Slashdot Mirror


Appeals Court Tosses $11M Spamhaus Judgement

Panaqqa writes "In a not unexpected move, the US 7th Circuit Court of Appeals threw out the $11 million awarded to e360 Insight and vacated a permanent injunction against Spamhaus requiring them to stop listing e360 Insight as a spammer. However, the ruling (PDF) does not set aside the default judgement, meaning that Spamhaus has still lost its opportunity to argue the case. The original judge could still impose a monetary judgement, after taking evidence from the spammer as to how much Spamhaus's block had cost them. This is unfortunate considering the legal leverage the recent ruling concerning spyware might have provided for Spamhaus."

134 comments

  1. So It's A Double Negative You Want, Eh? by Anonymous Coward · · Score: 1, Funny

    In a not unexpected move... I don't think it isn't impossible to misunderestimate when a non-judge will unpredictably overrule a malignant case.
    1. Re:So It's A Double Negative You Want, Eh? by ObsessiveMathsFreak · · Score: 1

      That's what she said!

      --
      May the Maths Be with you!
  2. Oh yeah? by toleraen · · Score: 4, Funny

    In a not unexpected move... Well, then I'm not unglad to hear about this. I still can't not unbelieve that their initial lawyer didn't know how to handle the very basics of the case. I wasn't not hoping to hear that this case would just get thrown out completely...how much can't the US government not do about this though? Inquiring minds don't not want to know...
    1. Re:Oh yeah? by GweeDo · · Score: 4, Funny

      Could you not un-use more double negatives in that one post?

    2. Re:Oh yeah? by Futile+Rhetoric · · Score: 3, Funny

      Would the term doubleplusexpected be more to your liking?

    3. Re:Oh yeah? by Anonymous Coward · · Score: 0

      I don't think that wasn't not his point of not showing how not there wasn't not enough double negatives.

    4. Re:Oh yeah? by toleraen · · Score: 1

      If using Newspeak gets rid of the double negative, I'm all for it.

    5. Re:Oh yeah? by misleb · · Score: 3, Insightful

      I think "not unexpected" is valid and meaningful statement. It doesn't quite mean the same as "expected." Though perhaps "unsurprising" would be a better way of expressing the meaning.

      -matthew

      --
      "THERE IS NO JUSTICE, THERE IS ONLY ME." -Death
    6. Re:Oh yeah? by nickname225 · · Score: 3, Informative

      The court would have had a hard time justifying throwing the case out completely. It's probably true that the court initially didn't have jurisdiction, but according to the article, Spamhaus made an initial appearance in the case. Generally, if you make an appearance, you have submitted to the jurisdiction of the court. It's not quite the catch-22 it seems, since you can make an appearance SOLELY for the purpose of challenging jurisdiction without submitting to the jurisdiction of the court. So - basically Spamhaus' attorney messed up and their client has to live with the consequences. Btw - I am an attorney.

    7. Re:Oh yeah? by Anonymous Coward · · Score: 0

      Btw - I am an attorney. We don't need their scum.
    8. Re:Oh yeah? by Anonymous Coward · · Score: 0

      Btw - I am an attorney.
       
      And you just gave legal advice...
       
      GOTCHA! ;)

    9. Re:Oh yeah? by tinkerghost · · Score: 4, Informative

      It's probably true that the court initially didn't have jurisdiction, but according to the article, Spamhaus made an initial appearance in the case. Generally, if you make an appearance, you have submitted to the jurisdiction of the court.

      FWIR, Spamhause showed up in state court & said, 'you have no jurisdiction, the US court system has no jurisdiction & even if it did, it would have to be a Federal court'. The state judge threw it out properly judging that with no presense or assets in his district, he didn't have jurisdiction. 360 then went to a Federal Judge to redo the case & Spamhause's lawyers in the UK rightly asserted that "fuck the US court system, they have no jurisdiction, don't waste your money." or words to that effect. The problem is that the Federal Judge forgot that US law applies in the US not the world and ruled that being in another country doing things that are perfectly legal & not tortable (is that a word?) in that country is no reason that US law shouldn't be applied to them. In accordance with the new ruling on spyware, 360's case isn't actionable in the US anymore either, but that didn't seem to bother the appeals judge at all in denying the appeal of the ruling.

    10. Re:Oh yeah? by pilgrim23 · · Score: 1

      In America; once lawyers get envovled; you loose. Even a "win" means a financial loss no citizen could (nor should have to) bare. The only ones who ever win are the Lawyers from the judge down; it is a phase locked loop that only takes money as an input and outputs...absolutely nothing benifical at all.

      --
      - Minutus cantorum, minutus balorum, minutus carborata descendum pantorum.
    11. Re:Oh yeah? by QuickFox · · Score: 1

      Oh for crying out unquietly!

      --
      Terrorists can't threaten a country's freedom and democracy. Only lawmakers and voters can do that.
    12. Re:Oh yeah? by networkBoy · · Score: 1

      So it's a broken PLL then. A working PLL in beneficial as it can smooth a jittery clock or re-time the clock to a different frequency multiple.

      --
      whois gawk date unzip strip find touch finger mount join nice man top fsck grep eject more yes exit umount sleep dump
    13. Re:Oh yeah? by Anonymous Coward · · Score: 0

      involved not envovled, lose not loose, bear not bare, beneficial not benifical

    14. Re:Oh yeah? by nickname225 · · Score: 1

      Personal jurisdiction is a tricky thing. Just being a citizen (human or corporate) of a foreign country doesn't by itself exempt you from U.S. court jurisdiction. Now, not having any business dealings or assets in the U.S. might make a judgment against you noncollectable, but you may still be subject to U.S. jurisdiction. The issue really comes down to - does the nature of your contacts (either direct or indirect) with the U.S. make it reasonable for you to expect to be "haled into court". It's a complex topic and many, many thousands of pages have been written about it. At first glance, Spamhaus may well be subject to U.S. jurisdiction - they would have had to fight it out to determine. But, once they made a general appearance (as opposed to a special appearance to challenge jurisdiction), they submitted to the jurisdiction of the court and had to fight it out on the merits. Making just enough of an appearance to submit to jurisdiction and then deciding not to contest on the merits is generally a losing formula.

