarkRose · · Score: 1

      My ISP blocks port 25, too. For a while, they wouldn't even send email "from" domains not hosted by them -- but my webhosting company runs a secure smtp server on a different port -- so I use that, and get the benefit of having my outgoing connection to my webhost (which contains authentication info) encrypted. If your hosting company does not offer this, they are behind the times.

      --
      Be relentless!
    44. Re:Brilliant Move Microsoft. I salute you! by Anonymous Coward · · Score: 0

      "Been wanting to get friends to get off the hotmail bandwagon for years."

      In other news, my domains reject mail coming from, or appearing to come from, hotmail.

      It's been a great spam-filter so far.

    45. Re:Brilliant Move Microsoft. I salute you! by B1gP4P4Smurf · · Score: 1

      This doesn't stop spam, but it makes sure that no one can forge an address from your domain, unless it was really sent from your domain.

      Better known as a joe job. Damn, if this succeeds, my domain name won't be funny for too long... Lee

    46. Re:Brilliant Move Microsoft. I salute you! by Greyfox · · Score: 1

      Speakeasy has the best support group I've ever talked to. Do they run your DNS? I run my own with them, so I just inserted my SPF record in my own DNS files. I'm sure if you dropped 'em an E-Mail they'd hook you up -- hell they even added reverse records for me. Hell the first guy I talked to on the phone knew what a reverse record was! That's rare in this industry...

      --

      I'm trying to teach myself to set people on fire with my mind... Is it hot in here?

    47. Re:Brilliant Move Microsoft. I salute you! by vanyel · · Score: 1

      Any responsible mail server allows users to white/blacklist, and in fact the mail servers I run at the three ISPs I run them on all have ways for the users to do just that.

    48. Re:Brilliant Move Microsoft. I salute you! by aztracker1 · · Score: 1

      I have my main domain configured for a soft fail, simply because I participate on email based discussion lists, postgre, npgsql, mono, and several others, in addition to yahoogroups ... I would like to know that messages I send get there...

      Also, a softfail on spf, allong with an rbl entry is almost surely spam.. I have my spam filters inbound to give enough points to a soft fail that pretty much any other flags in my filters will drop the email.. a softfail alone filters it to the junk email folder...

      SPF as far as a soft fail isn't entirely useless, just means it's more likely to be spam, and should be treated accordingly... it isn't the only solution.. but if everyone implimented SPF with at least a soft-fail, could be much more helpfull...

      I kinda wish that email lists used the mailing list address as the from, and made the reply-to the original sender... More and more lists are doing this..

      The only more capable anti-forgery solution is to require the from domain be a listed mx entry for that domain.. spf allows this, but doesn't require it, which is a good idea.

      If everyone implimented a strong SPF for their domains, and the big 3 (yahoo, msn/hotmail, and aol) required SPF it would bring everyone else around, afaik aol checks spf, so does msn.. I think the thought here, is if no spf/senderid is posted, it is presumed a hardfail (hopefully if *not* from a listed mx for the sending domain).

      --
      Michael J. Ryan - tracker1.info
    49. Re:Brilliant Move Microsoft. I salute you! by panda · · Score: 1

      I haven't yet deployed any filtering on other peoples SPF records, indeed with my current spam filtering I've yet to see the point, most of the viral dross, and paypal scams are killed by other techniques - RBL, greylisting, mime type filtering for Windows executables.

      Largely, that's the point. It is useless, because a. people don't use it, and b. it doesn't really solve any problem whatsoever.

      I find it interesting that the majority of the proponents of spf with whom I communicate have only gone half way in their implementation of spf. They admit to having published spf records for their domains, but to not using spf in the filtering on their incoming mail. I find that simple fact to be rather telling.

      The point is to say that emails from @domain.tld come from servers that @domain.tld approves. However, if you check the records for the large ISPs, almost all end in "?all." I have found very few spf records that end in "-all." (Actually if you check for SPF records on my personal domains, sigio.com, .org, and .net, you'll find spf records that end in -all.)

      There's nothing to stop someone from setting up something like:

      v=spf1 mx +all

      There you go, every computer on the Internet is allowed to send mail purporting to be from your domain. What's your libspf-enabled spam filter supposed to do with that?

      I've done some looking into this and given it serious consideration. While I created spf records for my domains, I actually believe now that spf is not so useful.

      --
      Just be sure to wear the gold uniform when you beam down -- you know what happens when you wear the red one.
  6. Yes but by Colin+Smith · · Score: 4, Funny

    If we all buy Microsoft email servers it will be a standard, won't it.

    --
    Deleted
    1. Re:Yes but by Jaruzel · · Score: 1

      You laugh... but *most* corporate Internet facing email servers ARE Microsoft Exchange Servers, configured as bridge-end servers. Once Exchange goes through an upgrade cycle to, say, version 2006/7 and has SenderID checking enabled by default, then expect to see this adopted at an expediential rate.

      Everyone talks about how Linux runs the internet, but the internet is really run by the Businesses, and the Businesses all use Microsoft products.

      -Jar.

      --
      Together, We Can Make Slashdot Better. I Do NOT Mod ACs. - Check Me Out
    2. Re:Yes but by Anonymous Coward · · Score: 0

      Wrong, your mail server has nothing to do with it.

      Sender Policy Framework is something you put in your DNS zone file, not something that's in Exchange server.

      Now whether or not your server verifies if incoming email meets SPF requiements is a different issue all together.

      Get your facts straight.

    3. Re:Yes but by ErikTheRed · · Score: 1
      Everyone talks about how Linux runs the internet, but the internet is really run by the Businesses, and the Businesses all use Microsoft products.
      Except for those (60M - 70M) of us running Notes / Domino. Ugly (not as bad as it used to be), but far more secure over the years than Outlook / Exchange.
      --

      Help save the critically endangered Blue Iguana
    4. Re:Yes but by j0yb0y · · Score: 1

      If we all buy Microsoft email servers it will be a standard, won't it.

    5. Re:Yes but by a_n_d_e_r_s · · Score: 1

      No some will continue to use their free email server regardeless...

      --
      Just saying it like it are.
  7. I don't need Hotmail any more... by pointbeing · · Score: 1

    Now that I've found Mailinator there's no reason for me to maintain a Hotmail account.

    --
    we see things not as as they are, but as we are.
    -- anais nin
    1. Re:I don't need Hotmail any more... by Anonymous Coward · · Score: 0

      Yup, there's no spam at mailinator.

  8. Only if other ISPs go along with it by matt_morgan · · Score: 5, Insightful

    This is a trial baloon. If some other big ISPs decide to go along with this, I can see it happening. If nobody else goes along with it, they won't enforce it. No need to panic here.

    1. Re:Only if other ISPs go along with it by mwvdlee · · Score: 1

      Who really cases whether it succeeds?
      The only reason people have a hotmail account is because Messenger required one. Apparently Messenger also works with non-hotmail accounts, so why would anybody have a reason to have a hotmail account anymore?

      --
      Slashdot social media options: AIM, ICQ, Yahoo, Jabber and Mobile Text. Why no MySpace?
    2. Re:Only if other ISPs go along with it by Anonymous Coward · · Score: 0

      They already are. Gmail, AOL and Earthlink are all part of the trial. All publish and will soon be validating SPF and Sender ID.

    3. Re:Only if other ISPs go along with it by killjoe · · Score: 2, Interesting

      The thing to do would be for everybody who does not want an MS dominated email infrastructure to reject all email from servers that publish SPF records.

      Too bad nobody has balls to do that though. MS will own another vital infrastructure by throwing their weight around and shoving down everybodies throats. The rest of the industry will bend over and take it like usual.

      It's kind of a abused spouse syndrome. They keep getting slapped around and they are too afraid to leave.

      --
      evil is as evil does
    4. Re:Only if other ISPs go along with it by frankie · · Score: 2, Informative

      Plenty of big ISPs already go along. Out of the big 4, AOL, Earthlink & MSN have SPF records; only Yahoo is sitting out due to DomainKeys. Other SPFs include Gmail, RR, and Adelphia. Another interesting note: top spam sources MCI, SBC, Comcast, and XO do NOT publish SPF.

      As an anti-spammer, I really hope that Hotmail has the cojones to follow through with this. It would be a huge wake-up call to lots of ISPs if millions of emails suddenly get rejected.

      BTW, what's the correct SMTP error code to put on an SPF hard bounce?

    5. Re:Only if other ISPs go along with it by Anonymous Coward · · Score: 0

      BTW, what's the correct SMTP error code to put on an SPF hard bounce?

      551

    6. Re:Only if other ISPs go along with it by Anonymous Coward · · Score: 0

      Right. And what about the small ISPs?

    7. Re:Only if other ISPs go along with it by Anonymous Coward · · Score: 0

      They learn SenderID (it only takes 5 minutes) or suffer the consequences.

    8. Re:Only if other ISPs go along with it by Cecil · · Score: 1

      Please be aware: SPF and Sender-Id are NOT THE SAME THING.

      I don't think any major ISP has adopted Sender-Id, which is Microsoft's ill-advised attempt to embrace-and-extend SPF in a heavily encumbered way.

    9. Re:Only if other ISPs go along with it by Ciaran_H · · Score: 1

      Sad to say, some people pay for their Hotmail accounts, which I think is absolutely laughable, given that there's no way to tell between a free and paid one by the email address. Try signing up to something wiath a hotmail.com address and you risk getting rejected even if you have a paid account.

      But those paid accounts could account for some of those that hang around. Also, mail retention; now that Hotmail gives 250MB as standard, people may well have lots of email in their account. If they move, they lose that mail, and 250MB is a lot of mail to lose.

      Then again, people might just not have heard of anything else. That's where evangelism comes into play. ;)

    10. Re:Only if other ISPs go along with it by viktor · · Score: 1

      As an anti-spammer, I really hope that Hotmail has the cojones to follow through with this. It would be a huge wake-up call to lots of ISPs if millions of emails suddenly get rejected.

      As postmaster of a 20.000-user email server, I sincerely hope they do not.

      As you are no doubt aware, SPF makes forwarding impossible. To me, forwarding is an essential part of the entire email infrastructure.

      Solving one problem by creating another is not a solution.

      We have lots of users that forward emails here and there, and these forwards will not work if the original sender publishes an SPF-record and the final recipient respects it. But it is the forward at our machine that stops working - even though we do not care anything about SPF - and it is we that will have to explain to each and every of our 20.000 users what has happened and why some of their email was not forwarded.

      By publishing an SPF record, you break other people's systems. By respecting SPF you do the same. I think it is downright rude, and on the virge of unprofessional, to implement functionality that causes other people's systems to break on a large scale, but unfortunately SPF-proponents do not see things this way.

      Of course, Microsoft do not care. Hotmail does not offer forwarding - why should they care that forwarding breaks. They do not get the workload. We, who DO offer forwarding, do.

    11. Re:Only if other ISPs go along with it by dbIII · · Score: 1
      The thing to do would be for everybody who does not want an MS dominated email infrastructure to reject all email from servers that publish SPF records.
      What if your objective is to read email instead of attempting social engineering of Microsoft?

      I see the problem is the domains under Microsofts control will be rejecting legitimate email formed to the accepted standards to their clients. Rejecting things that they send out is just playing politics with other peoples mail - OK on an individual basis but if the people who would otherwise be getting the mail don't agree with your stand you are just being a bastard operator from hell.

    12. Re:Only if other ISPs go along with it by miley · · Score: 1

      Of course, Microsoft do not care. Hotmail does not offer forwarding - why should they care that forwarding breaks. They do not get the workload. We, who DO offer forwarding, do.
      But they *must* be the recipient of a lot of forwarding. Who do your users forward to? Who do the universities and ISPs forward to? My guess: Hotmail, Yahoo, and now Gmail

    13. Re:Only if other ISPs go along with it by aztracker1 · · Score: 1

      So, if I publish spf records for my domain, saying that my mail servers should be where all mail for my domain is coming from.. meaning if you check SPF (not senderid), you will know if it is forged or not.. you would rather have all the phishing scam mail, than mail from responsible people/domains?

      That is the most assinine thing I've ever heard of.

      --
      Michael J. Ryan - tracker1.info
    14. Re:Only if other ISPs go along with it by aztracker1 · · Score: 1

      WTF about the small ISPs? it takes 5-10 minutes to publish an SPF record.. it's a TXT record in dns... not talking about having to impliment it for inbound if they don't want to.. but *NOT* having at least a soft SPF for outbound in this day and age is just a head in the sand.

      --
      Michael J. Ryan - tracker1.info
    15. Re:Only if other ISPs go along with it by aztracker1 · · Score: 1

      First, part of SPF has a system for forwarding/mail lists etc.. Second, this is where a soft-fail comes in.. soft fail says it's not *really* from a designated server, but *might* be legitimate.. Third, if implimenting a filter system that takes spf into account, soft fail probably shouldn't outright reject the email by itself.. though would be nice if something else worked better.

      There's *NO WAY* to impliment a system preventing email forgery without breaking something...

      --
      Michael J. Ryan - tracker1.info
  9. Big Surprise by alvinrod · · Score: 4, Interesting
    From the article:

    "We think Microsoft is trying to strong-arm the industry into the adoption of an incomplete and not accepted standard".

    Gee, when's the last time this happened?

    Personally, it will only be a matter of time until the spammers figure out a way to get around this. End result: a serious pain for everyone that accomplishes nothing.

    1. Re:Big Surprise by schon · · Score: 2, Insightful

      it will only be a matter of time until the spammers figure out a way to get around this

      A way around what, exactly?

      Sender-id is *not* an anti-spam measure. It will do absolutely nothing (as in _NOTHING_ ) to stop spam.

      All it does is say "this email comes from a server that the owner of the domain says is OK."

      How, exactly, does that stop a spammer from sending spam?

    2. Re:Big Surprise by non · · Score: 1

      when's the last time that microsoft did such a thing, turned around a year later saying it was hopelessly broken, and _then_ offered their new and improved overlord mail control system?

      --
      ...vividly encapsulates that post-Watergate/pre-punk/coked-up moment when you could trust no one, least of all yourself.
    3. Re:Big Surprise by LocoMan · · Score: 1

      Well, it could stop spam coming from botnets with forged addresses... :)

    4. Re:Big Surprise by Anonymous Coward · · Score: 0

      It doesn't.

      What it does is force the sender of the email to be accurate.

      Which means that the spammers won't be able to forge email headers as easily.

      Which, in turn makes the armies of zombie spam-bot's even more valuable, since those bots will be sending the spam as themselves...

      Hmmm.....

    5. Re:Big Surprise by PhilHibbs · · Score: 1

      It should dramatically reduce the flood of "That email address that you sent an email to does not exist" messages that I get, in relation to emails that I did not send. It didn't come from my ISP's address block, therefore it didn't come from me, therefore they don't need to spam me back.

    6. Re:Big Surprise by operagost · · Score: 1
      Obviously, it stops
      - Open Relays
      - False bounces, and most importantly
      - Forged addresses.

      The sender must provide a valid email address, or at least a valid domain name. If they don't, the delivery will fail. If they do, you still get the spam but you know who they are and pretty soon, they'll be on all the black lists and out of business.

      --

      Gamingmuseum.com: Give your 3D accelerator a rest.
    7. Re:Big Surprise by schon · · Score: 1

      it could stop spam coming from botnets with forged addresses... :)

      No, they can still forge the address, just not the domain part.

      And it's still not an anti-spam measure.

    8. Re:Big Surprise by schon · · Score: 1

      What it does is force the sender of the email to be accurate.

      Actually, no it doesn't. All it checks is the *DOMAIN* of the email, not the sender. So address forging can still happen.

      And it's not like the spammers can't spend $8 a month for a new domain which will bypass all of this crap.

      Remember, the biggest adopters of SPF are spammers

    9. Re:Big Surprise by schon · · Score: 1

      Obviously, it stops
      - Open Relays


      Wrong. This *IN NO WAY* stops open relays.

      False bounces

      Which isn't actually spam, and is a result of idiot mail server admins blindly accepting mail they shouldn't. If a mail server admin is stupid enough to configure their server to accept mail that it can't deliver, what makes you think that they'll configure it properly for SPF or sender-id?

      So you're wrong on this count, too.

      Forged addresses.

      No, it does nothing to stop forged addresses. As you realized, it only checks the domain name.

      If they do, you still get the spam but you know who they are and pretty soon, they'll be on all the black lists and out of business.

      What color is the sky in your world?

      Got some news for you: WE ALREADY HAVE BLACKLISTS , and the people who are pushing SPF and sender ID say they don't work.

      Why is it that a blacklist based on something that costs less than $10 to change will be infallible, when blacklists based on something that is much more difficult and expensive to change (IP address) don't work right now?

    10. Re:Big Surprise by bluGill · · Score: 1

      It may not stop open relays, but it amounts to the same thing. You can trying sending all the email through that open relay you want, it won't get into hotmail because the SPF records do not match.

      This is not directly about stopping spam. This is stopping spam from sources we cannot go back and identify latter. If a spammer sends an email with my address, I know they sent it through my ISP's mail servers, and therefore I can contact my ISP to stop it. (By making them require authentication on the email servers) Right now anyone can send email with my name on it, and there is nothing I can do about it.

    11. Re:Big Surprise by iabervon · · Score: 1

      Actually, spammers started using SPF before anybody else, having guessed (correctly) that software would be more likely to deliver spam with SPF than without. SPF means that, when you get spam from some throwaway domain, it's really from that throwaway domain.

    12. Re:Big Surprise by HopeOS · · Score: 1

      What are you referring to here? The domain of the email MAIL-FROM sender is verified against the ip address of the connection. This even happens before the mail is accepted for delivery. This means that if you try to send someone email and identify yourself using my email address, it will fail the spf check. It doesn't make any difference who the sender is. It only matters that it's not me.

      Now, if you are saying that someone on my domain can spoof me, then you'd be wrong because my mail server does not allow non-authenticated email either.

      I don't care about spam anymore, having all but stopped using email for serious communication. I do care that people are spamming using my email addresses. And if the servers receiving those emails would bounce them per my SPF records, that would be less spam for everyone and no bounces back to me.

      As for spammers registering new domains, I would be happy if that was their best option. It is trivial to blacklist entire known spammer domains. Currently, we can only blacklist based on fuzzy matching, entire mailservers and sometimes whole countries.

      SPF at least puts a spammer's $8/yr domain in danger. If they can only spam for a couple hours before it's blacklisted, I'd consider that a huge improvement. Presently, they're spamming using my domain, and that's gotta stop.

      -Hope

    13. Re:Big Surprise by Anonymous Coward · · Score: 0

      True, but the advantage is that I can prevent spammers from spamming using my domainname. That's all - and quite good enough. Anything more advanced will cause headaches and cost more money and won't be compatible with anything.

    14. Re:Big Surprise by aztracker1 · · Score: 1

      Besides the fact that most spam comes from forged domains anyhow... with SPF(not fond of sender-id extensions) widely implimented, it would curb most spam in and of itself.. the other side is that at that point blocklists could do their job better. Of course, it does take going so far as to presume a hard fail, if no spf/senderid is in place.

      --
      Michael J. Ryan - tracker1.info
    15. Re:Big Surprise by aztracker1 · · Score: 1

      Okay.. imagine if you will that *every* domain has an spf record (strong) implimented... now, the spam-bot-nets can't send mail *from* xyz.com since they aren't going *through* xyz.com's authorized servers.

      This means spammers need to use *REAL* servers/domains at the very least... this will allow for domain blacklists to work, and ip blacklists to work better, because you don't have to account for every zombie machine out there...

      It isn't a *single* solution, but it is something that *WOULD* help, considering most spam/phishing is *from* a false/forged address, which would be snaired more often than not by an SPF lookup.

      --
      Michael J. Ryan - tracker1.info
  10. Do as I say, not as I do by asc4 · · Score: 4, Interesting

    Despite the fact that Hotmail will only be using SPF v2 records to do the filtering, it seems that Hotmail themselves haven't bothered yet to publish one: http://www.dnsstuff.com/tools/lookup.ch?type=TXT&n ame=hotmail.com

    1. Re:Do as I say, not as I do by iambarry · · Score: 1

      I followed your link. It reports :

      hotmail.com. TXT IN 3600 "v=spf1 include:spf-a.hotmail.com include:spf-b.hotmail.com include:spf-c.hotmail.com include:spf-d.hotmail.com ~all"

      Looks like they have a perfectly good SPF record.

    2. Re:Do as I say, not as I do by Anonymous Coward · · Score: 0

      Looks like they have a perfectly good SPF record.

      Despite the fact that Hotmail will only be using SPF v2 records to do the filtering, it seems that Hotmail themselves haven't bothered yet to publish one

    3. Re:Do as I say, not as I do by peterprior · · Score: 1

      hotmail.com. TXT IN 3600 "v=spf1 include:spf-a.hotmail.com include:spf-b.hotmail.com include:spf-c.hotmail.com include:spf-d.hotmail.com ~all"

      Looks like a version 1 record - not version 2

    4. Re:Do as I say, not as I do by blowdart · · Score: 1

      I may be very blind, but where in the article does it say hotmail will be filtering on V2 records? Of course you realise that V1 records are, in fact, valid v2 records anyway, right?

    5. Re:Do as I say, not as I do by Anonymous Coward · · Score: 1, Interesting

      Your assertion that Hotmail will only be using SPF v2 records to do the filtering is patently false.

      The following comes from http://spf.pobox.com/senderid.html

      spf.pobox.com is responsible for the SPF concept, and was a partner with MS in developing Sender-ID. I quote:
      --begin quoting---
      spf2.0 records

      I just published my SPF record. Do I need to publish an spf2.0 record?

      Answer: probably not. By default, Sender ID will read v=spf1 records for checks against both identities. If a sender needs to distinguish one identity scope from another, it is welcome to publish spf2.0 records, which can be made specific to either the PRA or the MAIL-FROM. The vast majority of publishers are not expected to need to do this. Hotmail.com, for example, only publishes a v=spf1 record. So you probably don't need to either. You probably only need to worry about spf2.0 records if you're an ESP or have a contract with an ESP.

      As of 20041110, this matter is still open to debate and is being actively discussed.
      --end quoting---

      Not a huge fans of Sender-ID either, but the assertion that an SPF2 record is required here ain't true.

    6. Re:Do as I say, not as I do by asc4 · · Score: 1

      "Hotmail says that they will only check v2 records, and if a domain has no record, they'll treat that as a Sender-ID failure and display the yellow warning box."

      So if you want to play with Hotmail, you'll have to publish v2 records.

  11. Good! by mister_llah · · Score: 1

    ... well, spammers won't change, so all this will do is convince those who use Hotmail because they've had an account forever or who don't know better... to look for greener pastures... like Yahoo Mail, or perhaps Gmail (if they can get an invite, which isn't hard)...

    (or did they remove the invite system yet? hehe)

    ===

    We all know what needs to be done about the spammers... *cocking shotgun* ... I'm not the one to do it, I just enjoy imagining the sound of a cocking shotgun, why are you looking at me?

    --
    MoM++ - A Classic Expanded - [Master of Magic 1.5]
    http://mompp.sourceforge.net/
    1. Re:Good! by JohnnyDanger · · Score: 1
      Somewhere after November, MSN and Hotmail will consider it as spam.

      Hear that, Google? Microsoft just gave you a deadline to get Gmail out of beta.

  12. Since my Gmail account by dankasfuk · · Score: 1

    I check my hotmail acct once a week or so...always junk mail. Needless to say I won't be sorry to see it go.

    --
    Ban Engadget - moderators censor comments!
  13. strongarm what? by tomstdenis · · Score: 1, Interesting

    I don't know ANYONE who uses hotmail for more than a throwaway address. So let them have their little party. Who cares?

    Tom

    --
    Someday, I'll have a real sig.
    1. Re:strongarm what? by hab136 · · Score: 2, Interesting
      I don't know ANYONE who uses hotmail for more than a throwaway address. So let them have their little party. Who cares?

      And Mailinator does a better job at throwaway addresses anyways.

    2. Re:strongarm what? by Launch · · Score: 4, Interesting

      I've been using hotmail for years, way before MS ever owned hotmail. At the time I signed up for hotmail everyone was chilling with their @netcom or any simular isp branded e-mail. If you're anything like me you've gone through a couple ISPs over the last 10 years. You also are probably aware what a PITA it is to change e-mail addresses. That's why I've stuck with hotmail all theses years.

      I have a g-mail account, it's pretty awesome and probably better then hotmail... but one feature that hotmail has over other web-based e-mails is easy integration with a fat-client e-mail system.

      I've yet to see a web-based client that can handle my e-mail needs... Even MS's OWA isn't a replacement for outlook.

      I know there will be a flurry of flames about using outlook, etc etc... but the bottom line is that nothing integrates better for my needs, my palm, my blackberry, my non-work hotmail, owa, etc.

      My basic point is that there are at least some merrits to using hotmail.

      --
      Your mammas flamebait.
    3. Re:strongarm what? by zaxus · · Score: 5, Informative

      GMail will integrate with a fat client over POP3. Check here: http://mail.google.com/support/bin/answer.py?answe r=12103&topic=194

      --
      /. zen: Imagine a Beowulf cluster of Beowulf clusters...
    4. Re:strongarm what? by robertjw · · Score: 1

      If you're anything like me you've gone through a couple ISPs over the last 10 years. You also are probably aware what a PITA it is to change e-mail addresses.

      Yep, that's why I registered my own domain. For $7.95/year (thanks godaddy) I will have my email address for all eternity - even after hotmail is gone, if I so choose.

    5. Re:strongarm what? by mikapc · · Score: 1

      There is free imap mail services. Check out http://www.imapmail.org/ . The only catch for the free service is you have to find your own smtp mail server to send messages, but then if you have an isp you can use theirs or you can make your own machine an smtp sending machine.

    6. Re:strongarm what? by fwarren · · Score: 1

      Speak for yourself. I have changed IPS's several times, and still have my email account from 1994

      --
      vi + /etc over regedit any day of the week.
    7. Re:strongarm what? by dbIII · · Score: 1
      isn't a replacement for outlook
      Without third party tools to recover corrupted mailboxes outlook is nothing but an accident waiting to happen. To force one paticular accident just store more than 2GB of mail in one "folder", not such an uncommon thing these days.

      It's most likely that you will need two or more other programs that work effectively to replace all the functionality of outlook - but it is probably a good step - or buy that third party mailbox recovery software now. I suggest email that follows a mailbox standard and lets you open the mailbox with any of a variety of clients is a better alteranative to MS lookout express or the other one that comes free with MS office. With virtually any other client people can use it onsite and use a webmail client to look at the same mailboxes from offsite.

  14. Not a big deal. by yoder · · Score: 0, Redundant

    I will just stop sending mail to anyone using Hotmail and MSN.

    Problem solved. Next!?

    --
    "In a time of universal deceit, telling the truth is a revolutionary act!" -- George Orwell (Eric Arthur Blair)
    1. Re:Not a big deal. by Adult+film+producer · · Score: 1

      exactly.

    2. Re:Not a big deal. by Anonymous Coward · · Score: 0

      Wow I really admire your can-do attitude and I like how you find a simple solution to a complex problem. Good job! You are an obvious leader. I suppose we're all supposed to be amazed at your ability to boil a problem down to it's simplest elements and provide a clear-cut solution. Now, what happens when you NEED to send email to someone using a Hotmail account? You're probably one of the same people that bitch loudly when some web site doesn't support Firefox, "Why would they alienate a group of people like that?!" And here you are with your idiot solution, which is to alienate people.

    3. Re:Not a big deal. by Professeur+Shadoko · · Score: 1

      You don't even have to stop !
      Your e-mails will be trashed, why bother stopping sending them ? Continue as you did before.

  15. The Problem is patents ! by Anonymous Coward · · Score: 1, Insightful

    The problem is, that the experts think, that the patents which MS owns endanger Free implementations of the "standart".

