Slashdot Mirror
Has Microsoft 'Solved' Spam?
MsWillow writes to tell us the Seattle PI is running a story looking back at Bill Gates promise to have the spam problem "solved" in two years. Well, it looks like time is up, and the verdict is -- an emphatic "maybe". From the article: "Microsoft says it sees things differently. To "solve" the problem for consumers in the short run doesn't require eliminating spam entirely, said Ryan Hamlin, the general manager who oversees the company's anti-spam programs. Rather, he said, the idea is to contain it to the point that its impact on in-boxes is minor. In that way, Hamlin said, Gates' prediction has come true for people using the right tactics and advanced filtering technology."
I scoff at Bill Gates' "efforts" to reduce spam. What has he done precisely?
Probably just deferred the responsibility to one of his underlings. Aside from that, he talks about crazy methods such as deciding how much money the sender has to pay you before you open the e-mail.
Gates has plenty of articles which detail how much he hates spam. Anyone can sit down and write this, but Gates gets the high exposure interviews with the Wall Street Journal and the AP.
Gates is all talk. If you want to read some articles from some very interesting people, check out A Plan for Spam by Paul Graham. It talks about simple ways to write Bayesian spam filters and does a very good job at describing how they work. Another valuable member of the anti-spam community is Jonathon Zdziarski who has written many books about how to actually get rid of spam. You can also read the Slashdot interview with him.
My work here is dung.
You're a computer engineer and you don't know about the "In-Reply-To" smtp header?
I don't know whether I'm being Informative or Flamebait here...
Justin.
You're only jealous cos the little penguins are talking to me.
How would you know that an email is a reply?
Using the In-Reply-To: header flag, perhaps? It uses the unique Message-Id. That's how threading works (in good MUAs - Thunderbird has it's own very very strange message threading). Save the message-id for outgoing e-mails, for each user. When a message is received, match the In-Reply-To header against the list of Message-Ids. If it's there, whitelist.
Easy.
:wq!
I agree with Microsoft on this. I have been using http://pobox.com/ for some time now and the results are dramatic. With their filters I can log in and view messages that were rejected and those that are held for review, and have the option of releasing false-negatives and putting them on my whitelist. I still get 5 or 6 spams a day but I can handle this easily. The rejects are in the thousands sometimes. This all happens before the email gets to my email account. Pobox.com is a forwarding service. Mail for me goes there and then is sent to wherever I wish (up to 3 redirects).
Any program that can make the impact minimal is IMHO - as the article says - the ojbective. I can deal with some junk mail, I just don't want to spend any significant time cleaning it all up. What pobox.com does not get, gmail usually picks it up and places it in my spam folder. Nice. If Microsoft can do this then I think they are on the right track.
Sender policy framework is a system to prevent fake sender address in emails. it works by checking the claimed sender domain, in the email, against a TXT record in the DNS system. The TXT record contains information of ip's or hostnames, allowed to send email on behalf of the domain in question.
If the email have a faked sender address it can be bounced or labeled suspicious.
This works amazingly well, and stops all faked sender emails before it's accepted in the server. Effectivly blocking virus and spam sent with forged addresses. Non exsisting domains are allready blocked in the mail servers so if everyone owning a domain was to implement this. It would make me a very happy person. Ofcouse spammers can still send email from domains under their own control, but those go into online blacklists fairly quickly
Unfortunatly it does not have the widest accept yet, but growing all the time. After hotmail implemented it in their DNS records, spam is at an all time low around here. Not getting a single spam email from faked hotmail addresses in ages.
And only 6 months ago I had a dedicated "sent from hotmail" folder since it was 99% likly to be spam anyway...
sepski