    15. Re:Oh yeah? by ookabooka · · Score: 1

      Of course he could have, he could have used an infinite number of negations. . or rather, he could have (not^(2n)) used an infinite number of negations. Where n is any whole number greater than 0.

      --
      If you are about to mod me down, keep in mind that this post was most likely sarcastic.
    16. Re:Oh yeah? by Anonymous Coward · · Score: 0

      Don't you mean not unexpressing the meaning?

    17. Re:Oh yeah? by OrangeTide · · Score: 1

      Some states make the loser pay. People forget that the US is not a homogeneous nation. And that at one time States were actually states and had pretty free authority over their own governance, including their judicial system.

      --
      “Common sense is not so common.” — Voltaire
    18. Re:Oh yeah? by pilgrim23 · · Score: 1

      Dats dae Beau-te-fool ting 'bout Amurka

      Yous don like it? Sos Sue Me!

      --
      - Minutus cantorum, minutus balorum, minutus carborata descendum pantorum.
    19. Re:Oh yeah? by Anonymous Coward · · Score: 0

      Some states make the loser pay.

      Which is why people like spammers file suit in the other states. There's one court in Texas that loves patent suits and so all the patent trolls sue there.

    20. Re:Oh yeah? by OrangeTide · · Score: 1

      You aren't totally free to choose where you file your suit. And it is possible for one court to override the jurisdiction of another court, even if you file after the other. It's all very complicated, and unfortunately it seems only the attorneys benefit from this system.

      --
      “Common sense is not so common.” — Voltaire
    21. Re:Oh yeah? by rvw14 · · Score: 1

      Mod parent up +1 Doubleplusungood.

  3. Comment removed by account_deleted · · Score: 5, Funny

    Comment removed based on user account deletion

  4. Spam the Judge Haus? by Prysorra · · Score: 1

    Anyone know the email of the judge that would charge him money? ...

    Err.... :D

  5. Still don't get it. by BubbaFett · · Score: 4, Insightful

    Shouldn't I be able to list any domain or IP in any database I please? Isn't it the responsibility of the people using the database to determine whether it's a bad idea? Isn't the real issue between the people blocking email and their customers who are missing email?

    1. Re:Still don't get it. by fbjon · · Score: 3, Insightful

      Presumably not if you advertise it as being reasonably accurate for some specific purpose.

      --
      True confidence comes not from realising you are as good as your peers, but that your peers are as bad as you are.
    2. Re:Still don't get it. by garcia · · Score: 1, Redundant

      Shouldn't I be able to list any domain or IP in any database I please? Isn't it the responsibility of the people using the database to determine whether it's a bad idea? Isn't the real issue between the people blocking email and their customers who are missing email?

      You can, as long as that database doesn't infringe on the rights of other companies to do their business. If you listed Microsoft, SCO, and Apple all in a database of "douchebag companies", posted that on your site, and then told everyone to block them for being douchebags, I have a feeling you would get sued (and rightfully so). If you chose to have your douchebag database on your own machine and blocked away w/o telling anyone anything about it, it would be fine.

      Unless you can prove to a judge that Microsoft, SCO, and Apple are all douchebags then I suggest that you don't go forward with that plan or you might end up with an 11 million dollar judgment against you.

    3. Re:Still don't get it. by Anonymous Coward · · Score: 0

      "Shouldn't I be able to list any domain or IP in any database I please?"

      Yes, but once you start categorizing something arbitrarily as spam or otherwise, then you are making a judgment choice and announcing to the world your decision. Especially coming from a position of authority.

      For instance, as an AC I say BubbaFett is a child molester, it will probably be ignored by most even if you are offended. If I were to say this using my real name, it might be noticed more and have some more authority. If I were a prosecutor or maybe a member of an organization that rids the interweb of pedophiles, even more so...and I'd be taking a real risk of getting sued (and rightfully so).

      I really don't know the ins and outs of this case -- but as someone has more authority, they will have to convince others that their designations are in fact correct and legitimate. They probably are spammers -- but so many spammers try to stay on the letter of the law, all the while violating the spirit of the law, that they think that they should not be classified as such. Maybe Spamhaus needs to relabel their service with different rankings like SPAMMER, CON_ARTIST, MAFIA, YOUR_PENIS_GROW_BIG or ANNOYING MOTHERFUCKING TWITS THAT I DON'T WANT IN MY MAILBOX. I'd rather be called a spammer than an annoying twit -- but one is pretty much a statement of fact while the other is an opinion. The law doesn't deal with opinions (or at least shouldn't), so they would be safe.

      Who knows...

    4. Re:Still don't get it. by Anonymous Coward · · Score: 0

      If you listed Microsoft, SCO, and Apple all in a database of "douchebag companies", posted that on your site, and then told everyone to block them for being douchebags, I have a feeling you would get sued (and rightfully so).
      What if you don't tell everyone to block them, but instead suggest that mail admins *may* want to use your database as one piece of information they use in deciding whether to block traffic ... and that you take no responsibility for the actions of those individual mail admins?
    5. Re:Still don't get it. by ajs · · Score: 1

      The problem is in defining what it is that Spamhaus does. I think it's fair that they market a means by which people can block email. They give very specific instructions on how to use their service for this purpose.