    1. Re:The Problem is patents ! by Anonymous Coward · · Score: 0

      No, the problem is that SenderID doesn't work. It's nonsense.

  16. The Average User of Hotmail... by ehaggis · · Score: 1

    ...will not be able to make the connection of why they are suddenly not receiving their Hotmail. Nor will they be able to tell Aunt Suzie to use "Sender ID".

    Microsoft is losing it's ability to push "standards" and more and more they are bitten by launching stuff like this.

    --
    One ring to bind them - should probably have more fiber and less rings in their diet.
  17. Who cares? by Otto · · Score: 1

    I switched off of hotmail to gmail quite a while back, and frankly, I don't miss it. Every once in a while I log in to my old hotmail account to see if anything other than spam is in there. Nope.

    Still have yet to get one mismarked spam in my gmail account though.

    --
    - Give a man a fire and he's warm for a day, but set him on fire and he's warm for the rest of his life.
  18. this one could be a problem for casual users by yagu · · Score: 5, Interesting

    I've had my fun with e-mail spoofing, but now that e-mail is everywhere and used by almost everyone it's probably close to "time" for mechanisms and protocols that make e-mail more trustworthy and difficult to spoof (of course there are always going to be exceptions). But Microsoft contributes little by doing their own end run on the industry.

    From the article:

    Microsoft's unilateral move may hurt Internet users, he said. "Sender ID isn't widely deployed, meaning that average users are now at risk for having their legitimate e-mail tagged as spam when they send messages to Hotmail users."

    Experts say one of the problems with Sender ID is that it doesn't work with e-mail forwarding services. The basic premise of Sender ID is to check if an e-mail that claims to be coming from a certain Internet domain is really being sent from the e-mail servers associated with that domain.

    This opens up a huge can of worms... I don't quite get why Microsoft doesn't learn from past mistake^H^H^H^H^H^H^Hefforts. The unwashed masses (read, typical computer users) already deal daily with mind numbing quirky computer behavior (or lack of). For example (and I know I'm beating a dead horse (checkmate!)), Microsoft's morphing menus with chevrons, Microsoft's dumping of random files in random directories to mold their vision of a magical world (how many have been burned by the unexpected "thumbs.db" file in their picture folders?), and bizarro network settings (ever wonder why seemingly every computer in a home network gets configured with bridging?) -- these are just a few examples of things that confuse and irritate typical users, but the ripple effect is into the "support" community (that's us).

    Rolling out this semi-baked quasi-standard e-mail device could wreak havoc with the e-mail users. I'm hoping whatever they do it's configured by default to not reject non-ID'ed e-mails. Regardless, unless and until there's a stronger and more mature standard, this one's trouble.

    1. Re:this one could be a problem for casual users by Anonymous Coward · · Score: 0

      > Regardless, unless and until there's a stronger and more mature standard, this
      > one's trouble.

      Yes, better to sit around saying `we can't solve this problem...yet` than to try something and simply drop it if it's no good. And no, it won't - at least, shouldn't - mess your business up. If your business relies on a free Hotmail account then perhaps you should stop being such a cheapskate? If email is important to you, you should be paying for the level of service you require.

    2. Re:this one could be a problem for casual users by Evangelion · · Score: 1


      If *I* do not use a free hotmail account, but a majority of my *customers* use free hotmail accounts, that still screws me over.

    3. Re:this one could be a problem for casual users by ajs · · Score: 2, Insightful
      Ways in which this would suck for businesses:
      • Applicants can't recieve email (e.g. an offer letter or response to resume submission
      • Customers send feedback and support requests, but cannot recieve responses
      • Newsletters stop being recieved
      • Receipts of purchase stop being recieved
      • Warnings about termination of service stops being recieved
      On the plus side, I'm hoping that they will accept SPF-Classic, and that my ISP will list one, finally. I'm tired of getting mail bounced because my SPF inclusion of my ISP isn't honored (due to their lack of SPF listing).
    4. Re:this one could be a problem for casual users by myukew · · Score: 1

      This opens up a huge can of worms...
      Yet they developed it to close the can of worms that's called email today.

    5. Re:this one could be a problem for casual users by Anonymous Coward · · Score: 0

      > Ways in which this would suck for businesses:

      Many, many things suck for business which use Hotmail as their main/only email system.

      > Customers send feedback and support requests, but cannot recieve responses

      I'd phone and find out what's going on. Once I discovered they were using Hotmail to handle my important email I'd be looking elsewhere. I never bother to contact companies who only provide Hotmail (or other free email services) addresses anyway.

    6. Re:this one could be a problem for casual users by PeterBrett · · Score: 1
      > Many, many things suck for business which
      > use Hotmail as their main/only email system.
      Well done. Now, go back and read the GP again. He was talking about businesses that have customers who use Hotmail. No cookie for you today.
    7. Re:this one could be a problem for casual users by zapp · · Score: 1

      Maybe I missed something, but how does a small, hidden 'thumbs.db' file "burn" you?

      --
      no comment
    8. Re:this one could be a problem for casual users by Trepalium · · Score: 1
      bizarro network settings (ever wonder why seemingly every computer in a home network gets configured with bridging?)
      I've NEVER seen that as a default. I have, however, seen a large number of PCs with ICS (NAT) enabled for no reason, mainly because people misunderstood the question about "sharing" their internet connection during the home networking setup wizard.
      --
      I used up all my sick days, so I'm calling in dead.
    9. Re:this one could be a problem for casual users by snookums · · Score: 1

      It burns me all the time. Try maintaining websites with a Windows system, then uploading everything via FTP or rsync. You end up with random thumbs.db files all over your website. This is:
      a) A waste of space
      b) A potential security risk becuase it provides an index for directories which you may not have wanted indexed
      c) A PITA when you couple it with a CMS which indexes image directories to provide a nice interface for users, but ends up throwing annoying warnings about unrecognized file types.

      --
      Be careful. People in masks cannot be trusted.
  19. Shooting themselves in the foot by eander315 · · Score: 0, Redundant

    I fail to see how this is anyone else's problem. If they want to label all my mail as junk, that's fine with me. Their users will probably not be too happy about it, and most will probably switch to another email service. If no one reacts to their demands, MS will be forced to abandon this line of action.

    1. Re:Shooting themselves in the foot by Anonymous Coward · · Score: 0

      You do realize that the entire email process involves two parties, the sender and the receiver. You'd be a sender. Your potenential recipent with the hotmail account would be the receiver. The entire process would be broken for you and whoever you'd be trying to send email to.

      This whole "it isn't my problem" attitude is bullshit, because you're assuming that because a person is dumb enough to have a hotmail account thety must be dumb about EVERYTHING, and therefore they must anxiously want whatever it is you're trying to send them. But what if that isn't the case? What is you NEED to get information to a hotmail account because (gasp!) that person is in authority over you? I'm not talking about an IT decision, but maybe the hotmail recipient is a professor waiting on a paper or and HR department looking for a resume. Sure, capitalism may eventually sort this all out, but are you willing to wait that long? Hotmail is a big, popular service and putting your head in the sand like this won't cut it.

  20. It's only fair by portwojc · · Score: 4, Funny

    Hotmail and MSN will flag as potential spam those messages that do not have the tag to verify the sender

    It's only fair cause we already tag mail from those domains as potential spam.

    1. Re:It's only fair by Anonymous Coward · · Score: 0

      portwojc, for failure to prepend this comment with "In Soviet Russia", you must spend the remainder of the day reading at a -1 threshold.

    2. Re:It's only fair by dim5 · · Score: 1, Funny

      Hey, it's potentially not spam if you actually are in the market for an Italian Rolex.

      --

      Is something burning?
      Oh, it's my karma.

  21. GMail? by Andrewkov · · Score: 2, Interesting

    I wonder if G-Mail will be out of Beta by then? That could be an interesting opertunity for Google.

    Anyway, G-Mail is already so superior to Hotmail, in both the interface and spam blocking, I can't imagine why people still use Hotmail.

    1. Re:GMail? by kevin_conaway · · Score: 2, Funny

      Out of beta? Hahahaha. Google has completely crushed the meaning of the word 'beta'.

    2. Re:GMail? by generic-man · · Score: 1

      Who would trust something as important as their e-mail to a beta service that could disappear, go down, or start charging at any moment? Hotmail's been around for ten years and, despite all its criticisms here, it still works without a cover-your-ass BETA tag on it.

      Conspiracy theory: Google's testing out a payment system of its own. Who's to say they won't pull an Apple iTools and start rolling out a paid set of features for power users?

      --
      For more information, click here.
    3. Re:GMail? by rayde · · Score: 1

      does anyone know if Gmail or Yahoo currently support SenderID? Will they continue to be able to send to Hotmail users??

    4. Re:GMail? by porcupine8 · · Score: 1

      Well, considering that TFA states that Yahoo has a competing technology of its own, I doubt it.

      --
      Warning: Apple/Nintendo fangirl. Likes her electronics cute & cuddly. May be rabid.
    5. Re:GMail? by blowdart · · Score: 1
      Supports it, or has records for it?

      gmail advertises Sender ID records, as does hotmail. Yahoo uses their own DomainKeys "standard", in test mode last time I looked, but does not check incoming mail

      Personally, I don't care. What does bother me are the misconfigured email systems that decide to send an email back to my email address telling me that a mail someone tried to send using my domain name didn't pass SPF requirements. If it didn't pass it was fake, so why the heck would you want to spam telling me you rejected a mail I didn't send. It's going to get as bad as idiot email virus scanners sending bounces back to the from: address.

    6. Re:GMail? by rtaylor · · Score: 1

      Google has completely crushed the meaning of the word 'beta'.

      Not yet. Beta means the software has yet to be demonstrated functional in most circumstances.

      Beta for Google includes their business case. Mail simply hasn't been demonstrated to be profitable yet, so they reserve the right to tinker with it until it is profitable. Hence, the business case is still in beta or testing.

      --
      Rod Taylor
    7. Re:GMail? by Blakey+Rat · · Score: 1

      No... how long was the Mac version of ICQ beta? At least three years. They've got Google beat still.

    8. Re:GMail? by graxrmelg · · Score: 1

      Isn't Google Groups up to four years in beta now?

    9. Re:GMail? by Trejkaz · · Score: 1

      The PC version was beta for at least that long. :-)

      --
      Karma: It's all a bunch of tree-huggin' hippy crap!
  22. Who cares? by Anonymous Coward · · Score: 0

    Good for them. We've been blocking mail from them for years.

  23. Damn if they don't, damn if they do... by Mensa+Babe · · Score: 2, Interesting

    1. Microsoft (virri vulnerabilities) causes SPAM. Slashdot outraged.
    2. Microsoft fights SPAM. Slashdot equally outraged.
    Conclusion: Microsoft is always evil no matter what they do.

    I bet that if it was a story about Gmail then it would be a great idea, becasue Google never does evil.

    --
    Karma: Positive (probably because of superiour intellect)
    1. Re:Damn if they don't, damn if they do... by Anonymous Coward · · Score: 0

      1. Microsoft (virri vulnerabilities) causes SPAM. Slashdot outraged.
      2. Microsoft fights SPAM. Slashdot equally outraged.
      Conclusion: Microsoft is always evil no matter what they do.

      I bet that if it was a story about Gmail then it would be a great idea, becasue Google never does evil

      - It clearly looks like an attempt from Microsoft to shove down our throats a patent ridden half thought out method of fighting SPAM with the sole goal as to strongarm the entire Internet in using their "standard", read: patent revenue source.

      If you think M$ is doing this from the good their hearts to fight the Axis of SPAM then you need to check in with reality.

      They can't lock in the Internet into using their POS services like they locked in PC users into using the bloatware called Windows so they are trying new tactics.

    2. Re:Damn if they don't, damn if they do... by I+confirm+I'm+not+a · · Score: 5, Informative

      2. Microsoft fights SPAM. Slashdot equally outraged.
      Conclusion: Microsoft is always evil no matter what they do.

      Nope, Microsoft isn't fighting SPAM - if they were they'd be cooperating with the "rest of the Internet", instead of promoting their own proprietary scheme - SenderID - that's so un-open as to provoke this comment from the Apache Software Foundation:

      We believe the current license is generally incompatible with open source, contrary to the practice of open Internet standards, and specifically incompatible with the Apache License 2.0. Therefore, we will not implement or deploy Sender ID under the current license terms.

      Various other disparate organisations have raised similar concerns, eventually resulting in the IETF ditching Microsoft's proposal.

      Microsoft, at least in this case, weren't interested in a working solution; they were interested in a Microsoft-friendly, FLOSS-hostile solution. Which is daft, given the open-source nature of most Internet technologies.

      --
      This is where the serious fun begins.
    3. Re:Damn if they don't, damn if they do... by asc4 · · Score: 2, Informative

      If this were actually a push to prevent spam you might be right. Unfortunately that is not the case. First and foremost this is a blatant attempt by Microsoft to try to force their sender identification standard (which, incidentally they have patents on) on the rest of the world.

      Furthermore, SPF/Sender-ID and all their ilk will do little if anything to help with the spam problem. Spammers can publish SPF records just as easily as anyone else. The only major effect it can have is to protect corporate identities by helping to prevent forged From: addresses. Which is great for corporate behemoth's like Microsoft, but does nothing for you or I.

    4. Re:Damn if they don't, damn if they do... by Adambomb · · Score: 1

      If this story was about Gmail, I have a strange feeling it wouldnt involve forcing unwashed "standards" down the users throats.

      And how precisely do you propose that this is going to fight spam in a manner that is at all related to microsofts vulnerabilities? All its doing is _filtering it from hotmail_. Doesn't stop the spam generated through the countless vulns from taking up precious bandwidth before our own filters.

      False parallels are fun.

      --
      Ice Cream has no bones.
    5. Re:Damn if they don't, damn if they do... by MynockGuano · · Score: 1

      See, but Google indeed doesn't do those sort of things. If the story were about Gmail, then the great idea would probably not be "let's unilaterally enforce an obscure standard." Most likely, it'd be something that makes most of us scratch our heads and think, "Wow, neat. Never really thought about that before." Geeks will prefer the latter 99 times out of 100. It's just the way we are, here. If you're looking for people who want some company with a shady reputation to police teh intarweb with fuzzy bunnies and daffodils--whether or not they were asked to--this is not the place to be.

    6. Re:Damn if they don't, damn if they do... by thezapper77 · · Score: 0

      "because Google never does evil."

      It's for that very reason that you don't see this story about Gmail in the first place :P

      The problem here is not that Microsoft is trying to fight spam. We would all love it to stop. It's simply the WAY that they are trying to do it...

    7. Re:Damn if they don't, damn if they do... by Decameron81 · · Score: 1
      "1. Microsoft (virri vulnerabilities) causes SPAM. Slashdot outraged.
      2. Microsoft fights SPAM. Slashdot equally outraged.
      Conclusion: Microsoft is always evil no matter what they do.

      I bet that if it was a story about Gmail then it would be a great idea, becasue Google never does evil."


      That's because Google never does evil.
      --
      diegoT
    8. Re:Damn if they don't, damn if they do... by freshman_a · · Score: 1


      1. Microsoft (virri vulnerabilities) causes SPAM.

      Because MS seems more interested in adding new "features" and being first to market (although that's debatable with Longhorn) than they are with security. You'd think a company with billions in the bank could spend a little cash hiring more (or better) security experts to review code.

      2. Microsoft fights SPAM.

      This is not fighting spam. All it's doing is sending legit emails to the trash if they don't use Sender-ID. In a way, they are effectively limiting the communication of Hotmail users to other Hotmail users.

      I bet that if it was a story about Gmail then it would be a great idea, becasue Google never does evil.

      In my opinion, Google has been non-evil so far. I will reconsider my opinion when they approach monopoly status and start abusing (or try to) their power.

    9. Re:Damn if they don't, damn if they do... by jcuervo · · Score: 1
      1. Microsoft (virri vulnerabilities) causes SPAM. Slashdot outraged.
      2. Microsoft fights SPAM. Slashdot equally outraged.
      If Microsoft really wanted to do (2), maybe they should start dealing with (1).
      --
      Assume I was drunk when I posted this.
    10. Re:Damn if they don't, damn if they do... by badriram · · Score: 1

      Personally i do not think the license is bad... read the part about the source code distribution, and their addendum they added

      ------From MS license----
      2.1 Patent License Subject to Section 2.4 and Your grant of licenses in accordance with Section 2.3, Microsoft and its Affiliates hereby grant You a perpetual, nonexclusiv e, royalty-free, nontransferable, non-sublicenseable, personal, worldwide license under Microsoft ' s Necessary Claims to make, use, import, offer to sell, sell and distribute directly or indirectly to End Users, object code versions of Licensed Implementations only as incorporated into Licensed Products and solely for the purpose of conforming with the Sender ID Specification.

      2.2 Source Code Distribution You also have subject to section 2.4 and Your grant of licenses in accordance with Section 2.3,, a perpetual, non-exclusive, royalty-free, nontransferable, non-sublicenseable, personal, worldwide license to distribute or otherwise disclose source code copies of such Licensed Implementation licensed in Section 2.1 only if You (i) prominently display the following notice in all copies of such source code, and (ii) distribute or disclose the source code only under a license that is placed in close proximity to the following notice and does not include any other terms that are inconsistent with, or would prohibit, the following notice:

      " This source code includes an Implementation of the specifications entitled " Purported Responsible Address in E-mail Messages", file name draft-lyon-senderid-pra-00.txt, and located at the following link on November 16, 2004, url: http://www.ietf.org/internet-drafts/draft-lyon-sen derid-pra-00 and the specification entitled "Sender ID: Authenticating E-mail", file name: draft-lyon-senderid-core-00.txt, url: http://www.ietf.org/internet-drafts/draft- lyon-senderid-core-00 . In the context of developing those specifications at the IETF, Microsoft submitted a patent disclosure which can be found at http://www.ietf.org/ipr.html. "

      For clarification, this Agreement does not impose any obligation on You to require the recipients of Your source code implementations of such Licensed Implementations to accept this or any other Agreement with Microsoft. Your End Users may use the Licensed Implementations licensed in this section 2.2 or in section 2.1 that they receive directly or indirectly from You without executing this Agreement. This Agreement will be available to all parties without prejudice.
      ------End From MS license------

    11. Re:Damn if they don't, damn if they do... by Breakfast+Pants · · Score: 2, Insightful

      Does nothing for me and you? Speak for yourself, I know that it would be great to not have to explain to grandma that the newest email from paypal.com isn't from paypal.com and if she follows any links therein she will be giving away access to her checking account.

      --

      --

      WHO ATE MY BREAKFAST PANTS?
    12. Re:Damn if they don't, damn if they do... by asc4 · · Score: 1

      Maybe. Assuming everyone doesn't just publish "spf2.0/pra +all" which seems to be the case more often than not now. And when that's what people publish, what have we actually accomplished?

    13. Re:Damn if they don't, damn if they do... by Anonymous Coward · · Score: 0
      virri vulnerabilities

      Golf clap for misspelling a word that isn't even a word.

    14. Re:Damn if they don't, damn if they do... by jonabbey · · Score: 1

      2.2 Source Code Distribution You also have subject to section 2.4 and Your grant of licenses in accordance with Section 2.3,, a perpetual, non-exclusive, royalty-free, nontransferable, non-sublicenseable, personal, worldwide license to distribute or otherwise disclose source code copies of such Licensed Implementation licensed in Section 2.1 only if You (i) prominently display the following notice in all copies of such source code, and (ii) distribute or disclose the source code only under a license that is placed in close proximity to the following notice and does not include any other terms that are inconsistent with, or would prohibit, the following notice:

      " This source code includes an Implementation of the specifications entitled " Purported Responsible Address in E-mail Messages", file name draft-lyon-senderid-pra-00.txt, and located at the following link on November 16, 2004, url: http://www.ietf.org/internet-drafts/draft-lyon-sen derid-pra-00 and the specification entitled "Sender ID: Authenticating E-mail", file name: draft-lyon-senderid-core-00.txt, url: http://www.ietf.org/internet-drafts/draft- lyon-senderid-core-00 . In the context of developing those specifications at the IETF, Microsoft submitted a patent disclosure which can be found at http://www.ietf.org/ipr.html. "

      For clarification, this Agreement does not impose any obligation on You to require the recipients of Your source code implementations of such Licensed Implementations to accept this or any other Agreement with Microsoft. Your End Users may use the Licensed Implementations licensed in this section 2.2 or in section 2.1 that they receive directly or indirectly from You without executing this Agreement. This Agreement will be available to all parties without prejudice.

      Right. What that means is that MS won't require you to check the driver's license of anyone who downloads your software implementing SenderID, but it does mean that the people who download it from you don't have the right to furhter redistribute your code, and they don't have the right to work on it.

      That's precisely what the non-sublicenseable bit is about. They don't mind if people write implementations against the SenderID patent, but they'll be damned if those implementers get the benefit of open source network effects to drive improvements and adoption without going begging to Microsoft at each step along the way.

    15. Re:Damn if they don't, damn if they do... by Rich0 · · Score: 1

      What that means is that MS won't require you to check the driver's license of anyone who downloads your software implementing SenderID, but it does mean that the people who download it from you don't have the right to furhter redistribute your code, and they don't have the right to work on it...That's precisely what the non-sublicenseable bit is about.

      That also makes the license GLP-incompatible, most likely. It is a violation of the GLP to distribute GPL source code to anybody unless it is licensed under the GPL. That means that you either have to violate the GLP by distributing sender-id code not under the GPL, or you have to violate the Microsoft license by distributing it under the GPL which is sublicensable.

      I think MS's lawyers know exactly what they're doing...

    16. Re:Damn if they don't, damn if they do... by Alsee · · Score: 1

      Personally i do not think the license is bad.

      Not bad? Microsoft DELIBERATELY SABOTAGED it.

      Microsoft is attempting to ram through a system that the internet antispam work group has EXPLICITLY REJECTED exactly because Microsoft deliberately sabotaged it. How is an anti-spam system supposted to function when MOST OF THE MAIL SERVERS ON EARTH ARE PROHIBITED FROM USING IT?

      The Microsoft terms conflict with the GPL and other common software in at least three ways that I see, and I'm not even a lawyer.

      Microsoft deliberately sabotaged it.

      -

      --
      - - You can't take something off the Internet! That's like trying to take pee out of a swimming pool.
    17. Re:Damn if they don't, damn if they do... by Anonymous Coward · · Score: 0

      1. Dr. Evil releases engineered deadly disease. Public outraged.
      2. Dr. Evil sells antidote for one million dollaaaars. Public equally outraged.
      Conclusion: Dr. Evil is always evil no matter what he does.

    18. Re:Damn if they don't, damn if they do... by Alsee · · Score: 1

      Microsoft is not attempting to fight spam. They are attemting to ramrod a system that has been EXPLICITLY REJECTED by the internet antispam standards group.

      And why did the internet antispam standards group reject the system? Because MICROSOFT DELIBERATELY SABOTAGED IT.

      What good is an "anti-spam" system that MOST MAIL SERVERS ON EARTH ARE FORBIDDEN TO USE?

      Microsoft is always evil no matter what they do.

      No, it just seems that way because much of what they do does in fact have an evil angle to it. This case is no exception. I count at least three ways Microsoft deliberately sabotaged the SenderID legal terms to prohibit GPL and other Common software from using it, and I'm not even a lawyer. I'm sure there are other legal poison pills in there that I haven't spotted.

      If you think I'm wrong, if you want to claim that Microsoft isn't being "evil", fine. I welcome you to claim the SenderID legal terms are not sabotaged, to claim that GPL and other mail servers are not forbidden to use it, to claim that Microsoft is not attemting to use they heavyweight Hotmail and MSN postions to impose a system to penalize and exclude GPL and other software, to claim that the system does not penalize or exclude those who do not or cannot use it, and that Microsoft is not attempting to impose it against the will and iterests of much of the global e-mail community. If you would like to make some or all of those claims I am more than happy to debate the facts of the case.

      I suspect teh attempt will fail because Microsoft's Hotmail and MSN do not have the Monopoly power that they are used to weilding in the operating system area. If Microsoft attempts to go forward with this they will hurt their own customers (and themselves) more than anyone else by flagging legitmate mail as spam for noncompliance. There are just too many mail servers out that CANNOT implement it due to Microsoft's legal sabotage, and too many other mail servers that could implement it but won't becase connecting to GPL and other excluded mail servers is more important to tham than any pain Microsoft causes them for not submitting to the system.

      becasue Google never does evil.

      Well, I invite you to offer a list of examples where they have. For starters I don't recall Google ever being convicted of any illegal acts. I don't recall so much as Google being accused of any illegal act. I am not aware of Google actively sabotaging anything. I am not aware of Google using "sharp" business tactics to screw anyone over. I am not aware of Google abusing anything or anyone.

      Google would probably get off easy on a single or rare screwup, especially if they then apologize and/or proceed to fix it. However if Google starts engaging in a series of Microsoftesque evil manuvers I expect you'll see them roasted even worse than Microsoft. We're used to Microsoft pulling shit. We EXPECT Microsoft to pull crap. Microsoft cannot betray us... cannot betray out trust... because we simply do not give Microsoft any trust. On the otherhand Google woudld insite exceptional anger because they *can* betray our trust, and because they have explicitly enshired that promise in their corporate charter. Google explicitly stakes their reputiation on it. Google has a lot to lose if they "do evil".

      Microsoft has nothing to lose by "doing evil". They certainly have no reputation to lose. It is just plain business as usual for them. Standard operating procedure to protect and expand their control. They have been guilty/liable in HUNDREDS of criminal and civil cases, not to mention the endless "evil" things were not violations of law.

      -

      --
      - - You can't take something off the Internet! That's like trying to take pee out of a swimming pool.
  24. Nothing new by princemackenzie · · Score: 0

    Some also feel that Microsoft is trying to strong-arm the industry into the adoption of an incomplete and not accepted standard. Nothing new to see here. Move along.

  25. Ambiguous praise by tezbobobo · · Score: 1, Insightful

    Not one to get caught up in Microsoft bashing, I salute the company. It may not make the best decisions, but it is making decisions. At some point something is going o have to happen to stem the tide of crap floating round the internet. This may not be the best secision, but maybe it will inspire other people to start making decisions. Once again Microsoft has proven itself to be a market leader, even if in bad ideas.

    1. Re:Ambiguous praise by schon · · Score: 1

      At some point something is going o have to happen to stem the tide of crap floating round the internet.

      What exactly does this have to do with sender-id?

      Neither SPF or sender-id will do *anything* towards stopping spam (or any useless email.)

    2. Re:Ambiguous praise by danheskett · · Score: 2, Insightful

      That's untrue!

      It will stop SPAM that is from a forged sender, which is a non-trivial amount.

      Meaning, I can't send you a message purporting to be from billgates@microsoft.com, which is how things are right now.

      Look over your SPAM headers, and you'll see, most of the return-addresses do not match the machine that relayed the message.

    3. Re:Ambiguous praise by tezbobobo · · Score: 1

      You completely missed the point. The point was, whilst the sender-id issue may not solve the problem, it indicates that the market leader is actually prepared to take steps to create a more positive environment. It is not pragmatic action, but rather the gesture which is important.

      I thought it was clear.

    4. Re:Ambiguous praise by hostyle · · Score: 1

      It will stop SPAM that is from a forged sender, which is a non-trivial amount.

      I think you missed the OPs point - namely, that while the spam will no longer get to your inbox, it will still be sent and take up bandwidth and resources.

      None of these measures stop spammers sending out their millions of messages. This is where the damage is originating, and this is the best place to cut it off. Of course its also the hardest part to do. Spammers need to be caught and put in jail - something Microsoft is actively pursuing. Thats a far better solution for everyone than needlessly blocking good mail.

      --
      Caesar si viveret, ad remum dareris.
    5. Re:Ambiguous praise by squiggleslash · · Score: 5, Insightful
      In a world in which it costs $10 to register a new, throwaway, domain, I can assure you that having to "having to" put a fake return-address in your emails is even less necessary than it ever really was.

      This is one of those utterly stupid "anti-spam" systems that just creates hastle for legitimate users while failing to take into account the actual effect it'll have on spam. It's moronic, the people proposing it are morons, and anyone blindly supporting it hasn't paid it more than a few seconds of thought.

      Want to know why we have so much spam? Why it grows every year? Because the bulk of the "anti-spammers" are too myopic in their hatred of a minor technical problem to encourage and adopt solutions that'll work. Hence the ever increasing attempts to build increasingly ineffectual blacklists and whitelists. Meanwhile, the spammers simply increase the amount of stuff they send, knowing that if only 1% of their messages will get through, they have to send 100x as many messages. The entire thing has become nothing more than a game between anti-spammers creating little intellectual challenges and spammers solving them.

      What is Sender-ID? A lemon. It solves the wrong issue. I want to be able to say "Have I given this entity permission to email me?" It says "Well, can't tell you that, but I'll tell you what, this is coming from an entity unwise enough to not protect their domain name with a list of 'legitimate' SMTP servers. So I'll junk it, because I think that's bad practice."

      They're breaking email, and they don't care. As long as they can pretend it's the spammers that are at fault, like some thug that breaks all the windows of all the buildings owned by a particular landlord because one of the landlord's tenants in one particular building plays his music loudly at 3 in the morning, they can justify their actions to themselves in a fit of self-righteousness. Fuck 'em, and the horse they rode in on.

      --
      You are not alone. This is not normal. None of this is normal.
    6. Re:Ambiguous praise by duffahtolla · · Score: 4, Informative

      Nope, you were clear. Unfortunately, what is also clear is that MS doesn't have our collective environment at heart.

      They tried to get a standard in place that could not be implemented with open source. There's restrictive liscensing and I think a patent as well. This is a move to benefit their Server bussiness to the detriment of Open Source Mail servers everywhere.

      Since they wouldn't drop the resreictions against open source, the initiative was refused. So now they are going to use their marketing muscle to force it down our throughts as a defacto standard anyways.

      Microsofts gesture could be characterized more as a middle finger than an olive branch.

    7. Re:Ambiguous praise by schon · · Score: 3, Insightful

      It will stop SPAM that is from a forged sender

      Bullshit. It will do no such thing.

      Most spam comes from trojaned machines (zombie networks), and there is *NOTHING* that will stop the trojan authors from simply having the zombie do a whois lookup and setting the return address to something that will bypass sender checks (even if it means sending through an upstream mail server.)

      Result? The From: address will still be forged, legitimate forwarded email is stopped, nobody wins.

      Look over your SPAM headers, and you'll see, most of the return-addresses do not match the machine that relayed the message.

      Which will *WILL NOT CHANGE*, even with SPF.

      And as someone else said, there is *nothing* to stop a spammer from spending $10 to register a domain, spamming for a week or two using Sender ID/SPF legitimately, then abandoning the domain if it gets blacklisted.

      If you think this is an anti-spam measure, then you really don't have a clue as to how email operates, or how spammers operate, or both.

    8. Re:Ambiguous praise by KronicD · · Score: 1

      I too was confused with this "Sender ID". Thinking, hey how is this different from SPF? However if you take a look at the microsoft website on sender id, under the "Technology" header it explains that SPF is the same thing as Sender ID.

      This seems like an attempt by microsoft to have the cure for spam associated with the name "microsoft". A very interesting tactic.

      As for SPF not solving the spam problem, no it wont, however it does mean that I dont receive 200-300 "delivery failed" messages per day from spammers using from addresses within my domain names. I have implemented SPF for my domains, and it has saved me some headaches (no more delivery failed messages!), but I still receive 500+ spam messages a day which my spam filter catches 99.9% of.

      --
      "Those who would give up Essential Liberty, to purchase a little Temporary Safety, deserve neither Liberty nor Safety"
    9. Re:Ambiguous praise by robertjw · · Score: 1

      None of these measures stop spammers sending out their millions of messages.

      In theory, if the spam can be stopped it will no longer be profitable. If it's no longer profitable no one will send it out, thus solving the bandwidth and resource problem.

    10. Re:Ambiguous praise by jwdeff · · Score: 1

      You'd think they'd get their own flagship corporate email product, Exchange 2003, to support it. Tentatively we won't see Exchange supporting Sender ID until SP2 comes out at the end of the year. No idea if there are plans for Exchange 2000 (and older) to support it, even though I believe 2000 still has a greater market share than Exchange 2003.

    11. Re:Ambiguous praise by vandon · · Score: 2, Informative
      It will stop SPAM that is from a forged sender, which is a non-trivial amount. Meaning, I can't send you a message purporting to be from billgates@microsoft.com, which is how things are right now. Look over your SPAM headers, and you'll see, most of the return-addresses do not match the machine that relayed the message.
      But what if I buy a domain, and enter into the zone file editor this:
      spamer.com TXT "v=spf1 ip4:1.0.0.0/2 ip4:64.0.0.0/2 ip4:128.0.0.0/2 ip4:192.0.0.0/2 a mx ptr ?all"
      I just authorized everyone on the internet to send mail using my domain name, and it only cost me about $10 to register and 2 minutes to add a completely valid SPF line. Now hotmail users can see my spa^H^H^Himportant messages about stock tips.
    12. Re:Ambiguous praise by Anonymous Coward · · Score: 0

      It's not anti-spam, it's anti-joejob. Duh. They may say "spam", but what they really want to do is cut down on the number of cunts who use enormouscock@microsoft.com as the reply-to and from fields in their spam emails.

    13. Re:Ambiguous praise by eyeye · · Score: 1

      Will joe schmoes IP address really be in the SPF (or whatever ) record. Yes then the next step is these trojans would have to use the ISPs mail server at which point I would hope the ISP would sit up and take notice and implement some measure such as throttling how many emails a particular user can send per day.

      You have a lot of negative responses to anti spam measures in this thread. what do you propose? Or are you in the business of spamming yourself hence your "DONT TRY AND STOP SPAM IT WONT WORK" posts.

      --
      Bush and Blair ate my sig!
    14. Re:Ambiguous praise by drakaan · · Score: 2, Insightful
      So, what's your point? The whole purpose of SPF was to verify the sending domain, which is still being done. The reason things *still* work out well in your example is that it's relatively simple to shut off mail from "spamer.com". You then have a situation where the spammer in question has to spend more time changing DNS records and registering domain names than it takes for hotmail admins to block them.

      Yes, everyone can crapflood hotmail through your server (for a short period of time), but the flood is a lot easier to stop with SPF required.

      --
      "Murphy was an optimist" - O'Toole's commentary on Murphy's Law
    15. Re:Ambiguous praise by danheskett · · Score: 1

      True, but it is step one in tracking down and verifying the trail of that SPAM.

      And it means that you can more easily create effective blacklists. Your domain would be blacklisted, and it would be an open and shut case, with no chance of false positives.

      SPF isn't a cure all spam killer, but it is clearly a step in the right direction which doesnt require hacking dozens of hundreds of servers, MUA's and conforming wiley admins.

    16. Re:Ambiguous praise by bananasfalklands · · Score: 1

      The links have been /. I have spf records, so I clicked on the sender id wizzard link in the article to see what it might need and if it might work with our postfix setup I love iis sites.

      --
      Send Peter Clifford Francis Macrae comdoms to 23 Bedford St, St.Neots, PE19 1AX, England
    17. Re:Ambiguous praise by walt-sjc · · Score: 1

      Close. Sender-ID IS a lemon. Many other technical answers are too. Some technical solutions ARE good however.

      The bigger issue is that spam is a social problem - not a technical problem. It's going to take a UN / WTO treaty where everyone decides to agree to curb spam by enacting strong laws. Countries that don't want to follow along should (will) be blacklisted. Frankly, if current existing "computer trespass" laws were enforced, spam would be a lot lower (refering to zombies here...) The "You Can-Spam" law we have now in the US is a total joke.

      It will take a few high-profile cases in each country and spam will be reduced to a small fraction of today's levels (most spam is US based anyway.) We have yet to send a spammer to jail AFAIK.

    18. Re:Ambiguous praise by shmlco · · Score: 1
      ...namely, that while the spam will no longer get to your inbox, it will still be sent and take up bandwidth and resources.

      Usually the second protocol sequence of a mail session is "mail from me@example.com". With an SPF aware system, if the SPF record doesn't match the reverse DNS IP lookup then and there, the message is rejected and not sent/received at all.

      Should the message get sent because "mail from" was forged to a valid domain, "from" needs to match "mail from". If it doesn't, then it can be rejected, and all the other expensive spam checks can be dispensed with.

      So yes, it can reduce bandwidth and resources. And if anything reduces the number of forged phishing emails, then that's a great thing in my book. One step at a time.

      --
      Any sect, cult, or religion will legislate its creed into law if it acquires the political power to do so.
    19. Re:Ambiguous praise by Anonymous Coward · · Score: 0

      By the time the mail servers start blocking mail from the spammer's domain, he's already sent out his 100k emails and is ready to move on and register another one.

    20. Re:Ambiguous praise by flakier · · Score: 3, Insightful

      Not true. A lot of spam is now sent via thousands of zombies which would be nearly impossible to encompass in an SPF record.

      It is true that SPF will not stop spam on its own. As part of the whole puzzle, SPF is best used along with a reputation system if you want to stop spam.

      There are some problems for legitimate senders and are confined to situations where there is unknown or uncontrollable forwarding going on. There are ways around these problems too (SRS et al...)

      Another problem is that M$ is trying to co-op SPF with this "Sender-ID" which is NOT the same thing!

      --
      --
    21. Re:Ambiguous praise by walt-sjc · · Score: 1

      ISP would sit up and take notice and implement some measure such as throttling how many emails a particular user can send per day.

      Most larger ISP's already do. Furthermore, those that block outbound port 25 from dynamic addresses have a near zero spam level. Users with a legit need to send via an alternative smarthost use alternative ports such as 587 that are authenticated.

      For those ISP's that don't block, blacklisting their dynamic ranges works very well too. Then you have SBC which doesn't differentiate their static versus dynamic blocks... All I can tell SBC static IP DSL customers is to switch to an ISP that isn't totally clueless. (SBC does have selective outbound blocking now however, so maybe they are starting to wake up. Verizon is still asleep at the switch. Don't get me started on RR and comcast.) Speakeasy is good...

    22. Re:Ambiguous praise by flosofl · · Score: 1

      ...and then we all black-list your domain.

      --
      "This calls for a very special blend of psychology and extreme violence" - Vyvyan "The Young Ones"
    23. Re:Ambiguous praise by Lost+Race · · Score: 1
      A lot of spam is now sent via thousands of zombies which would be nearly impossible to encompass in an SPF record.
      "v=spf1 ?all"

    24. Re:Ambiguous praise by jaseuk · · Score: 1

      No, the envelope senders are fine, think about it the vast majority of SPAM is sent from zombied windows machines and open web proxies which is why greylisting works so well.

      SPF checks if enforced would achieve pretty much the same thing without some of the other side effects of greylisting (ie. dumb servers that don't retry after a softfail).

      Microsoft has noticed this, if enough of the larger ISPs take a hardline then it wouldn't be long before we'd have the vast majority of domains with valid SPF records.

      This would close off the current avenue for spammers. Forcing them to register domains does make it slightly easier to prosecute and will certainly slow down their operations.

      Jason.

    25. Re:Ambiguous praise by Alsee · · Score: 1

      This is one of those utterly stupid "anti-spam" systems that just creates hastle for legitimate users while failing to take into account the actual effect it'll have on spam.

      Agreed.

      It's moronic, the people proposing it are morons

      Aside from the fact that Microsoft is attempting to hijack it to impose legal terms to lock out GPL and other open source software, those proposing it are of the mindset that e-mail from a "legitimate company" is not spam. If it's coming from Microsoft or Sears or Ameritrade Stock Brokers or even Doubleclick, then it is from a "legitmate company" doing "legitimate business" and it's "legitimate marketing" and it's not spam.

      They just want to ensure that their spam doesn't get drowned out in a flood of "3n1arge your p3nis" scams. Remember the number 1 rule of spammers: "What we do is not spam".

      -

      --
      - - You can't take something off the Internet! That's like trying to take pee out of a swimming pool.
    26. Re:Ambiguous praise by jkujath · · Score: 1
      They're breaking email, and they don't care.

      Hmm... aren't they breaking their own email systems? I mean, I remember when I paid my ISP for the priviledge of having an email account.
      Now, I can get FREE email from places like hotmail, yahoo and gmail.
      I don't understand all the complaining about this. Yes, in principal it seems stupid for MS to do something like this. But I didn't see them say they're going to do it to their NON-FREE MSN email accounts, just the FREE Hotmail ones. Maybe they're testing this sort of thing on all the people who want to use their free accounts?

      You get what you pay for... errr... didn't pay for.
      Move on already.

      --
      "Very funny, Scotty. Now beam down my clothes."
    27. Re:Ambiguous praise by mabhatter654 · · Score: 2, Interesting
      The problem is that most of the bill paying IT managers are all still in love with whatever MS puts out. Coming from a medium sized company, our email servers are blocking 10,000 spams a day...not even addressed to valid user names. Add to that another several thousand that look "almost" legitimate... too close to call without actually looking... i.e. blocking by some kind of filter, attachment, images, HTML, etc. it's gotten so bad it ties up a full admin all day!

      we need a "get in" based system and I think MS is trying to get some accountability on the ISP side.. of course the purpose of email is to contact people you don't know... that's what this wrecks. We need a new protocol like customized Jabber or some kind of pre-authorized opt-in agreement between companines. So I can pre authorize to your companies servers, then send away. of couse the OTHER big thing is SOX requiring all sorts of tracking and documentation.. SOX alone is enough to kill email as we know it... we need something between email, IM, slashdot, and blogs. Due to SOX "private" email will be dead at most companies anyway... so a more forum based alternative may be better.

      Again, MS holds the current customers, but oss holds the long term lead. if we can get enough admins to switch over... we've got to gun for an incompatible exchange replacement and do it better.. if MS is calling it, then let's break it better..and faster... there's no way they could keep up.

    28. Re:Ambiguous praise by miley · · Score: 1

      s/sending domain/bounce address' domain/ very different things.

    29. Re:Ambiguous praise by hobbit · · Score: 1

      if only 1% of their messages will get through, they have to send 100x as many messages

      Is it not arguable that the reason 1 in 100 messages are getting through is that 1 in 100 people are not taking adequate measures to stop them? If they send 100 times as many, they won't get a larger audience, they'll just send 100 times as many of the same message to the same audience.

      Plus, is increasing your output from a billion to a hundred billion quite so trivial as you suggest, if each machine you're sending from costs $n to have pwnd on your behalf?

      --
      "Wise men talk because they have something to say; fools, because they have to say something" - Plato
    30. Re:Ambiguous praise by drakaan · · Score: 2, Insightful
      s/bounce address' domain/spf-associated domain/

      Lets run through it. I want to send spam from buymycrap.com e-mail addresses to hotmail users.

      I have a buddy at buyhiscrap.com who has a mail server he'll let me use.

      I add an spf record for my domain that says "yes, the buyhiscrap.com mail server is allowed to send mail for the buymycrap.com domain".

      I start spamming hotmail.

      Hotmail says "don't accept any e-mail from buymycrap.com e-mail addresses"

      I can only send e-mail from spf-validated mail servers, so the mail has to go through a published mail-server (no zombies, open relays, etc)

      I try to send more spam to hotmail.

      I can't.

      I buy a new domain name. Rinse, repeat.

      The burden in this scenario has just shifted from the recieving mail server to the spammer. Now the spammer has to do more legwork and the hotmail mail server admin has to do less.

      when you get to the "MAIL FROM:" part of the SMTP conversation, you have total control over what happens, which means you don't have to play games with mail from: versus reply-to: addresses. If I'm not sending through a server that's supposed to be sending mail for the domain in my mail from: address, the connection is dropped. If I have that right, and I've offended the mail server admin with previous messages from that domain, the connection *can* be dropped (before a message gets transmitted).

      --
      "Murphy was an optimist" - O'Toole's commentary on Murphy's Law
    31. Re:Ambiguous praise by miley · · Score: 1

      Your argument relies on domains publishing the "-all" flag -- ie, bounce addresses will *only* come from these IPs. The rational domains will not do this because they want their email delivered, and may send mail to someone that forwards their email. This is not theory -- it is what is happening. Check out several phishing targets:

      ebay.com text "v=spf1 mx include:s._spf.ebay.com include:m._spf.ebay.com include:p._spf.ebay.com include:c._spf.ebay.com ~all"
      ebay.com text "spf2.0/pra mx include:s._sid.ebay.com include:m._sid.ebay.com include:p._sid.ebay.com include:c._sid.ebay.com ~all"
      citibank.com text "v=spf1 a:mail.citigroup.com ip4:192.193.195.0/24 ip4:192.193.210.0/24 ~all"
      bankofamerica.com text "v=spf1 a:sfmx02.bankofamerica.com a:sfmx04.bankofamerica.com a:vamx04.bankofamerica.com a:vamx02.bankofamerica.com a:txmx02.bankofamerica.com a:txmx04.bankofamerica.com a:cr-mailgw.bankofamerica.com a:cw-mailgw.bankofamerica.com ~all"
      amazon.com text "spf2.0/pra ip4:207.171.160.0/19 include:salesforce.com ?all"
      amazon.com text "v=spf1 ip4:207.171.160.32/28 ip4:207.171.164.32/28 ip4:207.171.180.176/28 ip4:207.171.190.0/28 ?all"

      None of them have published -all.

      So, here's what really happpens:
      - phisher wants to send phish to hotmail user.
      - phisher sends with bounce address of validuser@hotmail and From: of security@ebay
      - phisher puts in false receive line of a hotmail outbound server -- it pretends to be a forwarder.
      - Hotmail looks at its record and determines that the message cannot be determined to be forged.

      By requring all forwarders to change, SPF is useful as a, 'yes this may have come from this domain', but can't say, 'no this did not come from this domain.'

  26. other free web mail sites by Anonymous Coward · · Score: 0

    I'm actualy quite interested too see what the other big free web mail services will do.
    If they will support this sender-ID when sending mail to MSN accounts.

    If they will or wont will give us a indication of how they view MSN mail.

    1. Re:other free web mail sites by porcupine8 · · Score: 1
      Well, TFA states that Yahoo has its own competing technology (DomainKeys), so it seems unlikely that they would start using Sender ID instead. And it doesn't seem like Google is going to do anything to give MSN any kind of slack now that they're a competitor in the search department.

      Are there any other major free email providers? Mail.com maybe? Who knows about them.

      --
      Warning: Apple/Nintendo fangirl. Likes her electronics cute & cuddly. May be rabid.
  27. So? by Tim+C · · Score: 3, Insightful

    Every time RBLs are discussed here, there are a great many comments (quite a lot at +5) to the effect of "they're my mail servers, I can drop any mail I want to" from those defending their use of the various RBLs.

    How is this any different?

    1. Re:So? by Ngwenya · · Score: 1

      How is this any different?

      Because DNS record lookup is a standard adhered to by 99.999% of the internet, and Sender-ID isn't?

      --Ng
    2. Re:So? by Feyr · · Score: 1

      it;s not, and correspondingly, see how many comments are "this is great, just another reason for lusers to switch away from hotmail". which is the main argument for RBL: if your customers don't like it, they'll move elsewhere

    3. Re:So? by Alioth · · Score: 1

      I'll say this slowly as so few people seem to work it out by themselves.

      Slashdot isn't one person. Many people write comments on Slashdot. The people who say "They are my mail servers, I can drop any mail I want to" may not necessarily be the same people who disagree with Hotmail's plans. Similarly, the people who complain about GPL violators are not necessarily the same people who want to freely violate proprietary software licenses. Etc.

      Since Slashdot replies are made by many individuals, it is therefore unsurprising (and in fact predictable) that you aren't going to see a unified Slashdot opinion, and indeed, two different comments may have diametrically opposed viewpoints!

    4. Re:So? by Mant · · Score: 1

      Microsoft certainly can drop any mail they want.

      That doesn't make any of the problems this will cause go away.

    5. Re:So? by KarmaMB84 · · Score: 1

      But Slashdot groupthink errr moderation forces only popular opinions to be visible :P

    6. Re:So? by dereference · · Score: 1
      Because DNS record lookup is a standard adhered to by 99.999% of the internet, and Sender-ID isn't?

      Umm, I really hate to break this to you, but if you RTFA you'll notice that Sender-ID is also based on DNS record lookups.

    7. Re:So? by 99BottlesOfBeerInMyF · · Score: 1

      How is this any different?

      Were any of the people implementing those block lists holding a monopoly on desktop operating systems and implementing those block lists based upon whether or not the sender uses a technology that is only available from within said operating system? How about implementing that closed technology even though the rest of the internet community has standardized on a superior and freely available technology? I'd say that is the main difference.

    8. Re:So? by Anonymous Coward · · Score: 0
      How is this any different?
      It isn't. Hotmail has every right to get out of the email business if they want to, and it's wrong for people to insist that they remain.
    9. Re:So? by IchBinEinPenguin · · Score: 1

      It's different because most of us are not abusive monopolies with a track record of embrace and extinguish.

    10. Re:So? by Ngwenya · · Score: 1

      Umm, I really hate to break this to you, but if you RTFA you'll notice that Sender-ID is also based on DNS record lookups.

      Oh, all right. Sheesh. Forgot this was /. where every omission counts as counterevidence. How's this instead:

      Sender ID is based on using DNS records in a particular format (not a particularly DNS friendly one either) whereas RBLs are based on simple A record lookup from a simply derived zone construction. Adding RBL lookup is a trivial hack. Adding Sender-ID lookup and parsing isn't.

      Apologies. I made the silly assumption that people would know that I meant that Sender-ID records need some pretty advanced parsing, whereas A records don't.

      --Ng

    11. Re:So? by dereference · · Score: 1
      I guess I just don't see how this statement:
      DNS record lookup is a standard adhered to by 99.999% of the internet, and Sender-ID isn't

      somhow implied this one:
      I meant that Sender-ID records need some pretty advanced parsing, whereas A records don't

      Look, I don't want to get into a verbal sparring match here, but there are a few points I think you're missing.

      First, the A record is no more "DNS friendly" than the TXT record. Second, it's up to hotmail to implement the "advanced" parsing you mention; we just need to publish the TXT record if we want to send email to them. Third, even if you wanted to do so, using Sender-ID to filter inbound is a patented process licensed by MS; publishing the required records for outbound is completely unincumbered and fairly trivial to implement.

      I want to be clear than I'm not supporting this MS-sponsored crap, but at least let's at least get the basic facts straight.

    12. Re:So? by Ngwenya · · Score: 1

      Look, I don't want to get into a verbal sparring match here, but there are a few points I think you're missing.

      I don't think I am, but I have expressed my points poorly. The original question was "Why is Sender-ID so particularly different from DNS RBL lookup"?

      To which the answer was intended to be (a) RBL lookup is a trivial DNS A record lookup [for the email verifier, not the sender, obviously], and (b) Sender ID needs far more advanced parsing [again, for the verifier] than an RBL check.

      Now, as to the friendliness aspect, the point wasn't that TXT records are harder than A records (although, of course, A records are very prescribed in format, whereas TXT records can be anything). It's just that the size of a TXT record for Sender-ID can be quite large, which tends to mean that it won't easily fit into a UDP packet, and we still do a lot of DNS over UDP these days. Now, I'll grant that a pack of A records could overflow a UDP packet as well, but generally they don't. The Sender-ID examples that I've looked at in MS's original papers would certainly overflow a ~1400 byte UDP packet

      So yes, we're probably more in agreement than disagreement, but my position would be firstly that I don't want to stick stuff in my DNS records which is only useful for MS/Hotmail, and then another boatload of things for Yahoo, and another for SPF parsing entities; and secondly, if I were to implement sender verifier technology on my mail servers, then it wouldn't be Sender-ID, for fear of the patent nonsense.

      And that's it. Sorry about the lack of clarity, but the original answer was simply supposed to be "RBL lookup is trivial to implement with standard tools; Sender-ID verification is not"

      --Ng

  28. No one I know still uses Hotmail... by rainmayun · · Score: 1

    ...for anything important. Even my non-geek friends and family migrated to Gmail, Yahoo and other free providers based on the level of service they were getting.

    As for me, I stopped using my Hotmail account when Microsoft acquired them, and they went through that debacle when porting it to NT from Solaris.

    1. Re:No one I know still uses Hotmail... by TheRaven64 · · Score: 1
      Microsoft acquired them, and they went through that debacle when porting it to NT from Solaris

      Solaris? Hotmail used to use FreeBSD before (and for about a year after) Microsoft bought them. Their fist attempt to switch showed how hopelessly inadequate Windows was at handling high-load TCP connections. As I recall, the Solaris TCP/IP stack at the time was in a similar situation. The new one, however, scales very well to large numbers of connections and CPUs.

      --
      I am TheRaven on Soylent News
  29. This is news? by Svet-Am · · Score: 1

    Some also feel that Microsoft is trying to strong-arm the industry into the adoption of an incomplete and not accepted standard.

    Umm... duh! What else is new here?

    --
    [move .sig! for great justice, take off every .sig!]
  30. Home workers by nagora · · Score: 5, Interesting
    So, how does this work for companies with large numbers of home-workers who are happily sending main aout throught their home ISP's with "spoofed" headers claiming, quite correctly, that their email comes from the company?

    Frankly, Sender-ID is a dead duck for many reasons but the biggest is simply that many legitimate emails come from random IPs while plenty of spam comes from infected "authorised" machines.

    This is just another, on a thirty-year-long run, example of the fact that when it comes to IT, MS is clueless. Business methods and the law are their fortes.

    TWW

    --
    "Encyclopedia" is to "Wikipedia" what "Library" is to "Some people at a bus stop"
    1. Re:Home workers by Da+w00t · · Score: 3, Informative

      In this case, you have your employee connect to your mail server over ssl, usually port 589. Require SMTP auth. Require SSL.

      Also, require SRS. Sender Recipient Signing is the shit. I used to get metric assloads of joe-job spam at 4 (out of 12) of the domains I own, and now the only joe-job bounces I get are delayed bounces that aren't really bounces at all. SRS proves that the "bounce" you're getting actually came from your server. It's great.

      Rejecting mail (Hmm.... sound like Earthlink?) based on the lack of SPF/SID records is just plain stupid in today's Intarweb. Tagging them, on the other hand, is a more intelligent thing to do. I have SPF, SID, DomainKeys, SRS, and 20 something DNSRBLs in my sendmail setup. Tag the mail so spamassassin, dspam, or crm11 can assign a better score with this extra information.

      Yes, you heard me right, I said sendmail. No, I'm not batty. Those of you who are going to preach on about Postfix, Qmail (jesus christ what the fuck are all these dot files! why do I have 30 distinct files instead of one config file! What? I have to supply all my DNSRBLs on the command line!? ... hate much? Yes. Yes I Do.), or Exim need to do one thing first:

      Tell me what your favorite MTA can do that mine can't.

      I've got nothing against the other popular MTAs, but I can't stand "linux makes the baby jesus cry", "why are you using deadrat, use {debian,gentoo,suse,lfs,slackware} instead!", "sendmail sucks", "FreeBSD(M) sucks, use OpenBSD" zelots.

      --

      da w00t. mtfnpy?
    2. Re:Home workers by afidel · · Score: 2, Insightful

      Get them a VPN, get them a corporate email account and some way (webmail, RPC over HTTP, etc) to send email, etc. Sorry but relying on known broken mechanisms for your business isn't my problem. Sure I believe Sender-ID is dead, but the idea that they embraced and extended (SPF) is not. Many ISP's already either block messages or give them extremely high spam scores based on the lack of an SPF record, this isn't that new. SPF is about raising the bar for spammers, and hopefully we can eventually figure out which registrars are helping the spammers setup throw away domains and either pull their ability to create new domains, or find some other way to get them to stop support the scum.