      That said, they're providing a service that their customers ask for. They clearly outline their criteria and let their customers decide if and how to use it. It seems to me that the spammers only have a legitimate complaint against the ISPs that use the Spamhaus data. Even then, it would be a hard sell, since the blocking of spammers is one of the selling points for ISPs.

    6. Re:Still don't get it. by UbuntuDupe · · Score: 1

      An idea I had a while ago was this:

      Spamhaus could have list A, the spammer list. This is what the judge prevented them from putting e360 on.

      So then they could have list B, the "list of people we wrongly suspected were spammers and have been ordered not to characterize as such, wink wink".

      Then Spamhaus sends everyone lists A and B. Then everyone using Spamhaus's list to filter says, "Hey, why not just block A *and* B?" Spamhaus assists in this process by making the default when you sign up to be that you receive A and B.

      But the judge probably wouldn't fall for that.

      On a related note, how does spammer litigation ever get this far? I'm not advocating anything, but why haven't vigilantes gone after these guys now that they're visible?

    7. Re:Still don't get it. by A+beautiful+mind · · Score: 1

      So you're saying, barring the Apple part, that slashdot is in trouble?

      --
      It takes a man to suffer ignorance and smile
      Be yourself no matter what they say
    8. Re:Still don't get it. by SCHecklerX · · Score: 4, Insightful

      Why? The receiving end is the one with the power to use or not use your list, or to whitelist certain entities in that list. On my own mail servers, I reject stuff that is on zen. The sender will get that error, and can talk to their own mail admins, who should see *why* they are on the list and work to get themselves removed. If that is impossible, and this is, indeed, a legitimate company trying to contact one of our employees (this has never happened, if they are legit, getting off the list is trivial), then the receiving end is the one who has the power to make the decision whether those messages should come in or not.

      I don't see the problem with keeping a list. If it is a bad list with too many false positives, then nobody would use it. Sheesh.

    9. Re:Still don't get it. by plague3106 · · Score: 1

      No, you're still responsible for failing to keep a list up to date or whatever. I ran into this recently; we had an IP blacklisted, but the lister disappeared. So emails (order confirmations) were being bounced due to the black list, and it was impossible to get off the list.

      Its like slander or liable; just because you say its spam, doesn't make it true. You can't setup any arbitrary rules you like, and say anything that violates them is spam without some kind of proof. Getting an email you didn't want doesn't equal spam.

    10. Re:Still don't get it. by misleb · · Score: 2, Insightful

      Right, but isn't it up to the users of Spamhaus to determine the accuracy for their purposes? I'm sure if the *users* of Spamhaus really cared about getting mail from e360 they'd let Spamhaus know about it. Sounds like the only people who care that Spamhaus lists e360 is e360.

      -matthew

      --
      "THERE IS NO JUSTICE, THERE IS ONLY ME." -Death
    11. Re:Still don't get it. by misleb · · Score: 2, Insightful

      You can, as long as that database doesn't infringe on the rights of other companies to do their business. If you listed Microsoft, SCO, and Apple all in a database of "douchebag companies", posted that on your site, and then told everyone to block them for being douchebags, I have a feeling you would get sued (and rightfully so).


      Oh please, how many sites out there list "douchebag companies" and tell people not to buy from them? It is called free speech.

      -matthew

      --
      "THERE IS NO JUSTICE, THERE IS ONLY ME." -Death
    12. Re:Still don't get it. by Anonymous Coward · · Score: 0

      If there is one thing i have learned in 25 years as an American, it is that we don't take personal responsibility for jack shit. Everything is the other guys problem and my lawyer will prove it.

    13. Re:Still don't get it. by TheGratefulNet · · Score: 1

      Shouldn't I be able to list any domain or IP in any database I please?

      at YOUR site you can choose to drop any IP datagram you want. any. you are NOT required by law (ianal) to HAVE to receive (let alone read) any or all data that hits your site.

      freedom means you have the right to allow or disallow anyone into your 'home' unless they have a warrant and are an official gov rep (eg, police).

      in this case, spamhaus makes 'recommendations' (not unlike MS in yesterday's article letting the religious nutjobs tell each other what is 'ok' to watch on tv and what is not). the local sysadmin uses that list WITH MODIFICATIONS (site specific) and then mail comes in and some mail gets dropped.

      how is this illegal? there is no LEGAL right to have your crap^Hmessages sent to people who don't want them.

      that's really the whole issue here that's being masked. its not about stopping the bad act (which is an act of goodness) but its the bad act (spam) ITSELF that should be the issue.

      the courts can't manage to insert 4 AA batts the right way; how can we expect our courts to deal with subtleties like spam, IP datagrams, DNS issues and so on?

      this should not be determined by 'regular courts'. they're just too ignorant of the actual issues to make informed decisions.

      --

      --
      "It is now safe to switch off your computer."
    14. Re:Still don't get it. by Kjella · · Score: 1

      When you put then on a spam block list, then you're making a claim that they're spamming and if false that is slander. It doesn't really work to say "these are just a list of IP addresses, I didn't make any claims". If I made up a list of a bunch of pedos and your name on it, then released it as a list of "people I don't like" and that maybe you don't like them either *wink, wink, nudge, nudge* you'd have a pretty good slander case. The only thing that's sad is that they're probably guilty as hell, but SpamHaus made the claim without the evidence to back it up.

      --
      Live today, because you never know what tomorrow brings
    15. Re:Still don't get it. by r3m0t · · Score: 1

      I'm going to create a list of murderers.

      It's up to the people who /use/ my list, such as employers, to determine the accuracy of the list, and whether they should use it for their purposes. I give no warranty and I have no liability of the information in the list.

      So is it OK with you if I put you on the list?

    16. Re:Still don't get it. by michrech · · Score: 1
      Certainly. A simple background check (which has been done at every job I've ever held) would reveal your list to be shite, and I'd still get the job (assuming I was qualified, had good references, blah, blah, blah).

      I'm going to create a list of murderers.

      It's up to the people who /use/ my list, such as employers, to determine the accuracy of the list, and whether they should use it for their purposes. I give no warranty and I have no liability of the information in the list.

      So is it OK with you if I put you on the list?
      --
      bork bork bork!
    17. Re:Still don't get it. by Phroggy · · Score: 4, Insightful

      If you listed Microsoft, SCO, and Apple all in a database of "douchebag companies", posted that on your site, and then told everyone to block them for being douchebags, I have a feeling you would get sued (and rightfully so). Nope, you're wrong. Since you mentioned Apple...

      Carl Sagan once sued Apple for calling him a "butt-head astronomer." Sagan lost the suit, because according to the judge:

      There can be no question that the use of the figurative term 'Butt-Head' negates the impression that Defendant was seriously implying an assertion of fact. It strains reason to conclude that Defendant was attempting to criticize Plaintiff's reputation or competency as an astronomer. One does not seriously attack the expertise of a scientist using the undefined phrase 'butt-head.'

      I'm sure "douchebag companies" would fall into the same category.

      Spamhaus' Register Of Known Spam Operations (ROKSO) is a list of "known professional spam operations that have been terminated by a minimum of 3 Internet Service Providers for spam offenses." That's a much more serious accusation than "butt-head" or "douchebag." If it's true, of course, then the plaintiffs can burn in hell... but they claim it's not true, and they've been falsely labeled by Spamhaus, which has damaged their reputation and cost them business.
      --
      $x='S24;r)>63/* h@<5+oZ)32"5cz';$me='phroggy'x$];
      $x=~y+ -xz+\0-Tx+;print$_^chop$me for split'',$x;
    18. Re:Still don't get it. by OrangeTide · · Score: 1

      I very rarely have to go through a background check. But anyways if he were to make a list of lazy employees, or a list of employees that steal pens. That's not going to show up on a background check. And if a company actually used this theoretical list, they would not even spend the money on the background check anyways, they wouldn't even bother with an interview.

      --
      “Common sense is not so common.” — Voltaire
    19. Re:Still don't get it. by Anonymous Coward · · Score: 0

      I haven't looked this one up, but Spamhaus provides beaucoup information regarding what it lists.

    20. Re:Still don't get it. by Anonymous Coward · · Score: 0

      This is a default judgement (the defendant didn't show up), so the facts of the case don't matter.

    21. Re:Still don't get it. by Anonymous Coward · · Score: 0

      So I should be able to put your name in my database of child molesters and it's up to the people who use the list to realize you aren't one?

      Nope, this list is a public accusation of being a spammer, and as such people have a right to demand that they are not falsely accused. The only real breakdown here is that the accusation wasn't false. It would only have taken a few seconds in court to clear that up if Spamhaus had bothered.

    22. Re:Still don't get it. by msslc3 · · Score: 1

      Exactly right. This should be modded up.

    23. Re:Still don't get it. by Anonymous Coward · · Score: 0

      I'd recommend you read up on John Henry Faulk.

    24. Re:Still don't get it. by DragonWriter · · Score: 1

      Shouldn't I be able to list any domain or IP in any database I please?


      Listing a domain or IP in a database is making a claim about it. Should anyone be able to claim anything about you, regardless of truth or falsity, regardless of the resulting harm, with the responsibility only on the listener to decide if it is true or false? Perhaps they should be, but it is pretty well established that there are boundaries to this in general, hence laws regarding slander, libel, etc., and I don't see any reason that an online database should be an especially privileged means of making and publishing such claims, whether the current rules or some alternate set are applied generally.
    25. Re:Still don't get it. by DragonWriter · · Score: 2, Insightful

      A simple background check (which has been done at every job I've ever held) would reveal your list to be shite


      Most places that do background check pay some third party to do it. If that third party relied in whole or in part on the list in question, perhaps to fill gaps in other records, then, no, the background check would not reveal the list would be wrong, it would return the results of relying on the list.

      Now, what would happen in the real world today is that the first person to find out they were flagged would file, and win, a rather substantial defamation lawsuit that would put the company running the list out of business, assuming that there wasn't a reasonable basis for them being listed on the list. But you seem to oppose the very laws that punish such lies.
    26. Re:Still don't get it. by michrech · · Score: 1
      You don't get it, either. The list that was proposed was a list of murderers. A check with the police department (or whatever other department) would reveal that, no, I am not a murderer, and the employer would no longer put stock in the list that was proposed.

      If it were a list like the first person that replied to me proposed, it would be much more time consuming to check (assuming the potential employer wanted to do as thorough a job as possible), but being as I've not stolen items like pens, paper, and other things that were mentioned, I'd *still* be OK.

      Most places that do background check pay some third party to do it. If that third party relied in whole or in part on the list in question, perhaps to fill gaps in other records, then, no, the background check would not reveal the list would be wrong, it would return the results of relying on the list.
      --
      bork bork bork!
    27. Re:Still don't get it. by kalaf · · Score: 1

      Nerd vigilantes don't exactly inspire fear. I guess if they played on a PVP server somewhere...

    28. Re:Still don't get it. by hkmwbz · · Score: 1

      The list of murderers would only include people convicted of murder. Just like Spamhaus only adds someone to their list if it's been reported by at least three major sources as being s spammer.

      --
      Clever signature text goes here.
    29. Re:Still don't get it. by Anonymous Coward · · Score: 0

      And if spamhaus had showed up to prove that Lindhardt was spamming, they could reasonably expect to find themselves facing nuisance lawsuits from many other U.S. spammers. The spammers would happily sue, even knowing they'd lose, just to put a financial burden on spamhaus. (No, we don't have loser pays here in the U.S.)