      --
      There are 4 boxes to use in the defense of liberty: soap, ballot, jury, ammo. Use in that order. Starting now.
    3. Re:Home workers by nagora · · Score: 2, Insightful
      Tell me what your favorite MTA can do that mine can't.

      Dunno. My problem with Sendmail was that I only had to install it every couple of years, so I'd forget how to configure it and have to go through the Bat book again. The fourth time I lost it and decided that it would be faster to write my own email server. So I took a week off and did:

      http://freshmeat.net/projects/cmg/

      It certainly doesn't do everything Sendmail does, but it does everything I and my companies need it to, and I never have to wade through hundreds of configuration options for things I don't even understand, let alone need from a mail server.

      TWW

      --
      "Encyclopedia" is to "Wikipedia" what "Library" is to "Some people at a bus stop"
    4. Re:Home workers by nagora · · Score: 1
      Sorry but relying on known broken mechanisms for your business isn't my problem.

      It should be the ISP's problem, but they won't get of their collective arses and fix it. Sender-ID (and the rest) is simply a case of everyone else having to waste their time because some dickhead won't do their work properly.

      I would far rather see spam-friendly ISP's punished instead of rewarded, which is the current system.

      TWW

      --
      "Encyclopedia" is to "Wikipedia" what "Library" is to "Some people at a bus stop"
    5. Re:Home workers by iambarry · · Score: 1

      Its better if home workers send through their companies email servers. Both to allow SPF, and for companies to secure their email.

      They can use the standard "submission" port 587 so that ISPs can block port 25.

      Their company's email server should support authentication to avoid relaying spam, and it should support TLS to protect company IP.

      All very easy to impliment.

    6. Re:Home workers by fluxsmith · · Score: 1

      Not sure why this got modded informative. Once you get past the ranting and the profanity I thought there might be a gem, but Google doesn't turn up anything on "Sender Recipient Signing". Whatever you're talking about, that's probably not what it's called.

    7. Re:Home workers by Da+w00t · · Score: 1

      Oops, SRS is Sender Rewriting Scheme. http://spf.pobox.com/srs.html (thanks to the poster below, sorry 'bout that.)

      --

      da w00t. mtfnpy?
    8. Re:Home workers by Keeper · · Score: 1

      So, how does this work for companies with large numbers of home-workers who are happily sending main aout throught their home ISP's with "spoofed" headers claiming, quite correctly, that their email comes from the company?

      Aside from the mirade of other alternatives listed here, the employer can also add the ISP's email servers to the list of "valid email from us can come from here" list.

    9. Re:Home workers by TheRaven64 · · Score: 3, Informative

      For anyone interested, there is a tutorial for setting up Sendmail for authenticated relaying here, including a sendmail configuration file that can be used. While it is targetted at OpenBSD, most of it can easily be translated to other *NIX flavours (file locations are about the only things that need changing). The next article in the series (spam filtering) is a bit more OpenBSD specific, since it uses OpenBSD's spamd tar pit, although this could probably be persuaded to work with NetBSD and FreeBSD, since they both have working pf ports.

      --
      I am TheRaven on Soylent News
    10. Re:Home workers by Szaman2 · · Score: 4, Informative

      In this case, you have your employee connect to your mail server over ssl, usually port 589. Require SMTP auth. Require SSL

      Been there, done that. I had to drop this because 90% of my employees use Outlook 2002. And SSL support is broken in Office XP. You need to install office service pack 3 or 4 to actually have it working. That of course is a 20+ MB download, which requires you to have a Office CD on you. My users usually have laptops, and they work in the field where they often only have dialup access. And we don't give them Office CD's - laptops get serviced in the office.

      Needless to say, once we switched SSL on no one could send out emails anymore, we had to send every single person a copy of Office XP cd, and istruct them how to do the upgrade.

      And that's just the tip of the icebearg. Most of my users use Norton Antivirus which by default scans outgoing emails. It does it by proxying them. So if you have outgoing email scanning enabled, you won't be able to send emails with Outlook with SSL enabled - it's as simple as that.

      Consequently, we decided to drop the whole SSL idea. It was just to much hassle for our technologically challanged employees.

    11. Re:Home workers by Anonymous Coward · · Score: 0

      Sounds like a great setup.... How about posting your sendmail.mc file?

    12. Re:Home workers by Anonymous Coward · · Score: 0

      So, how does this work for companies with large numbers of home-workers who are happily sending main aout throught their home ISP's with "spoofed" headers claiming, quite correctly, that their email comes from the company?

      Happily sending mail directly to the internet through their home ISP's? From a machine with no reverse DNS, and possibly a dynamic IP? With an ISP that allows you to send outgoing traffic to port25 without restriction? Presence/lack of a PTR record is the least of your worries here--assuming you're not getting blocked, you're almost certainly already flagged as spam in this scenario. Assuming your mail gets out at all...

      Which is, no offense, a GOOD thing. There are a whole lotta personal PC's sending mail directly to the internet through internal SMTP implementations. 99% of those are 0wn3d PC's running spam software or viruses mass mailing themselves.

      You call this "quite correctly" being mail from the company? Er, no, and I hope to god you're not running a mail server. This is bloody terrible as a setup, and most people are quite right to block this. Basically, you're telling your users to try very hard to look like a spammer. That's not good practice for any business.

      If you have home users, get someone who understands how to configure a mail server. SASL/TLS over SSH is neither new, exotic, or terribly difficult to configure. It's much less likely to be blocked by your users' ISP's. And it allows all outgoing mail from your company to originate from a server owned by your company, which can be identified as such. That mail server can and should be reverse-DNS'able, and probably should have a PTR record. This is common sense and good practice.

      The above is hardly something new that Microsoft in particular is responsible for. It's how to run a competent mail domain. Yes, MS having strict requirements for the SPF records is sort of new here, but if you don't have an SPF record today you're still scoring high on the "probably spam" list for most ISP's, MS-owned or otherwise.

    13. Re:Home workers by Anonymous Coward · · Score: 1, Informative

      In this case, you have your employee connect to your mail server over ssl, usually port 589. Require SMTP auth. Require SSL.

      Are you going to field the help desk calls where a person has (a) a peronal e-mail account with their ISP, and (b) a work e-mail account?

      They would then have to configure their mail client to send messages for (a) to their ISP's SMTP server while messages for (b) to their employer's SMTP server.

      That's going to be really fun for the help desk people.

    14. Re:Home workers by kickdown · · Score: 0

      > Tell me what your favorite MTA can do that mine [sendmail] can't. Yeah, that would be interesting to hear. AFAIK, sendmail is Turing-complete, so your question actually boils down to: "Show me a computational problem that cannot be solved by a Turing machine" which would make many many computer scientists lose their hair.

      --
      Continuous positive slashdot karma since... uh, maybe next year.
    15. Re:Home workers by greed · · Score: 2, Interesting

      I'm not sure if this is going to be sarcasm or flamebait... but I'm saying it anyway. It's rhetorical, I'm not really asking the OP to answer.

      Tell us again how that set-up lowers your TCO? Is it because you can't actually provide certain services to your users, and consequently you don't have any costs associated with them?

      I have this rule: You want my money, you've got to do better than the free stuff. Pine can do SSL and SMTP Auth, I believe. My Palm can do SSL and SMTP auth. What makes Office so special? In a similar vein, how about Oracle providing an SQL interface with commandline editing like PostgreSQL does? And I don't mean in some sort of add-on, I mean it should be right there from the start. sqlplus is awful.

    16. Re:Home workers by Anonymous Coward · · Score: 0

      Needless to say, once we switched SSL on no one could send out emails anymore, we had to send every single person a copy of Office XP cd, and istruct them how to do the upgrade.

      Try scrolling down the page next time. There are alternate links for almost all Office Updates that don't require the CD.

      Office XP SP3 w/o CD

    17. Re:Home workers by Szaman2 · · Score: 2, Interesting

      Tell us again how that set-up lowers your TCO?

      Well.. TCO is not a real quantifiable metric - it is just a marketing ploy used to somehow convince people that the expensive proprietary software is somehow cheaper than the free software.

      I would love to drop MS Office but we are so hopelessly locked in it's not even funny. Out clients use Word+Excell only templates, we use proprietary worpaper software which requires Excell and Access... And our users fear change. Several people threw tantrum fits just because we recently switched Dialup providers for the field employees and the had to *gasp* download and install new dialer software.

      Switching them to another email client would essentlially mean that no work would get done for weeks while we spent 3+ hours on the phone with each field employee listening to their angry moans, and training them to use new software... Sigh...

      I tell you - TCO is bullshit. Very often using MS products makes you spend more money than you otherwise would.

    18. Re:Home workers by killjoe · · Score: 1

      "Tell me what your favorite MTA can do that mine can't."

      Be configured by mere mortals?

      I'll twist the question for you though. I use postfix, does sendmail do something postfix doen't?

      --
      evil is as evil does
    19. Re:Home workers by HogynCymraeg · · Score: 1

      You forgot the word "breaking" in that last sentance.

    20. Re:Home workers by Anonymous Coward · · Score: 0

      Aside from the mirade of other alternatives listed here, the employer can also add the ISP's email servers to the list of "valid email from us can come from here" list.

      Which ISP's? All of them? Employees aren't static individuals, never changing, never travelling.

    21. Re:Home workers by pjrc · · Score: 1
      So, how does this work for companies with large numbers of home-workers who are happily sending main aout throught their home ISP's with "spoofed" headers claiming, quite correctly, that their email comes from the company?

      They should already be feeling the inadaquecy of this old style setup, since many mail servers automatically filter any message that appears to originate from a residential IP number. Many others are already doing reverse DNS checks and filtering if the IP number doesn't match (much more stringent that SPF).

      Sending email this way is already unreliable. Hotmail and MSN are only going to be one more nail in the coffin.

      They can scream "oh no, upgrading to properly transmitted email is too difficult, too expensive, too hard". Well, cry me a river. Sending email in this manner already does not get delivered to many sites. That trend will only continue to get worse. Anyone who sees this is a long term viable email stragegy is foolish.

      Maybe they're still running on windows 3.1 or 95 also? Sooner or later, the cost of not upgrading to a modern system is going to outweigh the costs and pain of staying with an old, antequated system. Spoofing email already isn't reliable, and it's going to continue getting worse and worse.

    22. Re:Home workers by feloneous+cat · · Score: 1

      I use postfix, does sendmail do something postfix doen't?

      Yes. You have to upgrade continuously just to keep up with the security notices.

      One of the reasons I use Postfix ;^)

      --
      IANAL, but I've seen actors play them on TV
    23. Re:Home workers by nagora · · Score: 1
      They should already be feeling the inadaquecy of this old style setup,

      Nope. many mail servers automatically filter any message that appears to originate from a residential IP number.

      I've not seen any sign of that.

      oh no, upgrading to properly transmitted email is too difficult, too expensive, too hard".

      Sending from home is a properly transmitted email. Point to the RFC that says otherwise.

      Anyone who sees this is a long term viable email stragegy is foolish.

      Anyone that thinks that redefining email is a better solution than ISPs kicking off spammers (which they are uniquely able to do) is obviously an idiot.

      TWW

      --
      "Encyclopedia" is to "Wikipedia" what "Library" is to "Some people at a bus stop"
    24. Re:Home workers by Anonymous Coward · · Score: 0

      Several people threw tantrum fits just because we recently switched Dialup providers for the field employees and the had to *gasp* download and install new dialer software.

      I would throw a tantrum, too. Windows comes with dialer software. Why not just add a new dial-up connection?

    25. Re:Home workers by fmaxwell · · Score: 1

      Tell me what your favorite MTA can do that mine can't.

      Be administered and configured by people who have things to do other than administer and configure mail servers. Sendmail requires someone devote a tremendous amount of their time and brainpower to learning how to do something that shouldn't be that difficult.

      That's like me saying "tell me what your favorite computer language can do that assembly can't." Well, nothing. But that doesn't mean that assembly language is a good choice for most people, projects, and organizations.

    26. Re:Home workers by pyrrhonist · · Score: 1
      The fourth time I lost it and decided that it would be faster to write my own email server. So I took a week off and did: http://freshmeat.net/projects/cmg/

      Cool! I'm taking a week off right now to write a sploit for it.

      That way it'll be more like other MTAs. ;)

      --
      Show me on the doll where his noodly appendage touched you.
    27. Re:Home workers by pjrc · · Score: 1
      I do believe I've just been called an idiot.

      Well, that is if SPF can be considered "redefining email", rather than a simple extra DNS-based check (that doesn't alter SMTP). Hardly what I'd call "redefining", but then I generally don't call myself an "idiot" either.

      Yes, it would be nice if ISPs would all act in the interest of common good of everyone (rather then self-interested profit, laziness or incompetence). That certainly sounds like a "better" solution, much like communism seemed better social system than capitalism. Saddly, depending on all ISPs to cooperate is doomed to failure, for much the same reasons communism doesn't really work.

      RFC-wise, it is RFC 2476 which is intended to address this problem. If you read only the abstract, you will see it clearly explains that SMTP was intended to be used for transfer, not submission, as people are doing today. You'll likely insist using RFC2467 message submission is not a hard requirement... but there is certainly an RFC which addresses the perfered way to submit email.

      I would in turn challenge you to quote any current RFC which specifically suggests a SMTP client should spoof the sender envelope. Or for that matter to actually complain about the extreme difficulty or cost of complying with RFC2467 message submission.

      But what really matters, in practice, is the willingness of other SMTP servers to accept your spoofed messages. Many spam filters now take into consideration blocklists of IP ranges knows to be residential IP ranges. Because you have not noticed any sign of that (yet) does not means it doesn't exist. To prove the point, here are a couple links:

      http://www.nl.sorbs.net/faq/dul.shtml

      http://www.spampalforums.org/phpBB2/viewtopic.php? p=35957&

      You can easily find many, many more using google. It is true that some servers are blocking or filtering messages that originate from dynamic or residential IP numbers, and evidence of this is easy to find on-line, as people who can't communicate seek help.

      But you can deny it all you like. You can claim spoofing is fully RFC compliant despite RFC2467's recommendation to use message submission. You can call SPF and similar systems "redefining email". You can even call anyone who disagrees an "idiot" if you like. But eventually, enough of your spoofed messages will go undelivered that you'll have to upgrade to proper message submission or some other way that is ultimately accepted by your intended receipients.

      This is the changing reality of email in the face of spammers and malware. Deny it all you like.

    28. Re:Home workers by Keeper · · Score: 1

      Yes, all of them. Alternatively, you tell your employees which ISPs they can send email from on behalf of the company. This can be managed through whatever process you use to keep track of employee home phone numbers if you so desire.

      The problem being solved is "I have no way of knowing if the email I am receiving was sent on behalf of someone from that domain."

      Your complaint is "I don't want to have to tell anyone if the email was really sent from my domain." Guess what, we tried that -- it doesn't work. Get over it.

    29. Re:Home workers by dodobh · · Score: 1

      submission is 587/tcp, not 589.

      Please tell me the costs of having SRS for a few million users, and a system handling over a million inbound messages a minute, quite a few of which get forwarded out directly from our servers (distributed over two continents).

      If you are willing to pay to build that infrastructure for us, let me know.

      --
      I can throw myself at the ground, and miss.
    30. Re:Home workers by elemental23 · · Score: 1

      They should already be feeling the inadaquecy of this old style setup, since many mail servers automatically filter any message that appears to originate from a residential IP number.

      What part of through their home ISP did you fail to understand? You seem to be talking about users making SMTP connections to the destintation hosts directly from their desktops. While this is not uncommon for people running their own mail servers, it clearly isn't what the OP was talking about. He obviously meant people using their ISP's SMTP server rather than their work's. This is extremely common, especially if said home ISP filters outbound port 25 traffic.

      The rest of your post is based on this mistaken assumption.

      --
      I like my women like my coffee... pale and bitter.
    31. Re:Home workers by elemental23 · · Score: 1

      Sorry but relying on known broken mechanisms for your business isn't my problem.

      Explain to me what's "known broken" about me sending mail from whatever SMTP server is most convenient for me? My web hosting company doesn't currently offer TLS with their SMTP service, so I choose to use my ISP's mail server. Why should I not be able to do this? (assume for a moment I don't control my own DNS, etc, which most people don't)

      SPF is about raising the bar for spammers

      No, it isn't. It's about preventing forgery. SPF advocates may consider my above scenario "forgery" but that doesn't make it so.

      --
      I like my women like my coffee... pale and bitter.
    32. Re:Home workers by Trejkaz · · Score: 1

      "I'll twist the question for you though. I use postfix, does sendmail do something postfix doen't?"

      Sure. It's guaranteed to cause a headache within one hour of installation.

      --
      Karma: It's all a bunch of tree-huggin' hippy crap!
    33. Re:Home workers by MythosTraecer · · Score: 1

      Frankly, Sender-ID is a dead duck for many reasons but the biggest is simply that many legitimate emails come from random IPs while plenty of spam comes from infected "authorised" machines.

      That is a wonderful point since, according to the article, 90% of e-mail is spam but 30% of e-mail was sent with domains using Sender ID. That means that up to 20% of e-mail was spam using Sender ID. Yes, that's a drastic reduction, but it is hardly stopping spam. And all the spammers have to do to raise their success rate with Sender ID is deploy Sender ID to their own servers.

      --

      --Mythos
    34. Re:Home workers by FrankNputer · · Score: 1

      Consequently, we decided to drop the whole SSL idea. It was just to much hassle for our technologically challanged employees.

      Heh - that's the reason we dropped Outlook as a whole. I don't install it on ANY of our machines - and somehow, our staff manages to cope. . ;)

    35. Re:Home workers by FrankNputer · · Score: 1

      Err...to clarify that, the reason was technologically challenged users, not lack of SSL support.

    36. Re:Home workers by Da+w00t · · Score: 1

      Actually the best thing to do is have your employees VPN into your corporate network, and use the same mail client configuration they'd use when they're jacked in.

      Allowing employees to use personal hardware on the corporate lan is a big no-no, and is an entry-vector for malware.

      --

      da w00t. mtfnpy?
    37. Re:Home workers by nagora · · Score: 1
      That way it'll be more like other MTAs. ;)

      Thanks, man.

      --
      "Encyclopedia" is to "Wikipedia" what "Library" is to "Some people at a bus stop"
  31. Fool me twice, shame on who? by Anonymous Coward · · Score: 0

    Some also feel that Microsoft is trying to strong-arm the industry into the adoption of an incomplete and not accepted standard.

    Get out of town!

  32. Hotmail has one good feature by Tenebrious1 · · Score: 1

    Does anyone besides spammers use hotmail anymore?

    It has the ability to white list. There's an option to send everything into the bulk folder except for mail coming from someone on your address book. Gmail and Yahoo are pretty good with sorting spam and I use them for personal mail. But for conferences and conventions, I use my hotmail address, and white list the few vendors I want to hear from, and all the others I scanned to get swag get routed right to the bulk folder. Great feature, definitely worth keeping one hotmail address.

    --
    -- If god wanted me to have a sig, he'd have given me a sense of humor.
  33. to us german-speaking guys by cwebb1977 · · Score: 0, Troll

    it's known as scHrOTtmail anyway

    --
    www.weberseite.at
  34. No Need To Change by gpmidi · · Score: 1

    If they go ahead with this then my users will simply not be able to send email to hotmail users. I see no need to implment garbage.

  35. Home Mail Servers? by JerryMcFarts · · Score: 1

    How will this affect mail servers that we create on our own? So our next generation of geeks can't experiment with their own?

    --
    There are 10 different types of people in this world. Those who understand binary and those who don't.
    1. Re:Home Mail Servers? by quantum+bit · · Score: 1

      You can still experiment with your own mail servers. It just means you get to experiment with your own DNS too in order to make it work.

  36. Who will use hotmail? by blue_adept · · Score: 4, Insightful

    Hotmail has been on a steady decline every since Microsoft bought it. Just compare it to gmail or yahoo (which you CAN use with almost ANY useragent, even ones that don't support javascript). Most other webmail providers are now more rhobust, with a cleaner interface.

    Not to mention you don't have to worry about them trashing your Non-Sender-ID emails.

    --

    "Is this just useless, or is it expensive as well?"
    1. Re:Who will use hotmail? by NetNifty · · Score: 2, Interesting

      Not even as long ago as when MS bought Hotmail - Hotmail has gone down in the last few months - buggy switching between accounts (at least on Firefox anyway - although it could possibly be a GAIM or Trillian problem from the places I've noticed the bug), changing the method of navigating between mails to javascript instead of a simple href (so you can't for example just middle-click on each email to open a tab with it in, at least by default in Firefox - maybe an extension can fix this), more timeouts on pages and pages not loading fully etc.

      Hotmail wasn't too bad (main problem I'd say previously was spam and spam filters (many false positives)), but now it's got terrible and if I didn't know better I'd say MS was trying to kill it off.

      Luckily I now use my GMail account for anything relatively important - I pretty much just keep my hotmail account around for MSN Messenger and places I may have forgottern to switch the email address over to.

    2. Re:Who will use hotmail? by Random+Guru+42 · · Score: 1

      You know you can use your gmail addy with MSN Messenger and scrap your old Hotmail box? Just create a new MS Passport account using your gmail address. I did that, and now I don't see notices stacking up on my monitor, informing me of new spam.

      --
      Christopher S. 'coldacid' Charabaruk -- coldacid.net
    3. Re:Who will use hotmail? by NetNifty · · Score: 1

      Yeah I know about that, but I'd have to add my old contact list (ok not too bad on Trillian, it'll do it automatically if I just change the sign in details) to the new account and some people on the list don't need to know my proper email address (ie the kind of people who send "chain-emails" which fill with 2000+ address and probably end up getting harvested by spammers at some point).

      Using Trillian I don't have to worry about the spam reports popping up (Just +1s the "new emails" notice), and GAIM isn't too bad either in that regard (can disable the feature I think).

  37. maybe it's because... by rainmayun · · Score: 1

    I can't imagine why people still use Hotmail.

    A lot of people have address inertia. If you've invested a lot of time, effort and energy spreading around your email address (think of coordinators for reading groups, clubs, etc), then it's a lot of work to move to a new address and make sure everyone follows you. Personally, I think this is a big reason why a lot of people still have AOL, despite its obvious uselessness. I know that's why my sister has it.

    1. Re:maybe it's because... by Andrewkov · · Score: 1
      Good point, that's true. I have a pre-conceived notion that most people use Hotmail as throw-away addresses, but I'm sure there are a lot people who've been using it a long time.

      And it is a bit worrying as to what Google's long range plans are. As much as I like G-Mail and other Google services, I'm not sure I'd be willing to pay for it.

    2. Re:maybe it's because... by el_womble · · Score: 1

      I've always found changing my email address to be rather cathartic. People are used to others changing email addresses and if the messages arn't getting through there are still many other ways to communicate and ask for your new email address.

      I've found that the worse thing you can do is have two accounts running at the same time. Its important that mail to the old address gets bounced, this spurs people to phone, jabber, check your website to find out what your new address is. If you leave the old account open, delays and lost mail worsen the problem. What I've found is that if people don't try and find out your new address... it probably wasn't that important. This applied to my business addresses as well as my personal ones.

      --
      Scared of flying, pointy things snce 1979!
  38. Good for the gander... by pla · · Score: 2, Insightful

    Some also feel that Microsoft is trying to strong-arm the industry into the adoption of an incomplete and not accepted standard.

    ...And some (like me) feel that anything from Hotmail most likely counts as spam anyway, and have the entire domain in my filter list.

    So Hotmail can't get mail from me anymore. Boo-frickin'-hoo. What next, AOL doing the same? Then perhaps Yahoo?

    Sorry, but until a major provider that matters picks an anti-spam tech, they will accomplish nothing more than effectively depriving their customers from using email.

    1. Re:Good for the gander... by Jugalator · · Score: 1

      Then perhaps Yahoo?

      Yahoo already use DomainKeys, and so does Gmail.

      It would be better if Hotmail used that, as two large mail providers already do since maybe a year back.

      --
      Beware: In C++, your friends can see your privates!
    2. Re:Good for the gander... by TeacherOfHeroes · · Score: 1

      Sorry, but until a major provider that matters picks an anti-spam tech, they will accomplish nothing more than effectively depriving their customers from using email.

      Just because they don't matter to you changes nothing. Hotmail, Yahoo, etc have more users than you give them credit for. The fact is that if hotmail adopts this work-in-progress standard, it will apply pressure on other providers to do the same for the much-touted interoperability.

      Just because you dont know anyone who uses hotmail doesn't mean that their users don't exist.

    3. Re:Good for the gander... by Keeper · · Score: 1

      ...And some (like me) feel that anything from Hotmail most likely counts as spam anyway, and have the entire domain in my filter list.

      Except the spam you're getting from hotmail isn't really coming from hotmail. Which is the kind of problem SenderID is supposed to solve in the first place.

  39. That's good news... for Gmail by Wolfger · · Score: 4, Funny

    One invite already gone, 49 to go. :-)

    1. Re:That's good news... for Gmail by Anonymous Coward · · Score: 0

      I'd suggest all the gmail users out there (ie everyone) email anyone on contact list that uses hotmail. Let them know what's going on. I'm pretty sure they'll ask for an invite.

    2. Re:That's good news... for Gmail by arudloff · · Score: 1

      What if we all pulled our invites together, and spammed hotmail users with our collective gmail invites? ;)

  40. The id by Anonymous Coward · · Score: 0
    It's quite surprising that Microsoft should be so opposed to email in which the sender has no id.

    I mean, according to Freud's definition (thanks wikipedia), an important part of the 'id' is "the desire for instant gratification or release".

    Considering Microsoft's history of delayed rather than instant release, you think they'd be in favour of accomodating this kindred spirit.

  41. One little problem: MSN Messenger by mindaktiviti · · Score: 5, Insightful

    MSN Messenger is the crazy glue that holds together the consumer with the hotmail account. I gave all of my friends gmail accounts which are far superior going by interface alone (and they agree with this). However because they use MSN Messenger they almost always prefer to check their hotmail accounts. What Google needs to do to successfully compete with MSN is to release their own messenger program that's tied in with GMail, only then will it be easier to switch your friends over to another free email service.

  42. Wikipedian? by mnemonic_ · · Score: 3, Insightful

    Some experts feel that 'Sender ID' is not an accepted standard and has many shortcomings. Some also feel that Microsoft is trying to strong-arm the industry into the adoption of an incomplete and not accepted standard.

    Let me guess, the story submitter is a Wikipedian? Let's try to avoid weasel terms. Unlike Wikipedia, Slashdot has no neutrality obligation, but if you want to attack something then be clear about it. Don't be redundant either; if a web standard is not accepted by the W3C (the only real web standards authority), then it is not a standard. Let me show you:

    Opponents believe the non-standard 'Sender ID' is flawed, and that Microsoft is trying to force the industry to adopting an incomplete protocol.

    See? It's shorter, unequivocal while maintaining all previous meaning. Weasel words do not sanitize an opinion in any way.

    -- User:Xmnemonic

    1. Re:Wikipedian? by TheRaven64 · · Score: 2, Informative
      if a web standard is not accepted by the W3C (the only real web standards authority), then it is not a standard

      This isn't a Web standard, it's an Internet standard (or, rather, non-standard). The correct standards body would be the IETF, not the W3C.

      --
      I am TheRaven on Soylent News
    2. Re:Wikipedian? by Anonymous Coward · · Score: 0

      Let me guess, the story submitter is a Wikipedian? Let's try to avoid weasel terms.