      Arguing jurisdiction _may_ have been reasonable and worth the effort since it would (most likely) apply to all other cases filed in the U.S.

      ianal, aiyct.

    30. Re:Still don't get it. by Anonymous Coward · · Score: 0

      And why, pray tell, would your prospective employer even vet the list through the police? Remember, this list is supposedly trustworthy and vetted. Why would they question it?

      That is where your argument breaks down, and why blacklist operators are liable for their lists.

    31. Re:Still don't get it. by Hotawa+Hawk-eye · · Score: 1

      So you don't call it a spam block list. You call it "the list of IP addresses we were ordered to state are not sources of spam by the US Federal court". That's a neutral and true description of the contents of the list. If mail server admins use that list as well as the regular block list to block messages, well that's their business.

    32. Re:Still don't get it. by Kijori · · Score: 1

      That rather depends. If I had two candidates, equal in every way except that one was on a list of murderers, I'd hire the one that wasn't a listed murderer. There's always the possibility that the police have got it wrong, or you're in witness protection, or you've stolen someone's identity, and the only person to have found out the truth is the PI that made the list.

      But anyway, the Spamhaus list is much more like the list of employees that have stolen pens and pencils. If you are given a list like that, you can either use it or you can't; there's no checking possible except anecdotal. You can call the previous employer, but all they can say is "I never noticed them stealing any". They can't guarantee the list is wrong. And you know that using the list in the past has reduced stationery theft - why should it be wrong this time? The Spamhaus list is much the same; all you can do is say that you don't know of anyone spammed by a certain person, you can't ever be sure that an entry on the list is incorrect - maybe you just didn't ask anyone that they spammed.

      e360 were put on this list by Spamhaus. Spamhaus don't guarantee the list, but that makes no difference to e360. There's no way for them to show it's not true, and people hate spammers. They're going to assume they're lying, they're going to assume they're guilty. There's no way for them to recover. The "shotgun approach" blocks a lot of spam, but it will mean blocking legitimate businesses, and if SpamHaus don't remove them they are stopping them doing business.

      If it doesn't matter what I say as long as I don't guarantee it's true, would you not hold me responsible for anything? What if I put up a billboard near your local school with your photo and "PEDOPHILE". In small print it will say "we don't know, but he might be". When people smash your windows at night will you still be quite so at ease with libel?

    33. Re:Still don't get it. by michrech · · Score: 1
      There are so many things wrong with your statement, it's pathetic. You are taking *way* too many assumptions, and using WAAAY to many "what if's" just to try to make your point valid. It doesn't work. For one, there are laws that protect people in situations like the ones you are attempting to use as examples, especially for what I've quoted below.

      This will be the last reply from me, to you. The only conclusion I can come to is that you are a spammer that was, in some way, affected by what Spamhaus was doing. The logical end to this conclusion is that you don't want to see a fellow spammer (e360) added to such a list and therefore support their lawsuit.

      True? Untrue? I can't guarantee it, but your replies/statements in this thread seem to support it.

      Have a nice day.

      If it doesn't matter what I say as long as I don't guarantee it's true, would you not hold me responsible for anything? What if I put up a billboard near your local school with your photo and "PEDOPHILE". In small print it will say "we don't know, but he might be". When people smash your windows at night will you still be quite so at ease with libel?
      --
      bork bork bork!
    34. Re:Still don't get it. by h2_plus_O · · Score: 1

      Unless you can prove to a judge that Microsoft, SCO, and Apple are all douchebags then I suggest that you don't go forward with that plan [If you listed Microsoft, SCO, and Apple all in a database of "douchebag companies", posted that on your site, and then told everyone to block them for being douchebags] or you might end up with an 11 million dollar judgment against you.
      Wow, it's a good thing that slashdot hasn't been doing exactly that for the last decade then. Oh, wait...
      --
      If there's one thing I won't stand for, it's intolerance.
    35. Re:Still don't get it. by devilspgd · · Score: 1

      If it is a bad list with too many false positives, then nobody would use it. See: APEWS
      --
      Give a man a fish, he'll eat for a day, but teach a man to phish...
    36. Re:Still don't get it. by misleb · · Score: 1

      There are already "lists" for that sort of thing. It would be somewhat redundant for you to create one yourself. So it is kind of a bad example. If you mean to start a background checking service and decide to report me as a murderer, go ahead. Just beware that if you keep producing inaccurate results like that, nobody is going to want to use your services.

      -matthew

      --
      "THERE IS NO JUSTICE, THERE IS ONLY ME." -Death
    37. Re:Still don't get it. by devilspgd · · Score: 1

      Except that Spamhaus' claims are backed up with evidence on their website, as well as kept private.

      The only issue is the way their first legal team handled the case, by first submitting to jurisdiction, then second, claiming the courts don't have jurisdiction and withdrawing.

      Either answer would have been fine. Both isn't.

      --
      Give a man a fish, he'll eat for a day, but teach a man to phish...
    38. Re:Still don't get it. by misleb · · Score: 1

      If it doesn't matter what I say as long as I don't guarantee it's true, would you not hold me responsible for anything? What if I put up a billboard near your local school with your photo and "PEDOPHILE". In small print it will say "we don't know, but he might be". When people smash your windows at night will you still be quite so at ease with libel?


      Is it libel we're talking about here? Is that what the spamhaus vs. e360 case is about? If it isn't then your points are moot.

      -matthew
      --
      "THERE IS NO JUSTICE, THERE IS ONLY ME." -Death
    39. Re:Still don't get it. by Kijori · · Score: 1, Troll

      It's nice to know that there are so many things wrong with my statement that you can't name any of them. You must have been overwhelmed, I suppose.