      If the story submitter was a Wikipedian, they'd have avoided the weasel terms, wouldn't they?

      if a web standard is not accepted by the W3C (the only real web standards authority), then it is not a standard.

      We're talking about email, not the web.

      The W3C is not a standards authority, it's a vendor consortium. "Web standards" aren't standards, merely open specifications. They need to be ratified by a real standards authority like ISO before they are standards - this has happened with ISO-HTML, which is a stricter variant of HTML 4.01, but has not happened with the DOM, CSS, or most of the other "web standards".

    3. Re:Wikipedian? by Anonymous Coward · · Score: 0

      According to the link for weasel terms, you did no better when you rewrote the statement:

      Opponents believe the non-standard 'Sender ID' is flawed...

      Opponents is still a weasel word, and no better than Some experts. To make the sentence stronger/factual, you should quote an article or give specific people or facts that support your claim. For example:

      73% of commenters on this Slashdot parent article say that the 'Sender ID' is flawed.

      No, I didn't count how many people in this forum think that, it is just an example of not using a weasel term.

    4. Re:Wikipedian? by Anonymous Coward · · Score: 0

      ISO are tards. Standards aren't open if you have to pay for the documents.

    5. Re:Wikipedian? by Anonymous Coward · · Score: 0

      HTML is based on ISO 8879:1986 and ISO/IEC 10646-1:1993, which you have to pay for. If ISO are 'tards, so are the W3C for relying on their standards. You can't parse HTML properly without understanding those standards.

  43. Well, what were you expecting? by Walkiry · · Score: 2, Insightful

    Microsoft has been using this kind of "embrace and extend" or pure "we implement and damned what everyone says" with their OS for so long, that they have forgotten how to do anything else. They're going to have quite a wakeup call when they try this in a market where they're far from being the main dominant force.

    --
    ---- Take the Space Quiz!
  44. surprise, surprise by rknop · · Score: 1

    Some also feel that Microsoft is trying to strong-arm the industry into the adoption of an incomplete and not accepted standard.

    You mean Hotmail?

    (Of course, that statement in general is an excellent short description of Microsoft's strategy to maintain dominance. Maybe add to it "that is proprietarily controlled by Microsoft" at the end, since that's what they'd really prefer. When you're the monopolist or near-monopolist, industry standards that are open are very inconvenient for you.)

    -Rob

  45. How will I get my Spam Now? by ehaggis · · Score: 1

    Does this mean my Nigerian financial sponsor will not be able to communicate with me? What about my special meds at discount prices? How about the free vacations?

    This is truly a dark day indeed.

    --
    One ring to bind them - should probably have more fiber and less rings in their diet.
  46. After November?? by psallitesapienter · · Score: 1

    Even though I rarely use Hotmail anymore, the few emails that were sent to my account have been lying in the "Junk" ever since (1 year). I've never gotten a "straight" email, even those coming from Yahoo! and other free webmail services. If M$ wants to inforce a standard, that's fine with me as long as it's safe and well done, and by the looks of M$ software so far, I don't think that's going to happen any time soon.

  47. I am afraid that... by suman28 · · Score: 1

    Microsoft will most likely block the emails, and send an email to the user saying "This looks legitimate, but we can't deliver it because the sender's company is not using Sender-ID. You may contact them here to show that you would like to see them implement it".
    This will get the ball off their court, as they will get regular users thinking that this is a good thing and we should contact the other company to tell them to implement it, thereby slowly penetrating the market with the bull they call an innovation.

  48. Things are Looking Up! by pete-classic · · Score: 1
    Microsoft is trying to strong-arm the industry into the adoption of an incomplete and not accepted standard.


    This is a huge improvement over the status quo, namely, Microsoft trying to strong-arm the industry into the adoption of incomplete, closed, patent-encumbered, poorly documented, and not accepted standard.

    -Peter
  49. Won't work by jwegy · · Score: 0

    This won't be an easy transition.

    Person A:Why haven't you replied to my email??
    Person B:What email? Are you crazy?
    Person A:I sent an email to your hotmail account.
    Person B:Hmm. Lots of people are wondering why I haven't replied to their email. Hotmail must be a piece of crap.
    Person A:Yeah you need to ditch them. Use gmail.
    Person B:OK...www.gmail.com

  50. I previewed, really! by mnemonic_ · · Score: 1

    "to adopting" should of course be "to adopt."

  51. Blimey by Mr_Silver · · Score: 1

    So what they're saying is that, come November, the Hotmail spam filter might actually start to catch some spam?

    --
    Avantslash - View Slashdot cleanly on your mobile phone.
  52. -_- by adam.conf · · Score: 1

    SenderID forgets the fact that most legitimate email users don't use "authorized" servers, and that any new server isn't automatically a spammer. Further, there is nothing stopping an "authorized" server from getting hacked and becomming a spammer. Microsoft is trying to strongarm a bad idea. Assuming that the other free emails don't adopt the standard, I feel its doomed to die.

  53. I've got 50 gmail invites for hotmail users! by mshiltonj · · Score: 1, Informative

    If you are are hotmail user, just send me a request at mshiltonj at gmail dot com and I will send you an invitation to use the gmail service. Free. First come, first serve. Hotmail users only!

    1. Re:I've got 50 gmail invites for hotmail users! by MartinG · · Score: 1

      I have another 50 to add to that. I am garton att gmail doott com.

      --
      -- MartinG To mail me: echo kewyjlcxyzvjfxbqwh | tr bcefhjklqvwxyz .@adgimnoprstu
    2. Re:I've got 50 gmail invites for hotmail users! by Anonymous Coward · · Score: 0

      Since I don't have mod points, this will have to do.

      mshiltonj@gmail.com
      garton@gmail.com

  54. Need a GMAIL Invite? by Proudrooster · · Score: 0, Offtopic

    Anyone looking to ditch hotmail? Let me know and I will send you your very own GMAIL invitation. GMAIL is not run by the "evil empire" and generally does an excellent job at crushing spam. GMAIL is run by a cool company named Google, while Hotmail is run by a crusty, uncool company named MicroSoft. Just based on cool points alone, GMAIL is the superior choice.

  55. Well? by Anonymous Coward · · Score: 0

    Some also feel that Microsoft is trying to strong-arm the industry into the adoption of an incomplete and not accepted standard.

    Does the industry have a complete accepted standard? Why not? It's been more than a decade since spam has become a big issue. If by now the industry hasn't come up with a good standard to fight it, they never will. This is not Microsft's fault, this is the industry's fault for dragging their asses.

  56. Nothing wrong with that by anti-NAT · · Score: 1

    Hotmail people will have to check their spam folder so regularly for for things that aren't actually spam that Sender-ID will just annoy them so much that they'll abandon Hotmail. What's the point of spam filters when you have to check each and every email yourself anyway to make sure ?

    For this push to adopt Sender-ID to succeed, Hotmail would probably have to be the source of more than 50% of the emails sent on the Internet. I'm pretty sure that is the case.

    --
    The Internet's nature is peer to peer - 20050301_cs_profs.pdf
    1. Re:Nothing wrong with that by Ryosen · · Score: 5, Informative

      Hotmail people will have to check their spam folder so regularly for for things that aren't actually spam that Sender-ID will just annoy them so much that they'll abandon Hotmail.

      That's not how SenderID works. The emails that fail validation will be refused. They will not be forwarded to a user's spam folder.

      Microsoft can push SenderId all that they want. All that they will accomplish is excluding their domains from useful communication. This will be rolled back in under 60 days, if it is implemented at all.

      I can't think of any companies that are going to make considerable modifications to their email systems just to please Microsoft (or any other for that matter). Furthermore, the use of SenderId/SPF breaks some email delivery features (such as forwarding).

      I think that it's great that a company like pobox.com is financing the implemntation of SPF on the OSS side, but I don't expect a wide-spread adoption given the administration costs. Also, I feel compelled to ask, is Microsoft truly doing this to combat spam or do they want to force people to upgrade to Exchange 2006? And SenderId itself will never become a standard protocol as long as M$ owns it. There is too much concern that they would try to lock out OSS from implementing a protocol that they own the rights to.

      It's a valid cause but the implementation is flawed and doomed for failure.

      --

      Ryosen
      One man's "Troll, +1" is another man's "Insightful, +1".
    2. Re:Nothing wrong with that by shmlco · · Score: 2, Insightful
      ... but I don't expect a wide-spread adoption given the administration costs.

      What administration costs? It took about about 10 minutes for me to create and install a SPF record for my site.

      As for supporting it on the other side, future releases of mail software will do so the next time I would have upgraded anyway.

      I'm all for it. You would not believe the number of phishing emails, purporting to be from my site, that say, "Your account information is enclosed. Please open and read."

      It may break some forwarding, but I'd rather END phishing and trojans. Besides, we're not supposed to be open relaying anyway...

      --
      Any sect, cult, or religion will legislate its creed into law if it acquires the political power to do so.
    3. Re:Nothing wrong with that by Anonymous Coward · · Score: 0

      can anyone say "Betamax"

    4. Re:Nothing wrong with that by Romeozulu · · Score: 1

      >>I can't think of any companies that are going to make considerable modifications to their email systems just to please Microsoft

      Then you are a fool.

    5. Re:Nothing wrong with that by aztracker1 · · Score: 1

      First off, it doesn't require widesweeping changes for most to impliment at least an SPF record... and even then, there is the ~ALL which gives a soft fail to mail not coming from designated servers.

      If you run your server, you don't have to check SPF for *incoming* mail.. and it's only a txt record involved in outgoing mail... I don't see the big problem with this... unless MS will not receive soft fails in addition to hard fails, it seems to me, they are just presuming a hard fail, or maybe mx ip block for mail from a domain...

      Setting up an SPF record is easy enough, you don't have to do anything to *your* mail server.. although, suggested practice is opening the smtp submit (port 587) for authenticated relay, so those with restrictive ISPs can still send email properly through the MX for the domain.

      I almost wish that all mail *from* a domain had to com *from* an mx record on file.. would *definately* cut down on the amount of spam out there, though would mean people would need to setup a separate smtp per account, which isn't necessarily a bad thing..

      That SenderID involves xml at all is kinda hokey.. but that it includes the SPF record methods, I can live with SPF level.

      --
      Michael J. Ryan - tracker1.info
  57. Thank you Microsoft by hacker · · Score: 2, Insightful

    Well that cinches it... now I can block Hotmail permanently, since they are refusing to deliver mail from my legitimate MX.

    There are lots of alternatives to using Hotmail... Gmail, Yahoo mail, and others. Use them instead.

    99% of the mail coming from Hotmail is spam anyway, so this gives me more reason to stop the spam coming from Hotmail to my users. I'm protecting my users by blocking Hotmail.

    I for one am tired of Microsoft claiming to embrace standards by strangling off the air from the lungs of the real standards bodies. When Sender-ID is a widespread industry standard (i.e. in every MTA without patching), THEN I'll begin working with Microsoft to stop spam.

    I will not be strong-armed by Microsoft, ever, especially where it affects MY server and MY users and MY mail. Period.

    Until their OS stops being a malware replication engine, their services stop harboring spammers by the millions, and their patches actually FIX problems instead of CAUSING them, they can go pound sand.

  58. Wow, good news! by isilrion · · Score: 1

    I must say that I'm actually happy about this. I look forward to it! I'm a bit scared, yes, but I kind of trust that common sense will prevail (I know that's kind of naive).

    For what I understand of the problem, this will work only if enough [big] ISP use it. Luckily, some projects "inability" to deploy SenderID (Apache and Debian come to mind) makes me doubt it'll ever happen, thus I hope this sends the shadow of SenderID that's been lurking the internet for too long now back into oblivion. And, as a side a effect, I may be able to make my borther and uncle move away from hotmail.

    Obviously I'm a bit biased... I don't like SenderID, from almost any point of view. It troubles me morally (by restricting what should be an open protocol), and "physically" (my faculty's exchange server is a pain to use for that reason).

    That said... I really doubt it'll happen. Microsoft may be evil, but they are not stupid. The chances of this backfiring are too great.

    Isilrion
    -- P.S: Now, I know enough about the SPF and SenderID to not like them, but I haven't been able to find the relevant patents for the SenderID problem... Could anyone point them to me? Thanks!

    1. Re:Wow, good news! by isilrion · · Score: 1

      I hate replying to myself... but I can't read TFA. Could anyone post it or something? Thanks!

  59. Shocking by Anonymous Coward · · Score: 0

    I've never heard of MS trying to jam inferior technology down our throat using their dominance in one market to force compliance with their spec in another market.

    I think I'd ask the government to look to this. I'm sure they'll come down hard on Microsoft.

  60. I suppose it's only fair.... by Grokko · · Score: 2, Interesting

    My mail server stopped accepting mail from hotmail over 2 years ago.

  61. You don't get it!!! by Anonymous Coward · · Score: 1, Informative

    Sender ID is just one criteria used to determine if an email is spam. No sender ID will increase an emails spam score, not cause it to be rejected alltogether. Here is what an article I read says "Microsoft's Hotmail and MSN services have been checking Sender ID records as one test in determining whether a message is junk."

    I for one am glad somebody is doing something, how bad does it have to get before there is unified action?

    Why don't you discuss solutions instead of trashing MS or any other company?

    But then again this is slashot, nadir of the internet...where the solution to every problem is to trash MS.

    1. Re:You don't get it!!! by Anonymous Coward · · Score: 0

      "Why don't you discuss solutions instead of trashing MS..."

      Why does MS insist on trying to solve the problem with a solution that puts them in control of e-mail on the internet? Remember, it's Microsoft... control-freak city.

    2. Re:You don't get it!!! by Anonymous Coward · · Score: 0

      I totally agree with you! Finally someone is doing SOMETHING.

      Let those who have a BETTER idea come forward. Otherwise, be quiet and accept that Microsoft is doing something when others remain useless.

  62. Not trying to be picky by DanielMarkham · · Score: 1

    But "Somewhere after November" I think should read "Sometime after November"

    "Somewhere after November" sounds like a cool name for a movie (probably something with a beach and Barbara Striesand in it) but not so much an actual date.

    I wonder if this will lead to the "Server ID" standard that is being proposed to stop spam? It's one thing when we have a couple companies fighting for a standard like the NextGen DVD format, but when there's a standards war on the net about how to send email?!? It could get ugly -- but I doubt anybody would let it go that far.

  63. Surely shome mistake by David+Off · · Score: 1

    [i] Microsoft's unilateral move may hurt Internet users"[/i]

    This will make Hotmail its own little isolated island... a bit like MSN was in 1995. The move will hurt Hotmail users, nobody much wants to talk with them anyway.

  64. Re:One little problem: MSN Messenger by porcupine8 · · Score: 1

    Personally, I don't know a single person who uses MSN Messenger. AIM, yes, lots. Yahoo messenger, a few. ICQ, a few. I can't imagine that these people you know would lose much if they all switched to Yahoo - and they'd gain 750MB of storage.

    --
    Warning: Apple/Nintendo fangirl. Likes her electronics cute & cuddly. May be rabid.
  65. Don't underestimate MSN by WormholeFiend · · Score: 2, Interesting

    a lot of people use MSN... as much as I don't like it, I have to use it to keep in touch with most of my non-tech-savvy friends, who won't use any other IM...

    And to use MSN you need a hotmail account.

    Google still has a lot of public awareness ground to cover IMO... when I give out my gmail address, some people ask me "so you work for the government?"

    1. Re:Don't underestimate MSN by Captain+Kirk · · Score: 1

      Wrong. Any email address will do - my son has msn with his gmail account and you see lots of business users with the company domains as their msn id.

    2. Re:Don't underestimate MSN by ncmusic · · Score: 1

      You don't need a Hotmail account to use MSN Messenger. You only need a Passport Account which can be obtained with any email address.

    3. Re:Don't underestimate MSN by SonicRED · · Score: 1

      Sounds like it is time to get some new friends...

    4. Re:Don't underestimate MSN by Captain+Large+Face · · Score: 1

      You just need a Microsoft Passport to use the MSN Messenger service, and can effectively sign up with any valid e-mail address. I have two MSN Messenger accounts, neither of which use a Hotmail or MSN e-mail address.

    5. Re:Don't underestimate MSN by hobbit · · Score: 1

      Google still has a lot of public awareness ground to cover IMO... when I give out my gmail address, some people ask me "so you work for the government?"

      I'm guessing the same people would probably think that a hotmail address means you work for the devil.

      --
      "Wise men talk because they have something to say; fools, because they have to say something" - Plato
  66. does this mean they'll stop sending spam? by Anonymous Coward · · Score: 1, Insightful

    I hope microsofts new steps towards curbing spam will end the millions of messages from hotmail accounts that end up in my mailbox...

  67. Sure, let them try it! by slashfun · · Score: 0

    The perception for the users will be 'email is busted'. They'll leave, advertising revenue will drop, eventually they will either go out of business or change their practices. I say let nature take it's course.

    --

    Slashmail.org "The Open Source Email Company"

  68. who cares by Anonymous Coward · · Score: 0

    Who cares? On principle I don't talk to anyone who uses hotmail anyway.

  69. Spam account by nightsweat · · Score: 1

    Hotmail's been my mail account for those places you have to register and click on an e-mail. I don't care if they spam it since everyone I want to has my gmail account anyway.

    And of course there's the anonymous yahoo account for more stealthy activities...
    --

    the major advances in civilization are processes which all but wreck the societies in which they occur - A.N. White
  70. Wise up M$ by Iriel · · Score: 1

    Build a better spam guard and we'll build better spammers. Security measures that claim to be 'enhanced' will just drive the culprits to create software to fake a sender ID. And, as afore mentioned, if that doesn't get results, then they hit the competition. I wish M$ could just 'take one for the team' and leave their crappy freemail as the universal spam redirect.

    --
    Perfecting Discordia
    www.stevenvansickle.com
  71. Oops, "NOT the case" by anti-NAT · · Score: 1

    Looks like I'm getting a bit too lazy with the preview button.

    --
    The Internet's nature is peer to peer - 20050301_cs_profs.pdf
    1. Re:Oops, "NOT the case" by Anonymous Coward · · Score: 0

      Looks like you are getting a bit too lazy with the brain thingie.

    2. Re:Oops, "NOT the case" by millermj · · Score: 1

      I don't know... if you consider all the spam that's sent from a forged hotmail address, half the e-mail on the Internet just might have a hotmail.com "From" address.

      --
      Did anyone bother to ask the customers what they want?
    3. Re:Oops, "NOT the case" by Anonymous Coward · · Score: 0

      Brain. Slugs. Are. All. The. Rage. You. Should. Get. One.

  72. IBM's spf setting. by Erik_ · · Score: 1

    One has to find IBM's SPF record rather amusing :-)
    http://www.dnsstuff.com/tools/lookup.ch?type=TXT&n ame=ibm.com

    Domain Type Class TTL Answer
    ibm.com. TXT IN 600 "v=spf1 -all"

    Only found Microsoft and Checkpoint using SPF records in their domain mx records so far.

    1. Re:IBM's spf setting. by Anonymous Coward · · Score: 0

      Why is that amusing?

      That says that IBM do not send mail addressed with domain part set to their SLD. If I was admin for a company the size of IBM then I would do user@dept.country.ibm.com and each country would have it's own outbound MTA's.

  73. Dear Outlook Users... by pandrijeczko · · Score: 1
    Please be assured that the Sender-ID change will in no way inhibit Outlook's existing ability to accept & run ever single harmful attachment possible without you ever knowing about it.

    You can be certain that every user listed in your Outlook Address Book will continue to get their "Hi There" and "Please Read This" emails on a regular basis.

    All My Love

    Your Dear Uncle William

    --
    Gentoo Linux - another day, another USE flag.
  74. Re:One little problem: MSN Messenger by xmda · · Score: 1

    It's the exact opposite for me: no one I know uses AIM or Yahoo IM. No one! My old IM buddies tend to use ICQ while ppl that has discovered IM lately mostly use MSN. Only I use Jabber... :(

  75. "hotmail" does that already by sugarmotor · · Score: 1

    "hotmail" does that already with my emails from stephan ((((at)))) space-time.net. They land in the junk folder, right away. I tested this a year ago. Stephan

    --
    http://stephan.sugarmotor.org
  76. Re:One little problem: MSN Messenger by Feyr · · Score: 1

    my guess is it's geographically tied.

    im in canada, most of my contacts uses msn. one american has yahoo, an australian and a british on aim, and the office cow-workers are split between icq and msn. everyone else is on msn EVERYONE

  77. 50 gmail invites available by Killer+Instinct · · Score: 1

    email me for invite... I hope we dont bring the gmail servers down, ./ affect, 'cause then i'll know TFA was just an *evil* way for gates to get his jollys...

    --
    #include bier;
  78. shrug by Anonymous Coward · · Score: 0

    Been blocking all free mail services except gmail for years now.

  79. Re:One little problem: MSN Messenger by Erik+Hensema · · Score: 3, Informative

    I've never had an hotmail.com or msn.com account and I've been using msn messenger for years. Go visit passport.com and register your email address with them. No, they don't spam. Never.

    --

    This is your sig. There are thousands more, but this one is yours.

  80. Could be semi-useful by damyata · · Score: 1

    As far as I can see, this would have some benefit against phishing e-mails provided mail from domains with no SPF entry was not regarded as spam/rejected. Then the choice of protection is left to the owner of the domain the e-mail comes from. yourbank.com can have one so they're e-mails can be identified as genuine. yourmailforwardingservice.com will not have one as it's unuseable. A little safe victory without losing any e-mail.

  81. Just use it for hotmail-only contacts. by Spy+der+Mann · · Score: 1

    I have a hotmail account, and another mail account for everything else.

    Yes, Mr. Anderson, you should live in two different worlds.

  82. "you need a hotmail account" by ziegast · · Score: 1

    To use MSN's IM, you need a MSN/Hotmail account.
    To send email to MSN/Hotmail users, people will get a Hotmail account.

    Getting more people to subscribe to MSN/Hotmail accounts could be the real effect of their planned change.

  83. Re:One little problem: MSN Messenger by Anonymous Coward · · Score: 1, Insightful

    Or get someone to write a plugin for gaim or trillian that will give them a "You've got mail" when mail arrives in their gmail box. We don't need another IM program.

  84. Re:One little problem: MSN Messenger by mindaktiviti · · Score: 1

    Yup. Canada for I as well. It's just MSN MSN MSN. Even the ICQ users that I knew have dual MSN/ICQ accounts and much prefer using MSN (I do not understand why) over ICQ, even though you can't send any offline messages.

  85. So what? by Anonymous Coward · · Score: 0

    I junk all mail claiming to be from hotmail.

    So I don't mind if they junk mail that claims to be coming from me.

  86. Email statistics by BaudKarma · · Score: 2, Informative

    Some of you might find this interesting. I was working with an Email list for job applicants to my company this morning. I decided to do a quick analysis of what domain these candidates had their Email at.

    These are applicants for an entry-level blue collar job. They're supposed to be at least 21 years old, but at this point of the employment process, that hasn't been verefied yet. About 2/3 or our applicants are male. We have locations in all 50 US states, as well as Puerto Rico and Canada.

    yahoo.com 7110
    aol.com 3255
    hotmail.com 2857
    msn.com 556
    sbcglobal.net 539
    comcast.net 334
    bellsouth.net 293
    earthlink.net 134
    gmail.com 132
    cox.net 118

    I'm not sure what this all means, but it does explain why you're having trouble finding a Yahoo ID that hasn't already been taken.

    --
    It's the land of the brave, and the home of the free
    Where the less you know, the better off you'll be.
  87. Jobseekers and yourmom by Kancer · · Score: 1

    Jobs seekers seem to like Hotmail. I have about 300k customers that use it on their resume or to apply for jobs.

    Also my older relatives use it after dumping AOL when they realized having a high speed connection and paying for AOL is not good.

    1. Re:Jobseekers and yourmom by Anonymous Coward · · Score: 0

      People put a hotmail.com address on a resume? Sounds like a nice easy way to filter the applicants to me. If it's got a hotmail.com address, file it in the round receptical.

    2. Re:Jobseekers and yourmom by Kancer · · Score: 1

      Even for blue collar jobs such as receptionists or janitors? Not everyone is a leet anonymous coward.

  88. Grammar Police by Anonymous Coward · · Score: 0

    I believe, "Mensa Babe", you meant to say Damned if they don't, Damned if they do...

  89. SenderID - I like it by RagingChipmunk · · Score: 1

    Hotmail already "warns" you about emails that come from sources where "the sender ID could not be verified". As I was reading this article a typical 'ebay security review' phish-mail arrived, and hotmail flagged it as 'unverified'. Nice.

    I havnt had any email from friends/family flagged as 'unverified SenderID', so it seems MS might be getting something right. Cant have a perfect record of screwing up everything.

    --
    The only PT Boat Journal on the web: http://www.PT171.org
  90. You need a passport account not an MSN account by bzImage8 · · Score: 1

    Go to passport.com and register any email address.
    There you have it, you don't need a MSN account to use the MSN IM service.

    --
    Unix its simple, but sometimes it takes a geniuos to understand the simplicity -- Dennis Ritchie
  91. a-HA... by Anonymous Coward · · Score: 0

    "Those who give up on freedom to avoid spam do not deserve freedom or penis extensions at all!"

    (I think Franklin said that...)

  92. Typical Slashdot FUD by Chuck_McDevitt · · Score: 1

    Nowhere has Microsoft said they are going to "trash" your e-mail if it doesn't have sender-id. They said they would flag it as "potential spam". Sender-id isn't perfect, but it's better than nothing, and over 1 million domains have sender-id records.

    1. Re:Typical Slashdot FUD by Anonymous Coward · · Score: 1, Insightful

      Bullshit! Many domains have published SPF records that deal with MAIL FROM, you can't apply those policies to arbitrary mail headers (PRA). Microsoft would be abusing the published policy of hundreds of thousands of domains (including several of mine) by doing PRA checks on SPFv1 records.

  93. Re:One little problem: MSN Messenger by PHP+Addict · · Score: 1

    From Parent:
    "What Google needs to do to successfully compete with MSN is to release their own messenger program that's tied in with GMail, only then will it be easier to switch your friends over to another free email service."

    From sibling poster:
    "Personally, I don't know a single person who uses MSN Messenger. AIM, yes, lots. Yahoo messenger, a few. ICQ, a few."

    Instead of writing their own messenger program, GMail could write a plug-in for Gaim http://gaim.sourceforge.net/, then push for its users to switch from over from AIM, MSN Messenger, Yahoo! Messenger, ICQ. Gaim supports all of these and more in one awesome interface.

    --
    Laziness, check. Impatience, check. Hubris, double check!
  94. Gmail Accounts by Anonymous Coward · · Score: 0

    Got 50 to give away send me a email to my junk account.

    my85junk@gmail.com

  95. Respond likewise by matt+me · · Score: 1

    All email users wishing to protect the internet from underhand moves to force in opressive standards like these, take a stand against Microsoft like this...

    Configure your email client to add to the junk score of any emails coming from hotmail.com or with an X-Mailer tag of Outlook or Outlook Express. This is beneficial to results anyway. Conversely, whitelist any emails sent from Thunderbird, Evolution, KMail and [insert fave OSS mail client here]. Spammers haven't caught onto this yet technique yet, but for now, I know any email from users I respect will get to me, at the risk of losing the occasion "OMG u open source fag, windows is t3h r0x0rr0r0r!"

    I don't answer my phone often. It removes me from my work and then I have to answer questions as if I was under interrogation. If someone really wants to talk to me, let them come to my door, and then we'll speak on my terms.

  96. Gmail isn't listed? by Anonymous Coward · · Score: 0

    Safe to assume gmail istn't there 'cause it's mostly used by techies who don't need / refuse to ask for support?

  97. Let me guess... by airship · · Score: 1

    Let me guess...
    Microsoft Exchange mail servers will provide this ID. Others will be prevented from doing so by Microsoft trademarks, copyrights, and patents. :)

    --
    Serving your airship needs since 1995.
  98. Easy workaround... by tedhiltonhead · · Score: 1

    If you don't want to be limited by SPF, you could always create an SPF rule that allows relaying from 0.0.0.0/0 (i.e., the whole Internet). :)

  99. Spam is the reason... by The+Wooden+Badger · · Score: 1

    Spam is the reason I stopped using hotmail in the first place. I got an account and let maybe 5-6 people know the address when I was in school. In the first week or so I started getting spam.

    This was a quite a few years ago, so it might not be the case. But then again it is Microsoft here. Introducing bugs while fixing bugs is the modus operandi.

    --
    Heroscape, it's like legos combined with anachronistic wargames.
  100. This seems only fair by dilvish_the_damned · · Score: 1

    since most corperate systems assume its spam if it comes from hotmail. I think turn about is fair play, as long as I did it to them first, by my 'petty' calculation that makes me the winner.
    Besides, its not like I am going to fix anything when a user complains they cannot send to thier hotmail account: "I am sorry, but hotmail is no longer compliant and is not supportable, please feel free to use another system".

    --
    I think you underestimate just how much I just dont care.
  101. Re:Wikipedian? No, RTFM by Anonymous Coward · · Score: 0

    The submitted story didn't properly use quote marks. But if you had RTFM'ed you would have found that the sentence you are complaining about is a quote from the news.com article.

    So complain about news.com, not the submitter.

  102. Re:and some ar MS player haters by CKnight · · Score: 0

    ahh.. you open source ignorant nerds

    So we are ignorant nerds that are open source? Everyone is free to copy, modify and distribute our ignorance? I don't know about anyone else, but my ignorance is a tightly guarded trade secret.

  103. Topic is Offbase... but wait! by micromuncher · · Score: 1

    Here is why... How can something that a lot of email servers (including sendmail) do already be a bad thing? First, you can turn on ident support or host name resolution on a bunch of servers to make the reception restrictive. This is a good thing. I saw this in sendmail 15 years ago.

    The scary thing, is that Microsoft has patented Sender ID. That's right! Toodle on down to the Microsoft link and look for the royalty free license. Something that a lot of people have done for a long time - is now patented by Microsoft. How did that happen?

    --
    /\/\icro/\/\uncher
  104. "The shit"? by Viol8 · · Score: 0, Troll

    Sorry , does that mean its good or bad? I genuinely have no clue from your post. Perhaps you might try writing english next time.

    1. Re:"The shit"? by Anonymous Coward · · Score: 0

      Normally "shit" means "bad", but "the shit" mean "good". Go figure.

  105. Why is this needed? by n6kuy · · Score: 1

    Can't the email server just filter on the evil bit at the IP level before passing the incoming message to the mail handling daemon?

    --
    If you disagree with me on social issues, then it's pretty clear that you are a narrow-minded bigot.
  106. Re:One little problem: MSN Messenger by elf-fire · · Score: 3, Funny

    Ah, the Google Alternative for Instant Messaging. The name finally makes sense! :)

  107. Well, I guess so, but by KingBahamut · · Score: 1

    "Some also feel that Microsoft is trying to strong-arm the industry into the adoption of an incomplete and not accepted standard."

    Hmmm, yet another thing to push into the faulty standard of Exchange to go along with the rather non accepted Outlook Web Access, and the fairly undermineable Outlook.

    Ill just stay with Postfix-Squirrellmail-Evolution , with decent PGP.

    --
    "God of Rock, thank you for this chance to kick ass. "
  108. Spam by CastrTroy · · Score: 1

    I find that hotmail has to be the worst at blocking spam. I get about equal amounts of spam at Hotmail and Yahoo. Yahoo blocks all but a couple messages a day. Hotmail still lets in over 50 messages a day. I think this is just a sign that hotmail is admitting that they don't know how to properly identify spam. I have another account with SpamAssassin, and I get no spam, and no false positives. However, the volume of spam is much less on this account, so I didn't think it fair for comparison.

    --

    Anthropic principle: We see the universe the way it is because if it were different we would not be here to see it.
  109. SPF spec author says: SenderID is crap by wayne · · Score: 5, Informative
    I am the current editor of the SPF specification. Both Meng Wong and I agree that SenderID is a horrible idea, that it doesn't work as well as SPF, and that SenderID is abusing current SPF records in incompatible way.

    While both SPF and SenderID break on many forwarded emails, SenderID breaks on many mailing lists also. Moreover, one of the most promising solutions to the SPF forwarding problem (a specialized DNS server, as outlined in section 9.3.1.2 in the SPF spec) breaks when SenderID uses it.

    So, SenderID is a patented system that is incompatible with many of the F/OSS mail servers that currently dominate the internet, it doesn't work as well as other technologies, it damages the use of SPF, and outside of MS, it is being used by almost no one.

    If this was just a matter of hotmail and MSN hurting themselves, then I wouldn't have any problems with it. However, this appears to be a case of Microsoft working hard to hurt the entire internet email environment.

    --
    SPF support for most open source mail servers can be found at libspf2.
    1. Re:SPF spec author says: SenderID is crap by wohlford · · Score: 1

      OK. Good to know. Now what's your option on DomainKeys?

      --
      Jason Wohlford
    2. Re:SPF spec author says: SenderID is crap by wayne · · Score: 3, Interesting
      Now what's your option on DomainKeys?

      I like the concept of using cryptographic methods to protect the mail headers and body. I think that is the most promising approach. That said, crypto solutions like DomainKeys is not without problems.

      Crypto solutions breaks on way too many mailing lists and more than a few email forwarders because content is often added (ads on the bottom) or changed (spam/virus filtering), and this breaks the crypto signatures.

      Also, there is also a real problem with replaying a message. You just can't distinguish a Yahoo customer sending a message to a large mailing list, and a spammer who signs up with Yahoo, sends a message to themselves, and then redistributes that correctly signed email to their list of 50 million victims.

      There are various ways to try and solve to both of these problems, but none of the solutions are very clean and probably not very effective.

      I think that if there was a nice, clean solution to the forged email problem, it would have been discovered many years ago.

      I think the crypto solutions, and things like SPF (or DMP, or RMX, or any of the other LMAP-type solutions) can help each other out. SPF primarily fails on forwarded email, while the crypto solutions primarily fail on mailing lists. If all email uses both, it can help automate the detection of forwarders and mailing lists, and then you can know which system to use for each email.

      DomainKeys is not the only crypto solution, there is also IIM, and META-signatures. I actually like the latter two better because I think they handle the problems with mailing lists better. Yahoo and Cisco have announced that they are merging DK and IIM into a single spec, but they haven't released the spec yet, and the details will be very important.

      Domainkeys, like SenderID, has two other problems that could cause problems for the F/OSS world of email. First off, Yahoo has patents on DomainKeys and their license isn't (currently) compatible with many F/OSS software. I suspect that Y! will be much more willing to make changes to their license than MS was, but who knows. Secondly, like SenderID, it turns out that DomainKeys is already trademarked by someone else and this could cause lots of legal fun for the parties involved.

      --
      SPF support for most open source mail servers can be found at libspf2.
    3. Re:SPF spec author says: SenderID is crap by SamMichaels · · Score: 1

      Crypto solutions breaks on way too many mailing lists and more than a few email forwarders because content is often added (ads on the bottom) or changed (spam/virus filtering), and this breaks the crypto signatures.

      Isn't that what we want though? It's the mailing list's responsibility to reject messages that have bad signatures...and then resign the new mailing list message.

  110. Re:One little problem: MSN Messenger by porcupine8 · · Score: 1

    I'm in the US, and the people I'm referring to are all over the country. Most of my friends were on ICQ once upon a time, but over the past 5 years have slowly switched to AIM. I think ICQ is better, but if nobody I know is on it there's not much point, is there?

    --
    Warning: Apple/Nintendo fangirl. Likes her electronics cute & cuddly. May be rabid.
  111. This is the moment by hoborocks · · Score: 1

    Microsoft is delivering an ultimatum here. They are saying "bend to what we want, or be unable to send mail to our customers".

    I believe this is the rest of humanity's chance to send a message back, saying "No! We won't give in because you want us to - this standard isn't done, it won't work, and you can't bully us anymore."

    How many people would be affected? I believe if nothing is done, Microsoft will bend to the pressure of the world.

    It's too used to getting its way - the best way to teach a spoiled bratty child is not to listen.

    Let's teach this kids a lesson. Don't give in to Microsoft's pushes anymore.

    --
    AccountKiller
  112. My understanding of how this works by Atealtha · · Score: 1

    All this "you didn't get my email?" situation will never happen to most of you. After some reading last night this is how I think it works:

    1. I send you an e-mail with a from: address of support@paypal.com
    2. Hotmail see's that the return path is from spammers.com servers
    3. Hotmail asks paypal.com this, "mr. paypal machine sir, is spammers.com allowed to send email with your domain name as the from: address?"
    4. Two possible answers: "no" and "yes, only if that machine's address is x.x.x.x"

    So now you can understand where the effort goes into stopping spam. But I also found a weak point.

    This check happens only if the return path domain differs from the from: address. Most amateur spammers will be taken out, but I'm sure spam script writers will easily find a way to spoof the return path too. And then this check will never happen!

  113. Neither SPF nor Sender-ID are anti-spam by CustomDesigned · · Score: 1
    Both are supposed to be anti-forgery. SPF classic prevents forgery of MAIL FROM. Sender-ID prevents forgery of PRA - a synthetic identity derived from existing rfc2822 headers by selecting one according to a patented algorithm.

    Sender-ID could be another forgery prevention tool. But Microsoft is not content to be "another". The maliciously evil thing they are doing with this hotmail rollout is that to evaluate Sender-ID, they are reading a domains SPF classic record.

    Yes, you heard me right. Almost no one has published Sender-ID records, so they are interpreting records that say which IPs a MAIL FROM can originate from as if they said which IPs a PRA can originate from instead. This guarrantees large numbers of both false FAIL and false PASS.

    The false PASS is particularly mean to their users, since phishing scammers can how have their forged rfc2822 From get a nice VALIDATED stamp of approval from SenderID when the domain they are forging has SPF but not sender-ID records (it is possible to prevent this with careful design taking into account how the SPF record might be interpreted by Sender-ID).

  114. That's a no-brainer by Anonymous Coward · · Score: 0

    I know what I will configure my email servers to reject as SPAM: Sender-ID'd email.

    Let's introduce a standardized open alternative please...

  115. Buy Exchange? by MemeRot · · Score: 1

    You don't need to use exchange. What mail server you have is completely irrelevant. All that's in an SPF document is your domain name and the IP addresses of the mail servers that are authorized to send mail from that domain.

    At my last company when management decided that they wanted to implement this it took me five minutes to use a wizard, enter the ip addresses, and send the file to our hosting company.

    I don't care that it's not a complete solution. It will reduce a large amount of spam.

    I didn't get the article when they talked about how it wouldn't work with forwarding. How do you 'forward' a mail thru another address? That makes no sense. If you have an account set up to relay your mail, the mail would still be sent from the server where the relaying was going on, and would thus have the proper headers for that domain.

    1. Re:Buy Exchange? by WhiplashII · · Score: 1

      Truth be told, I have already implemented this for my companies as well - I was going after the "funny" crowd with this post...

      The problem you get with forwarding is that server A gets an email from fred, checks SPF and fred is OK. Then it forwards the email to fred's blackberry account on server B (possibly in a different company). Server B checks SPF on fred, and finds that server A (the originator) is not allowed to send mail for fred, so it drops the transaction.

      To fix this, you have to mangle fred's email address as you bounce the message. But that introduces other problems...

      It is not as simple as it seems. Email is really a huge mess!

      --
      while (sig==sig) sig=!sig;
    2. Re:Buy Exchange? by MemeRot · · Score: 1

      OK I see how that works. But the situation you outline above, and probably 90% of similar relaying situations, exist within an organization, where the staff can set one mail server to not use spf filtering on other mail servers within their company. Never had to do anything like that, but it seems like it should be doable.

    3. Re:Buy Exchange? by WhiplashII · · Score: 1

      There is a lot of that, of course (but how much do you trust Bob over in accounting, anyway?), but there are still situations where you need to forward to an external vendor, aol, hotmail, or rim. And if it you require SPF, you have just killed email in all those situations.

      --
      while (sig==sig) sig=!sig;
    4. Re:Buy Exchange? by Robert+The+Coward · · Score: 1

      I don't think you are getting it yet. I would suggest you check out http://spf.pobox.com/ it will outline it some more. But think of it this way. The president of the company is at home and wants to send an email out of his earthlink connection to a customer on hotmail.com from his email company email address of abc@domain.com he has to send it to earthlinks smtp server because earthlink as well as many other ISP block outbound port 25. It hits Earthlink then earthlinks trys to send it to hotmail.com but hotmail looks up the spf records for domain.com and earthlinks outbound server isn't listed and gets assumed to be spam and gets blocked. So now we have to work around the issue by

      a) having him send from his earthlink address to the custmer.

      b) setting up his mail on ports other then 25 to get around earthlink port 25 issue and send thought the company servers.

      c) add earthlink to our spf records including every spamer, etc. that ends up using earthlinks outbound servers to our record.

      All 3 have issue and require resources to get around not to mentention that is will likely happen at 3:00 AM on Sunday Morning when the person on the other end must have it in his hand yesterday so I am tring to work around the issue then.

    5. Re:Buy Exchange? by jp10558 · · Score: 1

      So how do you do this for your e-mail server that used dyndns.org for resolution and relays through your ISP?

      --
      Opera, Proxomitron-Grypen,GPG 0x0A1C6EE3
  116. Re:One little problem: MSN Messenger by Pxtl · · Score: 5, Interesting

    Because ICQ is a crufty old monster. Most of the people I know who use ICQ haven't used the official client in years - the official ICQ client is the fugliest piece of software I've ever seen. I use Miranda for both MSN and ICQ, but most of my friends have migrated from ICQ to MSN.

    I think this is what happened: ICQ took a strangle-hold of Canada. Backwards Americans missed the boat. Then, Mirabilis/AOL ran ICQ down the tubes by bloating it into a monstrous, crufty piece of crap. As a reaction, users migrated to the IM program that was already residing on their computer (and, at the time, launched automatically when you opened OE).

  117. not so by MemeRot · · Score: 1

    A huge amount of spam comes from zombie PCs. The point of SPF is that you specify a list of ip addresses that are allowed to send email from your domain. So if a zombie PC tries to send email from that domain it fails since its not in the list and the mail server can reject it.

    Although I'm not sure that would be the case if you just specified all the ip blocks used by AOL in your SPF - not sure whether something that broad is allowed, but I don't see anything that necessarily rules it out.

  118. they will fail by grumpyman · · Score: 1

    Unlike the OS situation, hotmail is far from majority service of all email users. They'll pissed off the customers that they stop using it, or hotmail stop taking this stupid stance.

  119. Honest Question by Anonymous Coward · · Score: 0

    Without getting too lost in the rhetoric,

    Can someone explain how the requirement for SENDERS of mail in a Sender-ID world differ from simply requiring the sending domain to publish (and, obiously, have the sending server match) an SPF record?

    I'm sure there's more to it on the reciving/using side than simply checking an SPF record, but what, if anything, is there incremental for mail admins to do here?

    Frankly, a requirement that "you should have an SPF record" is not all that different than "your mail server should be reverse DNS'able"--both already get you scored fairly high as probable spam for many ISP's (not just MSN). And "MSN will consider mail that doesn't pass an SPF check to be spam" isn't really news.

    What more to the picture is there, if anything?

  120. No USE Hotmail by jav1231 · · Score: 2, Funny

    I use 2 Hotmail accounts. The first gets NOTHING but spam. In fact, I have a rule setup that just deletes it all. I really should change that, but the idea that all that spam is impacting their server gives me a warm feeling. The other, I use for anything that I need to fill out. If it happens to generate spam or can I use that.
    Look, I don't mind M$ doing stupid things like this. How big of a share does Hotmail have? Probably not much. The more people have problems with it the more they'll stay away. Even better! I live for the day M$ is reduced to an applications company. Where Windows no longer exists. Where THEY are dependent upon licenses from vendors. Total destruction would be nice but I can live with "just another player."
    I'm convinced M$ is inherently evil. Like murder, molestation, Satan, Eminem. The world would be much better off without it.

  121. someone has to do something. by Anonymous Coward · · Score: 0

    Instead of opening up your canned bitching about Microsoft, try finding a solution to the spam problem. At least Microsoft is taking a stand, which is far more than other e-mail providers will do.

  122. Re:One little problem: MSN Messenger by Pxtl · · Score: 1

    Hmm - consider Google's tendency to lean towards Windows software (remember the Google toolbar?) it would be more likely that they'd base it on Miranda, a cross-network win32 IM who's UI blows GAIM out of the water. Plus, Miranda has a very Firefox-esque feel to it, using a polished, minimalist GUI and a robust plug-in system.

    Alternately, they might throw their chips in with Apple, who are doing sexy things with Jabber on the Tiger release.

  123. Is this pre/post message download? by thundergeek · · Score: 1

    Does the authentication of SPF take place before the message is downloaded, helping reduce bandwidth?

    I think this would be a helpful tool if it does. By having your email server download the list of authorized SPF entries, then during the ACK bounce the list, then reject the message, you would seriously increase efficiency of your server.

    On the other hand, if it downloads it, then connects to an external server to auth, this does no good at all! And would actually use more bandwidth and cpu time, costing us even more money.

    M$ needs to realize that not every ISP has 15 mail servers 29 DNS servers, 1k web servers, and enough bandwidth to stop a /. effect.

    My little 90mhz w/ 32meg ram slack box has been running for over a year with no problems, and spamassassin hardly takes up any cpu time. But with this protocol, my DSL line would pops its head like Richard Dean!

    We'll see, or be dumped, eh?

    1. Re:Is this pre/post message download? by quantum+bit · · Score: 1

      Depends how you set it up. On my Postfix server, it checks SPF before the message is received, but only rejects the message if the domain has an explicit "-all" in its SPF record. You'd be surprised how many domains are actually publishing SPF v1 (i.e. NOT Sender-ID) records.

      Other methods involve using SPF as an additional spam score in systems like SpamAssassin. Those of course don't check until after the message is received, but can apply fuzzier maching than simple accept/reject choices.

    2. Re:Is this pre/post message download? by quantum+bit · · Score: 1

      And I hate to reply to myself, but Sender-ID systems probably do have to receive the whole message, since Sender-ID checks the From: field also...

  124. Return to Sender by Doc+Ruby · · Score: 0

    SenderID is patented, developed by Microsoft. This is how they "embrace and extend" email, and attempt to take over the Internet by bundling everyone on Earth's email with "Microsoft frameworks". Now we know why they've "given away free email" with Hotmail for so long. They expect the return on their investment to be control of the Internet.

    "The people who can destroy a thing, they control it." - Paul Muad'Dib, in Frank Herbert's _Dune_

    --

    --
    make install -not war

  125. Gee, WHo Would Have Guessed MS Would Do This? by Master+of+Transhuman · · Score: 1

    "Some also feel that Microsoft is trying to strong-arm the industry into the adoption of an incomplete and not accepted standard."

    Duh!

    --
    Richard Steven Hack - This sig is TOO GODDAMN SHORT TO DO ANYTHING USEFUL WITH! MORONS!
  126. As I see it by rfc1394 · · Score: 1
    If someone is stupid enough to use Hotmail in view of other, better services (Yahoo gives 1GB of free space; Hotmail offers 25MB with an upgrade after 30 days to 250 meg) then they're too stupid for me to deal with and I don't need to be sending mail to anyone there anyway, so it doesn't matter!

    Perhaps places should start 550ing (SMTP Permanent rejection message) all mail from @HOTMAIL.COM with the message "Your site imposes a proprietary standard or marks incoming mail as spam. We reject this characterization, and thus we reject all mail from your domain. Please contact your site's administrator to have them correct this situation regarding 'Sender ID', or use a mail service other than Hotmail."

    Perhaps this would discourage them from trying to impose a proprietary non-standard method upon others. If they're going to mischaracterize mail sent to them, others can simply refuse to accept mail from them.

    --
    The lessons of history teach us - if they teach us anything - that nobody learns the lessons that history teaches us.
  127. Re:One little problem: MSN Messenger by mpontes · · Score: 2, Interesting
    Every man, woman, 13 years old girls and their dogs use MSN Messenger in Europe: that's exactly what makes the people I know stick with Hotmail. Many of them find it easier to get an Hotmail email to log on MSN than to sign-up for a Passport account and bind it to their existant email.

    Why? I have no idea. I'm guessing it's Microsoft way of throwing "Sign-up for Hotmail!" signs when you're filling up your info in MSN Messenger.

    Personally, I hate Hotmail. Yahoo! and GMail upgrade all their users' space at the same time. As for Hotmail, it still has my account at *2 megs*, the same limit it had since *1998*, when I signed up for it. I wrote an email to Support asking if they were planning on upgrading my account and they just advertised Hotmail Plus!, the paid version.
    (joke)My guess is that they still have my account stored in an old Solaris box and they can't find where it is.(/joke) I haven't used my Hotmail account for a long time now, but I keep it around just in case some distant family member who got my email 5 years ago tries to contact me -- yes, it happens more often than I expected.

    --
    Bored? Browse Slashdot with a +6 modifier for Troll comme
  128. Stop accepting Hotmail by Anonymous Coward · · Score: 0

    Don't bother waiting for November, start blocking hotmail today. Don't delay! Make sure none of you contacts still use hotmail long before it ever becomes an issue. Make hotmail irrelivant before anyone else consideres following their lead.

  129. correction by bluGill · · Score: 1

    I just realized the senderID and SPF are not exactly the same... What I said applies to SPF, I'm not sure how SenderID works, since people I trust have told me there are patents involved I see no reason to learn about it either.

    I suspect a variation of what I said will apply. I just don't know what.

  130. Fortunate timing by johnw · · Score: 1

    I just happen to have 50 Gmail invitations available at present.

    Would anyone like one?

    John

    1. Re:Fortunate timing by mirwor · · Score: 1

      I would like to have an invitation.

  131. That's OK by dbfruth · · Score: 1

    I don't care if they junk non sender-id mail because I junk anything @hotmail. Now it's mutual.

  132. In other words ... by Frit+Mock · · Score: 1

    .. how to shut down your own non profitable service.

  133. Re:One little problem: MSN Messenger by westlake · · Score: 1
    What Google needs to do

    Your choice of IM is strongly influenced by age, culture, geography, personal interests and affiliations, O/S, corporate branding, and so on. AOL begins with a reputation for trying to make things safe for kids.
    Yahoo sees an opportunity to build communites around Launchcast and Y! Unlimited nusic. Each of the established IMs have millions or tens of millions of subscribers who won't be touched by an offer of another free web mail account.

  134. W(ho)TF still uses Spammail, er Hotmail?? by Anonymous Coward · · Score: 0
    Hotmail used to be a good service before Microsoft bought them. Afterward, they took away every good feature one by one, including free POP3, auto-forwarding, etc. Heck I remember when it didn't require cookies to log in. Then one day they decided to wipe out all messages in my Sent folder. That was the last straw. I will never go back even if they provided 100 TB of e-mail.

    Hotmail is only useful as a throwaway account these days when you sign up for stuff. That's it.

  135. As an ISP/hosting company.... by scronline · · Score: 1

    I refuse to "jump on the bandwagon". It's not a BAD idea, but it's riddled with flaws. Microsoft can muscle all they want. When their email users go elsewhere, that's pretty much going to be the end of that.

    I may be small, but I know I won't be the only company refusing to setup Sender ID on their mail servers. MS will bow with yet another failed approach...you know, kind of like passport.

  136. I'll just chuck my hotmail account, then by Anonymous Coward · · Score: 0

    No big deal. I certainly don't use it for anything "important", since MSFT likely logs and harvests that shit like it was plankton.

    Hotmail-to-Hotmail (just like Heart-to-Heart, but with a younger butler) sends will likely work. MSFT will have themselves a nice little protective niche, just like AOL.

  137. Re:One little problem: MSN Messenger by sobachatina · · Score: 2, Informative

    I have friends that use each of the services. I use Gaim and the problem is solved.

  138. Not just Hotmail by Your+Pal+Dave · · Score: 1

    MSN is the default ISP for Qwest DSL. Maybe not the biggest RBOC but certianly a lot of customers.

  139. Re:One little problem: MSN Messenger by 19thNervousBreakdown · · Score: 1

    Not while Gaim uses GTK2.

    I love it on Linux, but it feels like a stinky pile of poo on Windows.

    --
    <xml><I><am><so><damn>Web 2.0</damn></so></am></I></xml>
  140. Re:One little problem: MSN Messenger by Anonymous Coward · · Score: 0

    Yes and then they could Open Source it and name it the (G)oogle (I)nstant (M)essenger (P)rotcol... or GIMP for sh... oh, wait..

  141. What's Hotmail? by WillAffleckUW · · Score: 1

    Noone I know uses that.

    So it sounds to me like just an idle threat.

    --
    -- Tigger warning: This post may contain tiggers! --
  142. Re:One little problem: MSN Messenger by emurphy42 · · Score: 1

    How do you figure? I tried Miranda a few years ago and thought its UI was terrible. I suppose they may have improved since then... Anyway, in what specific areas do you feel they trump gaim?

  143. Re:One little problem: MSN Messenger by sud_crow · · Score: 1

    Although i use it on a daily basis, on my home and at work, i dont think Gaim is the best solution, in fact, i use it because is the only multiplatform/multiprotocol client i could find, there were others, but they were even worst. If Gmail wants to get on MSN Messeger service, they probably should support (or create from scratch) a good new and revolutionary Sofware Libre IM interface, just like their Webmail. Probably using Jabber protocol, which is not only Free but standard (uses XML) and it also supports "gateways" (so you can connect to see people in other networks --msn, yahoo, etc...--).

    --
    no sig
  144. GIM needed using jabber protocol by WindBourne · · Score: 1

    I wonder if google is working on a p2p IM, possibly adopting jabber for something faster. It would be needed to take on Yahoo and MSN. But now would be a good time to introduce it.

    --
    I prefer the "u" in honour as it seems to be missing these days.
  145. Next scenario to hotmail by famazza · · Score: 1

    In a short term (a couple of monthes) the scenario will be the following.

    Spammers will start to have a kind of pseudo-SenderID that will allow them to send spam to hotmail users.

    Meanwhile, the rest of the world will try to send email to hotmail users with no success.

    That's what will probably happen.

    --

    -=-=-=-=
    I know life isn't fair, but why can't it ever be un-fair in MY favor!?
  146. Re:One little problem: MSN Messenger by evilbuny · · Score: 1

    AIM and ICQ interconnect these days, so having one account lets you talk to subscribers on both...

  147. AT USER OPTION by autopr0n · · Score: 1

    The most important thing here is that hotmail users have the individual choice of blocking or not blocking spam. If they have friends who don't have sender-ID enabled systems, they can disable junkmail on an individual level.

    I think that for most users, the benifits will far outway the problems.

    --
    autopr0n is like, down and stuff.
  148. Strong-Arm away! dead before a standard is comple by Anonymous Coward · · Score: 0

    Some also feel that Microsoft is trying to strong-arm the industry into the adoption of an incomplete and not accepted standard.

    I sure hope it works. Otherwise I will be dead before a standard is ever finished that will not slow spam. By the time I'm dead and the standard is complete the spammers will already have hacked it. Nothing like giving them years to prepare.

    Who do I thank for this forever delay?

  149. Email Alias and Sender ID by ufnoise · · Score: 1

    I was under the impression with SPF, if you have an email alias provided by your organization, you cannot use it as your From address if you want to send it from another server.

    For example IEEE provides me an email alias, but they do not provide me an smtp service. I cannot use my ieee address on the From line and send it to an SPF using service.