      Your last reply? That was your first reply. I don't understand what you mean by my "replies" and "statements". There has been one. Which you have picked apart cleverly by calling it pathetic and calling me a spammer. I just don't know what to say... I'm going to have to think hard to come up with a reply to that logic!

      Now I know you said you wouldn't reply again, but in the interests of rational debate - which was what I was aiming for - I have some questions and some comments on your reply.

      - You say I used 'WAAAY to [sic] many "what if's"[sic]' to make my point. I don't quite understand. Taking that literally, I didn't use the a single "what if" - that is, the phrase doesn't appear in my reply. Taking it less literally, my reply contained three different analogous situations, and three "what if" ideas. Since an analogy is, unavoidably, going to need you to imagine a different set of circumstances I don't really think that was avoidable. If you could explain what you meant I'll try to remedy it, but I don't really understand your objection here.

      - When you speak of the situations I'm "trying to use as examples", I think you've confusing me with someone else - two other people in fact. This seems to be the case again later when you refer to my "replies". I don't see where this misconception comes from. That was my first reply, and I was using the examples you mentioned in your post.

      - You say there are laws to protect you from the situation I describe. I'm not a lawyer, so I need a little more information than that. What laws exactly would protect you while leaving e360 high and dry? You've both been alleged to have committed a crime, in both cases the publishing entity has claimed their information may not be accurate. What's the important difference? Forgive me if I'm missing something obvious.

      - Which part of my post suggested I was a spammer? Can people not disagree with you without some financial incentive? Or did I trigger some long-lost bit of Slashcode that sent my reply to hundreds of people?

      If you reply, I hope we can return this discussion to a more civil level. If not, well, that rather speaks for itself.

    40. Re:Still don't get it. by Anonymous Coward · · Score: 0

      So, how about a real-world example (in fact, the one that set the precedent)?

    41. Re:Still don't get it. by DragonWriter · · Score: 1

      A check with the police department (or whatever other department) would reveal that, no, I am not a murderer, and the employer would no longer put stock in the list that was proposed.


      The problem is that there are many different jurisdictions that would be checked, and employers that "do" background investigations do not, for the most part, "do" the investigations themselves, they pay someone else, who uses private databases collected from various public sources.

      So, yes, while checking the right sources would reveal this was false, most users of the data wouldn't check all the sources. In fact, the reason they would be using a list compiled by some third party in the first place would be to avoid the work of checking all the basic sources themselves.

      Misrepresentations on these types of compilations are controlled, currently, in substantial part by the fact that people making false representations can be sued for the damage caused by those false representations.

      If it were a list like the first person that replied to me proposed, it would be much more time consuming to check (assuming the potential employer wanted to do as thorough a job as possible), but being as I've not stolen items like pens, paper, and other things that were mentioned, I'd *still* be OK.


      Assuming the list was accurate; of course, in your proposal where the list owner would be able to make any claims they wanted to in the list, without consequences, you (and everyone else) would be in danger of being placed falsely on the list, and no one placed on the list falsely would have any recourse against the list owner.
  6. Spamhaus? by Enlarged+to+Show+Tex · · Score: 2, Interesting

    I didn't realize you could make German haute cuisine using SPAM...I knew about all the uses in pan-Asian cuisine, but German food with SPAM could be interesting!

    I can see it now: SPAMwurst, mit Kraut

    1. Re:Spamhaus? by Adambomb · · Score: 1

      Shouldn't that be Spamwurst, Spamwurst, Ei und Spamwurst, mit Kraut?

      Also, I hear that doesn't have much Spamwurst in it.

      --
      Ice Cream has no bones.
  7. So, the next logical step is by aim2future · · Score: 3, Funny

    that I get sued by the spammer if I reject their spam

    1. Re:So, the next logical step is by simong · · Score: 1

      I'm looking forward to Google suing me for using Adblock Plus with Firefox.

    2. Re:So, the next logical step is by reebmmm · · Score: 1

      IAAL, and, frankly, nothing stops a company like e360 from suing you, or, indeed, winning if they are able to obtain a default judgment like in this case. The reason why that seems genuinely unlikely is because you're not a big target and any damages would be pretty small.

      Reading the opinion, the judge seemed to recognize that Spamhaus availed itself of the U.S. court systems and then, in a really stupid move, wanted out and gave up its rights in the process. Unsurprisingly, it lost at the district court, and Spamhaus was amazingly well-advised by the judge of the result of its actions at the time. Spamhaus only then got mad when it realized that it in fact might be subject to sanctions by the courts.

      The 7th circuit gave Spamhaus a lot to be thankful for. And this opinion leaves a lot open for the district court now. Among other things, on remand to the district court, the district court has to:
      1. do a better job of fact finding with regards to damages; and
      2. go through the full analysis regarding injunctive relief.

      What's also interesting about the injunctive relief decision is that while spamhaus may not use the same criteria to list e360, they can come up with a new and different reason to re-add them to the list.

  8. Woe be gone by packetmon · · Score: 2, Insightful

    I wonder how long will it be before some company like these fools comes along and starts lobbying the powers that be to tweak "CAN-SPAM" like fables. I say get to the hardcore bottom of it all. Oh more Viagra spam eh... Sue the damn pharmaceutical companies for allowing their advertisers to break laws. That will minimize a whole slew of spam. Think about the monies pharmaceutical companies would have to even dish out to hear a case if half the US started filing small claims cases, class action cases, etc.

    1. Re:Woe be gone by Stu101 · · Score: 1

      Thing is, it's not the "proper" drug companies that are doing it. *IF* it was indeed viagra, it would probabily be a generic back street marketed version.

      As for "herbal" viagra, well there such a wide definition, it could literally be anything, and anything from anywhere.

      Also a lot of the spam for porn sites is actually known about by the companies who own the porn sites. Plausable deniability.

      --
      http://www.writeitfor.us - Writing IT for the IT generation.
    2. Re:Woe be gone by jonwil · · Score: 1

      Here is an idea that might help stop the medical spam.

      Lets assume that these spammers actually have some kind of product (whether it works/does what is claimed or not is irrelevant, what matters is that they have a product) and are actually sending it out to people who buy from their crappy .biz website.

      If the place where the pills are coming from is located outside of the US, the drugs can be stopped in the mail (I believe mailing drugs into the US from outside of the US is illegal). If the place where the pills are coming from is located inside the US then the places they are being sent from could be shut down for not having a license or something. If enough people bought these "generic drugs" and didnt actually get them, they might care enough to complain to the supplier.

      Also, maybe an advertising campaign funded by the FDA and/or the big drug companies (remember, people who are spending money to try and get "Generic Viagra" or "Herbal Viagra" or whatever are depriving companies like Pfizer of income plus in some cases people mistakenly associate the crappy "generic" drugs with the companies that make the real thing and that would be bad.

      The ad campaign would basically be TV ads/letterbox drop/whatever that would warn people of the risks/dangers (e.g. receiving wrong product, receiving product that hasn't been fully tested etc) of using these "generic medications" (although the danger is that it could backfire with people thinking its just a way for the drug companies to shut out the competition and keep prices high)

    3. Re:Woe be gone by jimicus · · Score: 1

      Sue the damn pharmaceutical companies for allowing their advertisers to break laws.

      Seeing as Viagra is still very much under patent protection, I think it's safe to say that any "generic" alternative on general sale in the Western world is likely not an alternative at all, and may contain pretty much anything.

      Now I think of it, I'm pretty certain rat poison (at least as sold in the UK) has a distinct blue colour. I wonder....

    4. Re:Woe be gone by jimicus · · Score: 1

      If enough people bought these "generic drugs" and didnt actually get them, they might care enough to complain to the supplier.

      This is only a wild guess, but I'd imagine someone that's too embarrassed to ask their doctor for viagra is hardly going to write a letter of complaint to (or, indeed, telephone) a total stranger and say "Dear Sir, I can't get it up".

    5. Re:Woe be gone by qweqwe321 · · Score: 1

      Won't work. In order to have standing to file a suit you have to have been significantly harmed by the person/entity you're suing. Otherwise the opposition will just write a demurrer-- the legal equivalent of "so what?" because you don't have a claim worth fighting over.

    6. Re:Woe be gone by Sigma+7 · · Score: 1

      Lets assume that these spammers actually have some kind of product (whether it works/does what is claimed or not is irrelevant, what matters is that they have a product) and are actually sending it out to people who buy from their crappy .biz website.

      If the place where the pills are coming from is located outside of the US, the drugs can be stopped in the mail (I believe mailing drugs into the US from outside of the US is illegal). If the place where the pills are coming from is located inside the US then the places they are being sent from could be shut down for not having a license or something. If enough people bought these "generic drugs" and didnt actually get them, they might care enough to complain to the supplier. The spam sites don't have a real product - they simply collect the credit card information from users for use in further criminal activity (e.g. ident theft, child porn, etc.) For at least one of these sites, the process is described in great detail: http://spamtrackers.eu/wiki/index.php?title=My_Can adian_Pharmacy

      In my opinion, placing orders using randomly generated contact/CC info would do more damage, as they would have to filter through these false orders. If done to enough of a degree, it makes operating the site unproductive. Based on linear math from two datapoints, I suspect about ~300 orders within one month for one site in particular (based on order numbers RX52007-***331 from and RX52007-***724, about 30 days apart. )

      I 3 online pharmacies, and I am aware that typing &lt; instead of < causes me to teabag rather than to heart.

  9. I don't get it by SCHecklerX · · Score: 3, Insightful

    Certainly if someone wanted to receive e360's messages, or if they were EXPECTING a message from e360 and didn't get it, they can talk to their own mail admins and have e360 whitelisted. Why is it so hard to effectively explain to the courts that Spamhaus has nothing to do with whether e360's messages get through or not, other than responding to a query from the receiving end asking if Spamhaus believes they are a spammer?

    In reverse, is the do-not-call list something that will be targeted next?

    1. Re:I don't get it by DaleGlass · · Score: 4, Informative

      Why is it so hard to effectively explain to the courts that Spamhaus has nothing to do with whether e360's messages get through or not, other than responding to a query from the receiving end asking if Spamhaus believes they are a spammer?

      Because Spamhaus didn't show up in court to explain it. From Wikipedia:

      Spamhaus initially succeeded in moving the case from state to federal court, but then stopped defending itself against the lawsuit, because it is based in the United Kingdom and outside the jurisdiction of United States courts. The American court had no choice but to award e360 a default judgment totaling $11,715,000 in damages. Spamhaus subsequently announced that it would ignore the judgment.
    2. Re:I don't get it by SCHecklerX · · Score: 1

      Good point. I had forgotten about that. But still...

  10. Huh?! by rjstelling · · Score: 0, Flamebait

    > The original judge could still impose a monetary judgement

    No he couldn't, because however much you Americans think you run the world US laws [currently] does not extend to the rest of us :D

    1. Re:Huh?! by R2.0 · · Score: 1

      Yes, he could, because Spamhaus submitted to that court's jurisdiction. they shouldn't have, but they did. And one can't make an argument that jurisdiction doesn't apply after a ruling goes against you.

      Spamhaus's lawyers screwed up, bad. They could have made the jurisdiction argument up front, and this would all have gone away. Perhaps they should sue their lawyers, but that doesn't mean that they are not subject to the judgement of the court that those lawyers acknowledged had jurisdiction (although inadvertently).