    Is this true with Sender ID as well?

  150. Already too many false positives by Agent000 · · Score: 1

    I keep a hotmail account around for legacy purposes, and because it's tied to my MSN Messenger account I still get friends sending email to it.

    Far too often, their legimate emails wind up in the Spam folder and get missed by myself. It isn't that their spam filter is too aggressive either, as plenty of spam still hits the inbox. It seems that any message where a large number of people are CC'ed (ie, inviting a bunch of friends to an event) are flagged as spam.

    I'd rather have more spam hit the inbox than legimate emails hit the spam box.

  151. Thumbs up your what? by SeanDuggan · · Score: 1

    I suspect he tried to delete his porn collection and had someone check the thumbs.db file and find miniaturized image of everything he's been viewing. Huh... makes you wonder how often something simple like this catches the child porn people...

    --
    This sig has absolutely no significance and serves only to take up screen space and waste the time of the reader.
  152. At least we know who to kill now. [OT rant] by Anonymous Coward · · Score: 0

    "...my palm, my blackberry, my non-work hotmail, owa, etc."

    I think what you're trying to say is that there are MS lovers who typically luuuuve gadgets and gimmicks and telly-tubbie interfaces and can't really be bothered with how or why things work.

    My experience has been that these people think in terms of "that's a cool app!", instead of "that's a cool technology!" and scour the web looking for free stuff and pirated apps and clog up mail systems with huge video clips and crap.

    But there are people out there who believe it's important to distinguish between technology and a specific implementation of a technology.

    And there are others who believe it morally wrong to use pirated software.

    Screw that lazy arsed convenience. Do the right thing!

  153. Microsoft to Junk Hotmail by dynamo · · Score: 1

    Well gee. Hotmail suddenly stops accepting mail from non-ms servers, and everybody will just be stuck, right?

    Uh. Maybe the true die-hard MS-loyalists. But what about Yahoo mail? GMail? Spymac? Lycos? mail.com? bigfoot? hushmail? bolt? catchamail?

    etc..

    If MS already had a monopoly on email, this might be a good way to switch over other clients. But it looks like a ploy to make hotmail into a barren wasteland.

    Why get free email that doesn't work?

  154. Bad tactics, scary result by vagabond_gr · · Score: 1

    IMHO, this is very bad tactics from Microsoft and should be treated carefully by ISPs and mail providers. Because if gmail does not adopt it then the average user (who doesn't care about protocols, pattents and licences) will say "gmail is so lame, I can't even send a message to my friend". If gmail does adopt it, it will gain a big advantage against yahoo (with the same argument) pushing it to adopt it too. This can make Sender ID a standard and force everyone to depend on Microsoft's patended protocol to just send an email. Scary.

    Please, everybody, don't fall to the trap. The correct way of thinking is "Hotmail is so lame that it can't receive mail from provider X", not the opposite!

  155. EMAIL IS BROKEN TOO by autopr0n · · Score: 2, Insightful

    Look, who cares if SPF breaks things. The things it breaks arn't really that important, and the internet email system is so clogged with spam it's worthless anyway.

    --
    autopr0n is like, down and stuff.
    1. Re:EMAIL IS BROKEN TOO by dodobh · · Score: 1

      Look, who cares if SPF breaks things. The things it breaks arn't really that important

      Except to those of us who run real mail servers.

      Let me know when you run a service handling over a million messages a minute, a few million user accounts and need to deal with forwarding mail with server farms on two continents that what SPF breaks is trivial.

      --
      I can throw myself at the ground, and miss.
    2. Re:EMAIL IS BROKEN TOO by abulafia · · Score: 1
      Look, who cares if SPF breaks things.

      [Raises hand.] Me, for one. Apparently lots of other people, too, by the looks of things on the various mailing lists.

      The things it breaks arn't really that important

      Maybe not to you. Ever stop and think that others might have different needs and expectations?

      and the internet email system is so clogged with spam it's worthless anyway.

      ...And SPF addresses an issue that is at best orthagonal to spam. It is akin to addressing drunk driving by shutting down bars.

      If it addressed spam, that would be one thing. But it doesn't, and it is turning into a strategic tool in standards warfare.

      --
      I forget what 8 was for.
  156. Re:One little problem: MSN Messenger by Anonymous Coward · · Score: 0
    Every man, woman, 13 years old girls and their dogs use MSN Messenger in Europe
    Just wanted to let you know that I refuse to read the rest of a post that begins with that sort of a retarded generalisation.
  157. Two Internets - or more? by ardle · · Score: 1

    Ok, this is gonna split email into MS vs non-MS. I recall yesterday's article about MS buying out an anti-virus company and immediately dropping their non-MS versions (and comments about how this can lead to only MS machines handling MS "content"). I haven't yet read the article about DoubleClick predicting the end of the free (presumably as in "beer") Internet. Not looking forward to reading it, either!
    It's looking like MS wants to own the Internet (as people have said before!). Their servers are getting good now but the Internet does not run on Windows (what I mean is the backbone is largely *nix-based). How to get bandwidth providers to switch to a MS product? Explain to them that only an MS node can filter out spam and viruses, eliminating the traffic caused by these nuisances.
    So we'll have the MInternet, where everything's tracable, trusted and trustworthy (and for sale) and the real Internet, which will be real slow, since both of the routers will be in N. Korea ;-)
    I don't believe the Avalanche concept is going to go away, either; BitTorrent accounts for a vast amount of Internet traffic, why shouldn't MS get a cut of that if they could persuade people to switch?
    Am I being a bit paranoid? They're not the only ones trying to get some pie (IBM want "big business", for example) but they're the only ones who are really going after ALL of it!

  158. er... by autopr0n · · Score: 1

    Sorry, I thought they meant "SPF" rather then Sender -ID. Obviously microsoft shouldn't be using their idioticaly patented propritery method.

    --
    autopr0n is like, down and stuff.
  159. SECRET PLAN exposed! by Dark+Coder · · Score: 1

    The correct path for SMTP community users and providers is to abandon 'forwarding' support.

    This small but major step is the last holdout for proper (but still incomplete) verification using SPFv1, Sender-ID or SPFv2 (not including the simple one line insertion of TXT record into your DNS server. Incomplete, until DNS-SEC is widely adopted.

    Microsoft strategy is to steer the Internet community toward a more proprietary (and patent) route using their arsenal (however small it may be) which is HOTMAIL.

    Rest assured, Sender-ID will be crushed under their own weight once the dual (or tri) system of SPF/Sender-ID is massively deployed side-by-side.

    So, nothing to worry about. Darwinism at its best. Let nature run its course.

  160. But then how will they be able to buy my by burndive · · Score: 2, Informative

    H3RBAL VI@GRA???

    --
    ...because "hacker" sounds way sexier than "code drone."
  161. Maybe open source mail servers... by Eric+Damron · · Score: 1

    ... should have an option of not accepting email that DOES have a Sender ID.

    I'm not saying that the open source community should play childish games but this would be one way for the open source world to send a loud NO to Microsoft who apparently understands nothing but brute force.

    --
    The race isn't always to the swift... but that's the way to bet!
  162. Finally something good from Microsoft by truG33k · · Score: 1

    I think this is the best policy I have ever heard of from Microsoft. If you disagree with me, you have never seen the load on a mail server that has to deal with a DOS attack from bounced back phishing emails. As an example, I have seen a bank, that will remain unamed (I need to keep my job :) have over 2 million bounce back messages in an hour becuase of phishing. This was a huge jump from their normal 12-15K messages per hour.

    --
    You only live once, so you might as well have fun before you die.
  163. It's called Gmail Notifier by burndive · · Score: 3, Informative

    Get it here.

    --
    ...because "hacker" sounds way sexier than "code drone."
  164. Duh... by Delgul · · Score: 1

    The only spam I get on my hotmail account is from M$ themselves... Will it stop their stupid announcements too?

  165. had my hotmail since 96 by johnnnyboy · · Score: 1

    I've had my hotmail since since it was created, I believe it's 1996? I believe I'm one of the first ones. Unfortunately, I'm so lazy to use something else, so I just stuck with it and still use it almost daily.

    Personally, I don't care what microsoft does with hotmail but if it comes to the point where I can't use it for emails. It's gone.

    --
    "If a show of teeth is not enough, bite ... but bite hard!"
  166. Re:One little problem: MSN Messenger by sirdude · · Score: 1

    You don't need to have a hotmail account to use MSN.

    MSN is *by far* the most user-friendly IM I've used - it's only "drawbacks" being that

    -it's ad-supported.. but that's understandable
    -it doesn't run directly on *nix.. that also is understandable I guess
    -it uses IE as it's default browser regardless of your system defaults..

  167. damn straight Re:Ambiguous praise by swschrad · · Score: 1

    ms is dead wrong, and it will save them major, big money on servers and staff. because this idiocy will make hotmail useless. I strongly encourage all to not fall for raving BS from ms, and this is a most painless way to start.

    --
    if this is supposed to be a new economy, how come they still want my old fashioned money?
  168. loftmail.com by Anonymous Coward · · Score: 0

    /

    You may want to look at http://www.loftmail.com/

    / Free IMAP and POP

  169. People actually still use hotmail? by Anonymous Coward · · Score: 0

    I, myself have used yahoo mail for quite sometime now and only within the last year have I been trying to convert to gmail. The point is though, that Yahoo Mail has actually been trying to compete with Google as far as mail goes. Their inbox size limit went from 4MB to 100MB to 250MB to 1GB within about a year (probably quicker). Microsoft, on the other hand does not care about it's mail users and I think if more people knew there were much better alternatives to hotmail, they'd switch. Unfortunately, the majority of the people using the internet are stupid (use IE, use hotmail, and put up with all the crap microsoft puts them through).

  170. Cut off hotmail... it's the only way to be sure... by Anonymous Coward · · Score: 0

    The draconian answer is very simple:

    If Hotmail implements a "SenderID" requirement,

    then:

    Throw away all HOTMAIL-emanated email. Or bounce it, with a message indicating that:

    "Your email server does not conform to internet standards and the mail cannot be delivered because a failure return may not be deliverable. Please consult with your ISP to remedy this situation".

    and just do it.... Cut 'em off.

  171. Not Spam prevention by Anonymous Coward · · Score: 0

    From the spo.pfbox.com site on SPF:

    "SPF is ushering in a new set of anti-spam systems, where email is spam unless proven otherwise."

    Your right in that it's an authentication mechanism, but the above quote is *why*.

    The first paragraph explaining SPF (at the above site) is this:

    "Have you ever gotten spam from yourself? I have, and I've been thinking hard about how to stop it! I didn't send it. It came from a spammer. If we could stop spammers from forging mail, we could easily tell spam from ham and block the bad stuff."

    Yea, your right it doesn't have *anything* to do with SPAM

  172. Gmail invites will come in handy after all... by argent · · Score: 1

    Since I'll have to send them to the people using Hotmail I correspond with.

    I dumped my own Hotmail account when they started requiring a Passport account to use it.

  173. Invites? by tepples · · Score: 1

    You may want to switch to a GMail Account or a Yahoo Account if you want to continue receiving emails from non-Microsoft accounts.

    Granted about Yahoo!, but now that Google is shutting down Gmail invite code spoolers, what's the best method for an outsider to go from 0 to a Gmail account?

    1. Re:Invites? by koreaman · · Score: 1

      Ask anyone who has a gmail account already. GMail is basically open by now with how many invites are floating around. Hell, I'll give you one. Is tepplesatslashdot@pineight.com your real e-mail?

    2. Re:Invites? by CableModemSniper · · Score: 1

      Everybody and their mother has 50 invites at this point. Do you need one?

      --
      Why not fork?
    3. Re:Invites? by woobieman29 · · Score: 1

      Use the invite I just sent you.... :-)

      --
      \/\/oobie
    4. Re:Invites? by pLnCrZy · · Score: 1

      Check your mail, I just sent you an invite.

      Happy Gmailing.

    5. Re:Invites? by Cross-Threaded · · Score: 1

      I personally extend an invitation to everyone to sign up for Hotmail. Why not give the Hotmail servers the old /. effect???

      --
      They call us sheeple, I wonder why?
    6. Re:Invites? by Curtman · · Score: 1

      I've got 50 sitting here that will never get used too.. Mail my spam account if you want one:

      curtm4n@hotmail.com

      ;)

    7. Re:Invites? by Curtman · · Score: 1

      That's funny, I've sent 4 out now, and got an invite back for each one within a couple hours.

      Why don't they just open the damn thing already?

  174. Sounds like a very elaborate and expensive way... by podperson · · Score: 1

    ...to convince people to stop using Hotmail. Yay.

  175. Big deal by Anonymous Coward · · Score: 0

    With the 2.324 GB (at the time of this posting) of space from Gmail and the 1GB for Yahoo I don't really use my Hotmail account for much except to collect junk email.

  176. Tit-for-Tat by slipstick · · Score: 1

    While I guess this is only fair on MS's part, I have a filter in Evolution that automatically trashes anything with an e-mail address with "hotmail" in it. So I guess turn about is fair play.

    In other words I couldn't care less.

    --
    Sure information wants to be free, but how much are you willing to pay for the packaging?
  177. I Have G-Mail accounts to give away! by aqsv49 · · Score: 1

    I have 50 invites to give away for a GMail Account. So if you dont have one, get one now :) send an email to givingawayinvites@gmail.com and i shall send the invite to the sender, if your worried about spam then set up a free hotmail account u can ditch after u get the invite so there are no repercussions! snap em up fast folks, givingawayinvites@gmail.com

  178. Yes, but don't tar SPF with the same brush by Anonymous Coward · · Score: 4, Insightful

    While I agree with everything you said (except that you imply that Sender-ID might actually work, when it doesn't) it's important to distinguish between SPF and Sender-ID.

    SPFv1 is an anti-forgery system that works. It does not claim do anything whatsoever to stop spam . But, preventing forgery is necessary before you CAN do anything to stop spam (think about it).

    SenderID, AKA SPFv2(pra) is an attempt by Microsoft to seize control over an open standard (SPFv1) so that they can control who gets to send email and who doesn't. They claim it prevents forgery (but it doesn't) and that it does not break some forms of forwarding the way SPF does (they lie) and that it is open (actually, they've submarine-patented parts of it) and that it is an anti-spam measure (which it wouldn't be even if it worked).

    Once someone really understands these two facts, all becomes clear. The 800-pound gorilla is beating its chest and waving its tiny pecker around, hoping you will be either be afraid enough to adopt MS-controlled SenderID, or outraged enough to not adopt open, useful SPFv1.

    For more information you might want to read some SPF-discuss list threads.

  179. so what by ckuhtz · · Score: 1

    So what. Who cares. Let them. We all know (or should if you don't) why the Sender-ID 'standard' is flawed and subscribers will draw their own conclusions when mail from all their friends goes to junk. So, who cares. They really think they can strongarm this? Like other the so flawlessly successful strongarm tactics? Good luck. PS: And to anyone still using hotmail.. well.. bummer.

    --

    Poof.
  180. Having to forge one's own address by tepples · · Score: 2, Insightful

    It's not exactly difficult to add an SPF record for your mailserver

    Unless your primary e-mail account is with a provider that offers POP3 and IMAP but not SMTP (e.g. spamcop.net), and you must forge your own address through your ISP's outgoing server. Or unless your primary e-mail account is with your ISP and your ISP hasn't implemented SPF. How should one handle that situation?

    1. Re:Having to forge one's own address by flakier · · Score: 1

      In this case, you then need to be sure to add your ISP's outgoing mail servers to your SPF record.

      Having to forge the From: makes no difference

      --
      --
    2. Re:Having to forge one's own address by Anonymous Coward · · Score: 0

      Switch your mail hosts. If you have to forge your e-mail to send, that's a sign. If they won't support SPF (which takes like 3 seconds to add) that's a sign.

  181. Good for them by MooseGuy529 · · Score: 1

    That's great for them. Now I will just tell anyone who gives me a Hotmail address that I need another address. There's a point where we have to put our feet down and just call their bluff of "if you don't use this, you won't be able to talk to anyone". Let's hope there's a big backlash and they can't keep this idea.

    --

    Tired of free iPod sigs? Subscribe to my blacklist

  182. Just like past headlines I remember... by bigtallmofo · · Score: 1

    WordPerfect author says: Microsoft Word is crap.
    Lotus 1-2-3 author says: Microsoft Excel is crap.
    Mozilla author says: Microsoft Internet Explorer is crap.

    I hope this one turns out better for you (for all of our sake)!

    --
    I'm a big tall mofo.
  183. And get TOSsed off Gmail by tepples · · Score: 1

    What if we all pulled our invites together

    Then one of us would draw fire from Google for running a Gmail invite spooler. The popular one at isnoop.net got cease-and-desisted, remember?

  184. This is not some satanic MS plot by koreaman · · Score: 1

    The following companies have asked the FCC to support Sender-ID, so don't act like it's MS trying to trash the industry again. I'm not saying it's any good, but MS is not alone in supporting it.

    Amazon.com Inc.
    Anti-Phishing Working Group (APWG)
    Association for Competitive Technology (ACT)
    Bank of America
    Barracuda Networks
    CipherTrust, Inc.
    Cisco Systems, Inc.
    Cloudmark, Inc.
    Constant Contact
    Digital Impact Inc.
    DoubleClick Inc.
    EarthLink, Inc.
    eBay Inc.
    Email Service Provider Coalition (ESPC)
    Equifax Inc.
    Goodmail Systems, Inc.
    Habeas Inc.
    IronPort Systems Inc.
    MailFrontier, Inc.
    Microsoft Corporation
    Meng Wong
    Port25 Solutions, Inc.
    Postini, Inc.
    Return Path, Inc. / Netcreations
    Scalix Corporation
    Sendmail Inc.
    SKYLIST, Inc.
    StrongMail Systems
    Symantec Corporation
    Teros Inc.
    The Global Council of CSOs
    The Go Daddy Group
    The Open Group
    TRUSTe
    Tumbleweed Communications Corp
    VeriSign Inc.

    1. Re:This is not some satanic MS plot by Anonymous Coward · · Score: 0

      SenderID is an MUA technology, it had no place in MARID. What you presented here is basically a list of cum guzzlers, who see short term opportunities to create revenue and damn the rest of us. Ironically if Meng had been identified as a liability earlier SPF records would not have been published in any meaningful number.

  185. Microsoft and their Corporations Only attitude by ivan256 · · Score: 1

    The call to action is really for companies first to publish their Sender ID record. There is a tool on our site (www.microsoft.com/senderid) that will help create that record. Once created, companies need to publish that information in the text record in DNS. For senders, this is the only thing they need to do.

    Since when are all the e-mail senders on the internet companies? If they don't understand that the internet is open to everybody, and not just people who are in it for a profit (or in it for their profit depending on your perspective) why should we adopt their technology?

  186. Re:One little problem: MSN Messenger by porcupine8 · · Score: 1
    How does that work? On ICQ, you get a member #, and you can change the nickname associated with that # at any time. So multiple people can have the same nickname as long as they have unique #s. On AIM, your nickname is your login. If you change your nickname, it's a new account. So if I wanted to IM someone with an ICQ account, would I use their nickname or #?

    Also, I can log into both my ICQ and AIM accounts with my client. But my ICQ nickname is different from my AIM nickname, and I know that someone else has that name on AIM. So if someone without a client that handles multiple messengers only had AIM, how would they send a message to my ICQ account?

    --
    Warning: Apple/Nintendo fangirl. Likes her electronics cute & cuddly. May be rabid.
  187. Re:One little problem: MSN Messenger by Guppy06 · · Score: 1

    Nowadays you don't need a Hotmail account to get a Passport, the option is also there to tie your Passport to an existing email address.

    You also have the option of signing up for a "limited" account in which they give you a bogus @passport.com address, solely for the purpose of signing into Passport.

    I wish someone had made me aware of this when I had to tie my MCSE cert to a Passport, especially since it now seems impossible to move that tie to a less-intrusive form of Passport.

  188. Best news I've heard all day. by Anonymous Coward · · Score: 0

    This is great. Of course I will have to change my GF to a different mail service but at least now I'll have a good reason to. I can say with a great deal of certainty that the vast majority (about 9/10) of the spam I receive is from address harvesting of Hotmail accounts. For example, within 48 hours of my mom putting me in her Hotmail address book my spam volume increased by about 800%.

  189. No kidding? by Anonymous Coward · · Score: 0

    Some also feel that Microsoft is trying to strong-arm the industry into the adoption of an incomplete and not accepted standard.
    No kidding? Really?

    The reason that the crappy Windows OS is so popular now is because of these same tactics from the same company. I'll be soooo happy when Microshaft is dead and gone. Long Live Linux!!!

  190. Sender ID becoming less popular by Anonymous Coward · · Score: 0

    An increasing number of companies is dropping sender ID again. Does Microsoft want to trash all mail that's not from a hotmail account? That's what it boils down to. Fuck sender ID and Microsoft!

  191. Eff hotmail. by seramar · · Score: 1

    I'm sure it's been suggested and I know I'm commenting late but I just got to look at slashdot for the first time since this morning... Instead of including the "sender-ID" other email providers and servers should just refuse to use it. While I'm not sure of the exact usage statistics, I'm sure hotmail doesn't own the market and this would put the heat on MS to forget about pushing non-sender-ID email into junk mail. If enough people are getting enough legitamate email in their trash/spam folder they'll complain, and if they complain enough and start to switch elsewhere MS will just shut up about the whole thing. Besides, hotmail's crap anyway.

    --
    australian project gutenberg is better than the original.
  192. Re:Um, where is this? by sillybilly · · Score: 1

    How long until windows the OS will monitor and reject any email as a security threat that does not utilize some M$ patented identification technology? It won't matter if Outlook Express will catch it for you, or if you don't use that, then IE the browser, or if you don't use IE but Firefox then the underlying OS will be kind enough to do the job for you. Monopoly abuse anyone, in the name of security?

  193. No, NO. by game+kid · · Score: 1

    You must paraphrase a book--you know, like Lev Grossman's Codex or something:

    I won't accept your story. Your crypto isn't good enough.

    You're welcome. ;)

    --
    You can hold down the "B" button for continuous firing.
  194. Breaks forwarding services by Anonymous Coward · · Score: 0

    This will break a very nice service offered by my alma mater. They offer alumni e-mail addresses in the schools domain, which they forward to your real address.

    Presently I just send mail out with that "FROM" address through my ISP. This will break that.

    I realize that it is the same mechanism spammers use to forge from addresses, but it's gonna suck to lose that if this goes through.

  195. Reality. by Anonymous Coward · · Score: 0

    No, they aren't clueless. They're evil marketing geniuses. It doesn't matter if you use it in _your_ enterprise, because someone in your organization undoubtedly needs to send mail to someone who does use it. Consider the following dialogue you'll soon be having with your pointy-haired boss:

    PHB: The VP of finance just called me saying his friend didn't receive an email. What's wrong with our mail server? We need this fixed ASAP!

    You: (after checking) Absolutely nothing. He wouldn't happen to be using a hotmail account, would he?

    PHB: What's that got to do with it? He's been sending mail to him for years! This guy is important and he's pissed.

    You: See, Microsoft implemented this proprietary standard called SenderID and our mail servers aren't using it, so the mail is being blocked as spam. It's not open source, you realize...

    PHB: *rolls eyes* Again with the open source crap. We don't need to save money right now, we need to get this guy's email fixed!

    You: Well, we aren't using Exch--

    PHB: Buy it. I need this implemented in 4 days.

    1. Re:Reality. by nagora · · Score: 1
      PHB: Buy it. I need this implemented in 4 days.

      Me: You buy it and install it and configure it, I'm off to work for someone with a clue.

      TWW

      --
      "Encyclopedia" is to "Wikipedia" what "Library" is to "Some people at a bus stop"
  196. Not for me, for them by tepples · · Score: 1

    Ask anyone who has a gmail account already.

    I personally already have a Gmail account, but there are still a lot of Internet users who don't have anybody @gmail.com in their address book.

  197. business development by $nickname_212 · · Score: 0

    For a corporation that has a $280B market cap and generates $36B in revenue, they better come up with good ideas to grow their business. Especially, considering some of their market share in other markets has been rotting away to open source and consumers and businesses not wanting to migrate what they already have. So, why not create an environment where SNMP servers have to pay a royalty for patented technology? The problem is that someone hosting an F/OSS SNMP server, then it is likely those someone's won't be looking to spend money on a solution now. Please. This only increase operating costs for entities that host SNMP servers. And I doubt that any royalties they collect will be more than a blip to a $280B company.

  198. My Response by sunset · · Score: 1

    As of today, my free (backgammon) gaming site no longer accepts registrations via hotmail.com accounts.

  199. Re:One little problem: MSN Messenger by Red+Alastor · · Score: 1
    So if someone without a client that handles multiple messengers only had AIM, how would they send a message to my ICQ account?

    They would add you as a buddy and write your ICQ number as the screenname.

    --
    Slashdot anagrams to "Sad Sloth"
  200. Mensa? by infochuck · · Score: 1

    Damn if they don't, damn if they do...

    It's "damnED if they don't, damnED if they do".

    Further proof that Mensa's members are nothing more than lonely under-read bourgeois windbags with artificially inflated egos.

    And don't defend her because she claims to be a chick. (And yes, if she can say, "babe", I can say, "chick").

    1. Re:Mensa? by infochuck · · Score: 1

      Hell, I din't even notice her sig.

      It's one thing to think you're better than everybody when you really are, quite another when you aren't.

    2. Re:Mensa? by hobbit · · Score: 1

      You actually think this person is female? You must be new here.

      --
      "Wise men talk because they have something to say; fools, because they have to say something" - Plato
  201. First put your own house in order... by 51mon · · Score: 1

    "Microsoft argues that publishing SPF records is simple. It usually does not require new hardware or software and the most arduous part is doing an inventory of mail servers and the subsequent maintenance of the record, Spiezle said."

    So why don't all microsoft owned domains advertise them?

    Same reason the vast majority of the thousands of domains I'm technical contact for don't, implementing it involves the non-trivial administrative task "check where valid email is sent from" unless the record says "and from anywhere else on the internet", which is totally useless for the person adding the record, and people receiving the email. Email servers just got harder to configure for minimal gain.

  202. How sweet by Anonymous Coward · · Score: 0

    My server rejects all hotmail mail (too much spam). Somehow I'm not overly concerned with their newest idea.

  203. Re:One little problem: MSN Messenger by Backspin · · Score: 2, Informative

    I use Gaim and the problem is solved.

    Not really. You're still using the service, even if you're not using the official client. And you have to have an account for each of the services you want to use (AIM, Yahoo, MSN, Jabber, etc). I for one refuse to sign up for an MSN account of any sort. Using its messaging service with or without the official client ranks only slightly lower on my not-gonna-do-it list. Then again, if that doesn't bother you, then for you, the problem is solved.

    --
    I'm making a .sig Beowulf cluster. I add another node each time I post.
  204. AOL will decide this I believe... by SeaFox · · Score: 1

    I think a lot of this hinges on whether AOL adopts sender ID or not. AOL users like to throw fits over not being able to send email to people. In fact, having worked at an ISP that was blacklisted by AOL a few times, many internet users see the ability to send email to everyone else as some sort of right. Like ISP's have a legal responsability to accept and deliver each other's email or something.

    AOL might adopt Sender-ID to appease all their customer's who want to communicate with Hotmail users (read as: all of them). The AOLer's don't care about "standards", just that their mail works. Microsoft will paint this into AOL not wanting to adopt "technology" to combat spam, and AOL may just bend to end the standoff.

    I'm sure AOL can afford to implement a spam control hardly anyone wants to use for the sake of having their bases covered and being able to say "Join AOL, becausee you can send email to Hotmail users when you're with us" (ignoring the logic one could just get a free Hotmail account themselves for the purpose of communicating with other Hotmail users, rather than changing ISP's).

  205. SPF already screwed me over by Anonymous Coward · · Score: 1, Interesting

    I hate SPF. Ever since Yahoo implemented SPF, I can no longer list my yahoo email address as my "from" address when using a client email application, such as Outlook or Thunderbird.

    I can't send email through Yahoo's SMTP server because the guys over at Cox Cable block outgoing SMTP traffic which all ISPs do.

    SPF completely ignores the realities of today's internet connected world, and it's preventing me from using my email in the way that I want to.

  206. Tried it and left immediately. by Eunuch · · Score: 1

    They had a blinking ad there. Wow. Irony.

    --
    Transcend Humanity. Please.
  207. Re:One little problem: MSN Messenger by BetterThanCaesar · · Score: 1

    Actually, it was pretty crappy even before AOL bought it. If AOL added the kitchen sink, then Mirabilis had already installed the plumbing.

    Nnow, even the "light" version is heavier than OpenOffice.org.

    --
    "Stop failing the Turing test!" -- Dilbert
  208. But MSN is not secure... by cfsmp3 · · Score: 0

    Programs like this one

    http://freshmeat.net/projects/imsniff/

    should be more than enough reason to switch to a different IM.

    --
    I would buy karma from ebay but I'm not sure I can trust the seller.
  209. Yahoo Domain Keys by GlacierDragon · · Score: 1
    --
    http://glacierdragon.smugmug.com - Check out my photos. No need to buy, even though I do need the money!
  210. Help: How can I test this? by macslut · · Score: 1

    I use several email servers for several accounts for several reasons. I have to send email to Hotmail users (and no, I can't even try to convert them). Is there any way to test this to see if Sender-ID is being properly inserted today?

  211. GAIM is the solution by benjamindees · · Score: 2, Interesting

    Each of the established IMs have millions or tens of millions of subscribers

    That's why GAIM is the answer. Everyone I've given it to loves it. GAIM is one of the most useful OSS apps available on Windows. It's handling of multiple IM protocols simultaneously easily trumps all other clients.

    --
    "I assumed blithely that there were no elves out there in the darkness"
  212. How should I switch my mail host? by tepples · · Score: 1

    Switch your mail hosts.

    Which, as far as I can tell, would require switching my e-mail address in cases where I don't own my domain, or it would require switching my web hosts in cases where I do own my domain but must use the web host's DNS server. What's the proper workaround in each of these cases?

    1. Re:How should I switch my mail host? by drakaan · · Score: 1
      Those cases don't apply, because you don't need to switch your mail host in most cases. Scroll up to flakier's response.

      SPF records say "this mail host (which could be any mail host anywhere) is allowed to send mail from "mydomain.com" e-mail addresses". If you have zero control over your DNS setup, then it's going to be difficult no matter what you do, but unless you're doing free hosting (in which case, you get what you pay for), you should be able to get an SPF record added pretty easily.

      --
      "Murphy was an optimist" - O'Toole's commentary on Murphy's Law
    2. Re:How should I switch my mail host? by drakaan · · Score: 1
      Ahh...I just grokked your first-case scenario. If your ISP is too lazy to add an SPF record for their mailserver(s), you probably have other problems. It's not a big administrative nightmare, and it costs them nothing, so I'd ask loudly why hey're not doing it already.

      If your ISP is (for example) yahoo, and you have a yahoo.com e-mail address, and yahoo hasn't yet created any spf records, they need to answer some questions.

      --
      "Murphy was an optimist" - O'Toole's commentary on Murphy's Law
  213. Re:At what cost? by ScrappyLaptop · · Score: 1
    "What administration costs? It took about about 10 minutes for me to create and install a SPF record for my site"

    So, that works out to about six or seven dollars. Plus whatever else you were not able to get to during that time, which may have a considerably higher cost...

    Now, that ten minutes may not have been much, but what if Yahoo comes up with a competing system and you have to create a record for that? What if Yahoo (or whoever) comes up with a similar system and you don't know about it? What if every email "vendor" decides to implement their own authentication system? Suddenly your VP's mail isn't getting through. Suddenly, your help desk is flooded. Suddenly it's not just your "ten minutes" anymore...

  214. Get A Grip People by Anonymous Coward · · Score: 0

    It is NOT hard for your ISP's and those of us who manage our own domains to set up SenderID. In fact, it only takes a single TXT record in DNS to make it happen (a 30 second change, at best), so what's the big deal if Hotmail does this? It's forcing people to adopt SPF and SenderID so that it helps reduce spam and so that mail filtering will actually start working since it limits spoofing.

  215. Big deal... by crimson30 · · Score: 1

    I use hotmail (signed up pre-MS) and my guess is that I'm no exception to the rule that you have to check your junk mail anyway to make sure nothing legitimate was filtered. At least once a month, hotmail filters mail from a contact (on my CONTACT LIST!).

    My point being: I wouldn't be surprised if their use of sender-ID has little impact because of this problem.

  216. I agree... by benjamindees · · Score: 1

    As an anti-spammer, I really hope that Hotmail has the cojones to follow through with this.

    Being anti-spam as well as anti-MS-lock-in, I agree. I hope Hotmail does go through with this, because it will be a wakeup call for them. If they think they can dictate broken standards to the rest of us with their 10% of the market, they're wrong. I don't care one wit if I nor my customers can no longer communicate with anyone clueless enough to stick with Hotmail at this point.

    --
    "I assumed blithely that there were no elves out there in the darkness"
  217. Easy solution... by benjamindees · · Score: 1

    Block every third e-mail from a Hotmail address with a nice reply, a link to a site explaining Microsoft's motives in hijacking internet standards, and a GMail invite.

    --
    "I assumed blithely that there were no elves out there in the darkness"
  218. Return the favour by brrrrrrt · · Score: 1

    Fine, whatever.

    For years already I have my mailserver configured to drop any message from hotmail.com because you get so much junk from it. And to people who try to send me a valid message from hotmail, I just say: get yourself something decent like gmail instead of insulting me by sending me messages from hotmail.

    So I suppose it's only fair if they return the favour.

  219. Proprietary symptomatic treatment by dustmite · · Score: 1

    Isn't there an obvious difference between fixing a problem you helped to create by treating the underlying causes, vs. creating a proprietary 'solution' that treats the symptoms rather than the causes?

  220. Re:At what cost? by Ryosen · · Score: 1

    So let's just chase around every vendor's implementation? The issue here is that Microsoft is trying to push through yet another non-standard protocol. I'm all for SPF if it conforms to a standard, but SenderID is not a standard. It's an arbitrary modification.

    I'm sorry but this approach is not the answer.

    --

    Ryosen
    One man's "Troll, +1" is another man's "Insightful, +1".
  221. Market loosing tactic :) by Frodo420024 · · Score: 1
    I noticed a while ago that GMail had surpassed HotMail in the Netcraft ranking. People are already leaving HotMail for GMail - for the simple reason that GMail is better. Just about everyone on the Internet knows someone with GMail invites to share.

    Now HotMail will start junking a bunch of legitimate email. My guess is that it'll be so expensive in market share that MS will drop the idea before it was to go live, when it notices that the world is not following through on their tactics.

    "Aim at foot. Pull trigger. Blame someone else." :)

    --
    I'm in a Unix state of mind.
  222. SPF vs SenderID by Anonymous Coward · · Score: 0

    What about SPF. Why is SPF not enough for Microsoft and why would SenderID be any better?

    SPF seem to be the easiest, smartest and most compatible way of doing things IMHO.

  223. Another contribution to the unreliability of EMail by Kazoo+the+Clown · · Score: 1

    And unsuprisingly, by Microsoft, the undisputed king of unreliability.

    Any spam filtering the users are not directly in control of is counterproductive and contributes to the general unreliability of Email. Centralized control of filtering is counter to the very raison-d'etre of the internet. Leave it to clueless Bill-- still thinking he can control the internet. Just goes to show he never really has figured out what the 'net is all about, but then he's a control-freak, and the 'net is a control freak's worst nightmare.

  224. So the new spam will be by Trendkill · · Score: 1

    spammers from hotmail sending "requests" for sender ID confirmation. great! so not only will stupid people be getting 50+ emails from someone selling viagra asking for them to accept their address, they will also be clicking yes, and also getting the spam. well done! thats twice the amount of traffic than before!

  225. They will change their minds. by Anonymous Coward · · Score: 0

    Just like disabling Active-X in IE., this date will approach and they will change their mind.

    But it will have the effect of having many people add sender-id to their e-mail systems.

    They've done this on other things as well.

  226. Re:One little problem: MSN Messenger by orkysoft · · Score: 1

    Yes, but the MSN client (or GAIM) will inform you when you have new mail in your Hotmail account, but that doesn't work for other kinds of email accounts.

    So MSN users with Hotmail accounts get informed that they have new mail, and they can check it. GMail users will have to log in and just wait and see if they have new mail.

    --

    I suffer from attention surplus disorder.
  227. Re:At what cost? by chrome · · Score: 1

    Well, I host several thousand domains ... for us to support SPF with all of them, it will require a major engineering effort costing probably $100,000. No joke. Just a day of development time is something like $5,000. The 100 grand above would include all the testing and code review etc that would be required (we wouldn't be doing it manually, our system would need to create the necessary DNS entries, so it would be a coding job).

    Its not going to be cheap/quick/easy for a lot of companies to implement SPF. But I think Microsoft will bully people into it. Maybe its for the best.

  228. I do by Propaganda13 · · Score: 1

    I've had a Hotmail account for several years and had no reasons to change previously.
    I haven't had problems accessing it.
    I get 2-3 spam emails a YEAR that were put in the Junk folder. It's not Microsoft that sells your email.
    Once they raised the limits to 250MB, that prevented me from jumping ship to GMail.
    I have a Gmail account and it offered no improvements to me though I can see where it would for others.

  229. Re:At what cost? by gromitcode · · Score: 1

    wow you must have some real losers there, I could code you up a script to do this for all your domains and test it in under an hour and you require 20 man days to write a script to implement SPF records. tell your employer to better spend the $100,000 buy hiring competant admins.

  230. Re:At what cost? by chrome · · Score: 1

    We don't manage the DNS records manually. If you actually read what I wrote, you'd understand that.

    We have a site admin system, written in java, that manages all the config files. We have coding standards and testing processes.

    You obviously have never worked for a company that makes more than $1 a year.

  231. What about small business? End-users can't fix. by PhYrE2k2 · · Score: 1

    Administration Costs for bigcorp are mostly on the server end, and as you say that's easier. These are the people who probably transparently proxy port 25 to their in-house mail server anyway from all of their workstations, or have everthing set up inside some VPN for travelling users. Perfect. The cost here is often migrating legacy systems to new versions- something that isn't so easy. Software developers need to produce updates very quickly and most companies won't put them in until they're tested through-and-through.

    But what about Small corporations and small business. I do some consulting as a part of my day for various businesses. These are generally offices between 1 and 30 people, often on the 'commercial' cable or DSL style line. Some of these block SMTP entirely (fine- so we use mail submission on port 587), but think of the time. You can't get users to do even this simple change. This is an admin coming in at a few minutes a workstation, stopping productivity for the users, and changing everyone's outlook settings to point to the proper SMTP server, or enable SMTP authentication, or countless other things. Changing these settings is a ton of work for small businesses... let alone hosting providers who have to force this change.

    The reality is, M$ users won't get phone calls saying the mail didn't go through. M$ will return a message to the sender (500 response) saying that they don't have a record. Most users won't know what to do, and 99% of them will delete it and just not send mail to the person much anymore.

    The problem is that the solution is not in the hands of the user. Receiving a no-SenderID bounce will not go to someone who has the power to create one- it instead goes to the end user.

    -M

    --

    when you see the word 'Linux', drink!
  232. Re:At what cost? by Anonymous Coward · · Score: 0

    please spend your money more effectively, hire proper admins, even for thousands of domains a good admin that can script can do this in just a few hours.

  233. Re:At what cost? by miley · · Score: 1

    And pray that your IP addresses don't get changed!

  234. Re:At what cost? by gromitcode · · Score: 1

    I stand by my previous comments. I work as an admin with 4000 servers, box *nix and windows box as well as a 2 mainframes. We have over a thousand domains facing the internet spread across 400 internet facing servers. We have automated scripts for management of our DNS and We still only perceive this as a few hours work to change. Your comments suggest a poorly constructed infrastructure and an inflexible java admin system. being both a dev with over 20 years experience in the industry I can't possibly see how a well thought out java based app could require 20 days of work and testing to add these records.

  235. It's only fair... by OrangeTide · · Score: 1

    I've been rejecting mail from hotmail for years, it's only fair that hotmail is going to [finally] start rejecting mail from me. (I won't be using Sender-ID!!)

    --
    “Common sense is not so common.” — Voltaire
  236. Re:One little problem: MSN Messenger by GreatBunzinni · · Score: 1
    MSN is *by far* the most user-friendly IM I've used

    You don't go out much, don't you?

    First of all, MSN isn't the instant messenger/client application. MSN is the network and (someone correct me if I'm wrong) the communication protocol. Second, there are quite a few instant messenger applications which are more user-friendly than MSN Messenger. The only thing that makes MSN Messenger appear more user friendly is the habit people gather after using it for long periods of time. And third, the client is badly written and the protocol is an ever-changing mess.

    With all that in mind, why do people keep using a product/service which is extremelly inferior compared with others that are freely available?

    --
    Slashdot, fix your code or at least hire someone who is competent at it to do it for you.
  237. Ah, good by Trogre · · Score: 1

    Another nail in Hotmail's coffin.
    And soon enough, it was not.

    --
    "Nine times out of ten, starting a fire is not the best way to solve the problem." - my wife
  238. Re:One little problem: MSN Messenger by GreatBunzinni · · Score: 1
    I think ICQ is better, but if nobody I know is on it there's not much point, is there?

    There is a superior messaging protocol which is totally open, which has a pile of quality free(freedom and better) client applications, which is not dependent of private servers and that, depending on the servers the client connects, it can also connect with ICQ, AIM, MSN, IRC, etc. I'm talking about jabber

    Have you tried it yet?

    --
    Slashdot, fix your code or at least hire someone who is competent at it to do it for you.
  239. Only drawbacks? by TheLink · · Score: 1

    Uh. MSN messenger's service is significantly more unreliable than Yahoo Messenger's service. So much more downtime.

    That is a big drawback for me.

    There have been so many times that I am unable to log on and use MSN Messenger - and the problem is at _their_ end. Whereas that's very rare for Yahoo Messenger.

    Maybe it's fine if you are one of those preteens using it just to send "winks" to their friends, but as a communication service, it needs to be a lot more reliable.

    --
    1. Re:Only drawbacks? by sirdude · · Score: 1

      I really haven't experienced that in a long long while now. I remember when it used to happen, but don't recall it being as frequent as you've put it..

      Maybe that's just me.

  240. Re:At what cost? by chrome · · Score: 1

    And ... here we go ... argument boils down to "My dick is bigger than yours".

    Clap.

    Clap.

    Clap.

    Not everyone does everything the way you do; not everyone can make this an easy change.

    My figures might have been pulled out of my arse; but they were used to demonstrate a point. Which was exactly that.

  241. A square plug in a round hole is better than none by StikyPad · · Score: 1

    There's always time to refine the system and fix the leaks later. It may not be perfect, but it will encourage other mail servers to begin implementing the system. All mail will still arrive, albeit some may appear in the "Junk Mail" folder, but A) If you're not at least scanning the junk mail folder periodically, you're probably already missing some mail that's incorrectly marked as spam, and B) If you're using HotMail to receive e-mails you can't afford to miss, then you're insane and should seek help right now.

  242. fair by McGiraf · · Score: 1

    well it is just fair, my server has considered hotmail emails to be soam for a while now.

  243. Re:At what cost? by Anonymous Coward · · Score: 0

    Yeah you made your point. You built a poor admin system. Good job!

  244. Then Add a Check... by Greyfox · · Score: 1
    whois domain.com | grep Created and don't allow the mail if it was registered in the last couple of weeks to a month. If you've got a big mail server you could cache the domain created dates in a fast database as you look them up. Between SPF and Postgrey I get almost no spam anymore and adding checks for those two systems was a last ditch effort to avoid having to turn my mail system off completely. Enabling those two checks has worked beyond my wildest expectations.

    I'm right there with them! I would love to refuse e-mail from domains that don't have SPF records. Microsoft and myself agreeing on something... must be a sign of the apocaclypse. When I hear the naysayers offer a solution that's even half as effective as this "lemon" I'll be ready to listen to what they have to say.

    --

    I'm trying to teach myself to set people on fire with my mind... Is it hot in here?

  245. ...@hotmail.com = ...@aol.com by weighn · · Score: 1
    Once people aren't able to receive email from their friends and family, I predict a mass exit to other free email systems.

    anyone whose email address is at the hotmail domain is looking more and more like an aol luser each day.

    --
    Mongrel News all the news that fits and froths
  246. two can play this game... by sireasoning · · Score: 1

    So Hotmail wants to reject my email because I don't use MS servers.... Well, I can have our servers reject hotmail users also and in the rejection notice will be found the following message:

    HOTMAIL USERS:
    All hotmail accounts are now automatically rejected. Since Hotmail automatically rejects any email sent from any server that does not use a Microsoft protocol, they have broken email communications and we cannot communicate with you. If you wish to communicate with anyone at this host, please use a different email provider.

    --
    The significant problems we face cannot be solved by the same level of thinking that created them. -Albert Einstein
  247. Re:At what cost? by chrome · · Score: 1

    Well, not me; if I had my way it would have been in perl and I would have been able to do as Mr my-dick-is-bigger-than-yours suggested and have it done in 5 minutes.

    I didn't say I *LIKED* the way we do things, or that it was better, or that the system was good - but its what I have to live with.

    I mean, seriously, how many people work for companies that hopelessly complicate things that should really be quite simple to do?

    Thats my point.

  248. Email is not broken! by LordoftheWoods · · Score: 1

    When are people going to realize that the email infrastructure is _not_ broken! If you get spam, then who's fault is that? If you are giving your email address out to anyone under the sun, then you should expect to recieve some mail which you do not want. Why not just get a hotmail address and use that for random websites which require for you address for no reason.

    This technology doesn't give us anything we didn't already have. If you don't want email from people you don't know, use a whitelist. Or better, filter out messages that aren't digitally signed by someone trusted. Digital signatures are a much more foolproof way then this Sender-ID garbage. If you need to be able to recieve email from people you don't know, then even sender-ID will do very little to keep unwanted email out of your inbox.

    People need to stop blaming spammers and start looking inward for the solution. Real effort (who does that these days) can do wonders to eliminate spam. Give your email only to those you want mail from or accept that you have no clue who is talking to you and that you have no way to guarantee that they actually have legitimate business with you. Heck, here's a thought: generate a PGP/GPG key for people to send to you and filter out mail that is not encrypted. That way, anyone under the sun can talk to you if they are willing to put forth a tad of effort, and spammers will have to harvest not only email addresses but also public keys, and will have to further reduce their output by wasting CPU time on encryption. If you have a mail client with decent integration with some assymetric encryption app, setting this up should be accomplishable and worth the effort.

    Sender-ID _might_ cut down on spam. But so can and does ISPs filtering out SMTP from their customers, and this doesn't break _anything_ for anyone else. The whole sender-id thing smells pretty rotten. "Choose to use it or be filtered," says Microsoft. It is counterproductive because it breaks what is working fine and doesnt provide an ultimate solution to anything. Microsoft has no control over the world's email infrastructure, and personally I prefer things that way. Their attempt to force some half-cooked proprietary sender-identification garbage on people should be (and is, thankfully) met with resistance. People who don't care can/could have kept things as they are without things breaking, and people who did care could have dealt with it themselves rather than relying on Microsoft to spoon-feed them a (bad) solution.

  249. Re:One little problem: MSN Messenger by sirdude · · Score: 1

    Well dude,

    Considering that the subject of my post outlines what I mean by MSN, not to mention the parent post.. you're just being anally_retentive..

    Perhaps the client is badly written, but it is not apparent to me. Perhaps the protocol is badly written, but that is not apparent to me either. Either way, I wasn't aware of either of them being released to the public for you to make such sweeping statements :)

    As to your other point.. since when is MSN not freely available?

    If you are comparing MSN with Gaim (1.1.2 win32 port was the last I've used) or trillian (not used it for about 3 years I think .. but *shudder*), and calling it inferior, you frankly need to get your head examined.

  250. No Problem by KlausBreuer · · Score: 1

    Hey, I've been using Hotmail since before it was taken over by Microsoft.
    I still use it a lot, because I can easily and quickly use it from anywhere, and all my friends know the address.

    But I'm now also on GMail, and it's quite a bit better. Been looking for a good reason to switch and - voila! - here it is.
    Now I'll be forced to switch completely to GMail... good thing, actually.

    --
    Free PC version of ChipWits at http://www.breueronline.de/klaus/chipwits/
  251. Mod parent down by richi · · Score: 1

    Untrue. The SPF presence check is just one of many tests. Much more discussion of this at m'blog.

  252. Amazing by QMO · · Score: 1

    The (lack of) reading comprehension on /. never ceases to astound me.

    AC implies that I would refuse to send email to someone just because it is a hotmail account. I never said that.
    I said, "I can't imagine any important reason to send an email to a hotmail account."
    What I meant was, "I can't imagine any important reason to send an email to a hotmail account."

    I have sent email to hotmail accounts. The reasons behind those emails weren't important.

    I'm was just pointing out that if the day ever comes that I have to send something important to someone with a hotmail account, and their hotmail won't accept my emails, it's no big loss (to me). I use their other address, or fax, or whatever.

    --
    Exam 4/C again. Maybe I'll do better this time.
  253. Microsoft is a monopoly by Per+Abrahamsen · · Score: 1

    As a monopoly, Microsoft has more restrictions in what they can do (or would have, under an administration who understood economics) than other companies.

    Of course, Microsoft has nowhere near a monopoly on mail servers, so as long as they only implement the policy on Hotmail, there is no problem. Only if they start to employ the policy in the software bundled with MS Windows or MS Office, (Outlook and Outlook Express) will there be a case.

    1. Re:Microsoft is a monopoly by Anonymous Coward · · Score: 0
      Only if they start to employ the policy in the software bundled with MS Windows or MS Office, (Outlook and Outlook Express) will there be a case.

      Well, shit -- they'd never do that, so what's all the sweatin' and frettin' about?

  254. Re:One little problem: MSN Messenger by hobbit · · Score: 1

    No, what Google might want ("needs" is a little strong) to do is to tie your GMail/Google ID to a Jabber server, then develop a Jabber client as one of their beautiful web applications (leaving those who would prefer to use GAIM free to do so).

    --
    "Wise men talk because they have something to say; fools, because they have to say something" - Plato
  255. That's OK by Anonymous Coward · · Score: 0

    That's OK, I only use a hotmail account to sign up on sites that will likely send me spam anyway. I would never use it for real email.

  256. Re:One little problem: MSN Messenger by litecode · · Score: 1

    What Google needs to do to successfully compete with MSN is to release their own messenger program that's tied in with GMail, only then will it be easier to switch your friends over to another free email service.

    That's exactly what I want.. another connection, another contact list and another little icon at the bottom of my instant messenger. There are plenty of clients running around.

    If google were to develop a client, at first glance, an open, maluable standard would be the jabber system.

  257. Re:One little problem: MSN Messenger by mpontes · · Score: 1

    I do live in Europe (I forgot to mention it in the orininal post, maybe that was the reason of your indignation?), so I think I know I what I'm talking about. MSN Messenger is known as "The messenger" here, most people just don't know other IM services exist. From what I know and see, I belive the generalization isn't that off.

    --
    Bored? Browse Slashdot with a +6 modifier for Troll comme
  258. no, i did get it by MemeRot · · Score: 1

    I just don't know why anyone would use relaying at all. Why not a VPN or something into the corporate office? Even GoToMyPC? Relaying for authenticated users can still get you into trouble as I found when someone spent some time guessing a user's password at my last company, for the sole purpose of getting us listed as an open relay, which we really weren't. But, since he did guess the password (name of the company, idiot users, can't do anything about that), he easily could have spammed through us.

  259. Re:One little problem: MSN Messenger by Anonymous Coward · · Score: 0

    Hey, I live in Europe too! Maybe we're neighbours. We should get together someday, have a barbecue.

    How the hell can you so surely state that the 705.500.000 people of Europe have a predilection for msn messenger. I, for one, do not know 1 (one) person who uses msn messenger, and here I am, in Europe, as yourself.

    But hey, maybe I'm wrong. Good luck assigning an IM client to every other continent you know.

  260. Re:A square plug in a round hole is better than no by swordgeek · · Score: 1

    That's the worst idea I've seen on /. in a long time. Hell, why not just throw ALL mail into the junk folder? Why not add an extension to Excel to make it an email program? Hey, these ideas are lousy, but they might inadvertently provide some benefit!

    Let's get a _good_ solution, not an inherently flawed one, and _then_ consider implementing it.

    --

    "People who do stupid things with hazardous materials often die." -- Jim Davidson on alt.folklore.urban
  261. Re:Open-source Sig by tomhudson · · Score: 1
    Good point. I've made just 1 little change (I've identified Sender ID as the culprit), and pasted it into my gmail sig:
    NOTE: If you are receiving this at a Hotmail account, please keep in mind that you might not be able to receive it after November, when Microsoft implements Dender ID as YABIS (Yet Another Broken Incompatible Standard).
    You may want to switch to a GMail Account or a Yahoo Account if you want to continue receiving emails from me and other non-Microsoft accounts. Ask me how.
    Guess this makes it an open-source sig :-)
  262. Re:Open-source Sig by tomhudson · · Score: 1
    Oops :-)

    s/Dender/Sender/;

    Corrected version (damn 2-minute delay between posts - always happens when you're in a hurry :-)

    NOTE: If you are receiving this at a Hotmail account, please keep in mind that you might not be able to receive it after November, when Microsoft implements Sender ID as YABIS (Yet Another Broken Incompatible Standard).
    You may want to switch to a GMail Account or a Yahoo Account if you want to continue receiving emails from me and other non-Microsoft accounts. Ask me how.
  263. Re:Open-source Sig by Curtman · · Score: 1

    Beautiful.. This will spread like wildfire on the mailing lists. :)

  264. Re:What about small business? End-users can't fix. by aztracker1 · · Score: 1

    As far as *big* costs, implimenting an spf record, doesn't mean you have to use it on receiving end... For cable/teclo that restrict outbound 25 traffic, the *PROPER* submit port for SMTP is port 587, which even if not implimented, you can do a forward/reverse-proxy at the server to get through... clients should be sending mail to the smtp submit port (587) for the mx on record for the domain in question... if it's not offered, contact the mail admin for the domain in question.

    Setting a soft-fail will probably still go through, I beleive it is a hard fail that will be rejected, and guessing that the default will be for the /24 for the mx record, otherwise hard fail if no spf/senderid is found for the domain in question, which is probably more than fair.

    --
    Michael J. Ryan - tracker1.info
  265. Re:One little problem: MSN Messenger by aztracker1 · · Score: 1

    Don't even have to do that, if they have a jabber server that creates an account for every gmail server, there's already a jabber plugin for trillian, and would presume for gaim as well.

    Allong with other jabber-only clients of course, beyond this, they could definately make some compatible extensions to jabber, that would make a lot of people happy.

    --
    Michael J. Ryan - tracker1.info
  266. Re:One little problem: MSN Messenger by aztracker1 · · Score: 1

    I totally agree.. what honestly has kept me off of jabber is the fact that there isn't a larger scale system to use.. google running a jabber server would definately boost the protocol, and awareness, hell they could even develop a commercial package under another company for commercial servers for business... more $$$ for google.. :)

    --
    Michael J. Ryan - tracker1.info
  267. why use hotmail? by brianopp · · Score: 1

    why would anyone use hotmail if you can just use gmail!!!