      --
      "As God is my witness, I thought turkeys could fly." A. Carlson
    2. Re:Huh?! by Anonymous Coward · · Score: 0

      Maybe they should have hired American lawyers.

    3. Re:Huh?! by jimicus · · Score: 1

      And one can't make an argument that jurisdiction doesn't apply after a ruling goes against you.

      IANAL, but I'm pretty sure that where you're named as the defendant in a civil case taking place in another country, you can pretty much decide to do what you like with the judgement, including wipe your bottom with it.

      Problems only start if you wish to travel to that country at a later date.

    4. Re:Huh?! by DragonWriter · · Score: 1

      IANAL, but I'm pretty sure that where you're named as the defendant in a civil case taking place in another country, you can pretty much decide to do what you like with the judgement, including wipe your bottom with it.

      Problems only start if you wish to travel to that country at a later date.


      Well, no, if you have assets or business dealings in the country, you certainly stand financial risk from ignoring the case even if you never wish to visit personally, and, IIRC, several countries have agreeements allowing enforcement of some or all civil judgements of one country in the other's courts, so you may be at risk if you have assets or business dealings in certain third countries, as well.

    5. Re:Huh?! by R2.0 · · Score: 1

      You are taking the second statement I made out of context. They had ALREADY submitted to the jurisdiction of the court. They did this all on their lonesome - they requested that it be moved from a local court to a federal court, because they argued that the federal court had jurisdiction. Then they tried to argue that the Federal court didn't have jurisdiction. Sorry, too late - you don't get to keep changing jurisdictions at your pleasure.

      They should have argued that the local court didn't have jurisdiction, period. They probably would have won, and then it would have been incumbent on the plaintiff to re-file in a court of the proper jurisdiction. Instead, they made it easy for the guy, requesting federal court jurisdiction and then ignoring it.

      They VOLUNTARILY subjected themselves to federal jurisdiction, and after that the normal procedural rules apply. Specifically, the rules regarding default judgements when a party is non-responsive.

      --
      "As God is my witness, I thought turkeys could fly." A. Carlson
    6. Re:Huh?! by jimicus · · Score: 1

      They VOLUNTARILY subjected themselves to federal jurisdiction, and after that the normal procedural rules apply. Specifically, the rules regarding default judgements when a party is non-responsive.

      Yes, but my argument is "if they have no business within the US, no intention of visiting, and there is no US/UK agreement whereby civil cases brought in the US may be followed up in the UK, who or what is going to stop them voluntarily un-subjecting themselves to federal jurisdiction?"

    7. Re:Huh?! by devilspgd · · Score: 2, Interesting

      There IS a US/UK agreement allowing collections cross border, although it's extremely complex and all but requires the plaintiff to fight it out in the UK courts.

      The UK courts are a lot more fun though, as it's a loser-pays system, so you can't just go randomly suing people unless you're prepared to pay both sides of the battle -- If you want to sue, you either have to be rich, or right.

      --
      Give a man a fish, he'll eat for a day, but teach a man to phish...
  11. and DoubleClick by ILongForDarkness · · Score: 2, Interesting
    Sues MS, and others for blocking there popup, err, targetting purchasing opportunities. Seriously, the ISP or who ever the end user is, chose to use the service, so they implcitely said 'they don't want to hear from you'.

    I can't remember the original source but it was a few years ago I read an article about spam. Very interesting, most of the cost of advertising went to the advertiser (as it should) with paper media. Not so with spam, almost all the cost of spam goes to the recipient and hardly any to the spammer. You can easily spam 1000 per second from a server, so your looking at a very small fraction of a cent per message. But the user has to take their time to remove you message, their bandwidth is tied up etc. I think the estimate was in the tens or hundreds of millions of dollars if you factor in the cost to the company paying the employee while they determine if it is spam or not. Even more if the spam has viruses, and causes system exploits. Spam filters work, sort of, sometimes they block stuff you want, and if not, you have to check your junk box every once in a while just in case, so it isn't saving you all the time associated with spam.

    I think corporations that get spammed, including ISP's should be able to go to companys like DoubleClick and e360 and bill them for the aggregiate costs. "You sent 2 million emails through our network last month, here is your bill for 200k for bandwidth + costs for the end users". Money applied to spam filtering, or as a discount to the end user that had to deal with the unfortunate garbage.

    1. Re:and DoubleClick by Phil246 · · Score: 2, Insightful

      I think corporations that get spammed, including ISP's should be able to go to companys like DoubleClick and e360 and bill them for the aggregiate costs. "You sent 2 million emails through our network last month, here is your bill for 200k for bandwidth + costs for the end users" unfortunately that same logic could be applied to other sites that the ISPs want to extort
      "Hello Google, you sent x Gigabytes of data through our network to our customers, here's the bill for the bandwidth used..."
    2. Re:and DoubleClick by ILongForDarkness · · Score: 1

      Possibly, but there is a fundamental difference in the situations. The user requested the data from Google, so there ISP fees apply for the bandwidth. The spammers are flooding the ISP's network, but aren't necessarily costumers of the ISP. The logical originator isn't a customer, so the ISP's customers are having traffic associated with their accounts that isn't their desire to initiate. The ISP can either block the stuff from coming so you don't get the bogus download fee, or they can bill someone else. I don't think it is ethical for the end recipient of spam to have to pay the salarys + the bandwidth for something they didn't even want.

    3. Re:and DoubleClick by djones101 · · Score: 1

      Possibly, but there is a fundamental difference in the situations. The user requested the data from Google, so there ISP fees apply for the bandwidth. How so? I have never, ever requested Google's Ads when I'm looking at a website, yet I'm inundated with them at every turn. In a fundamental way, push ads are no different than spamming, but, for some reason, they are considered more "acceptable" to the populous.
    4. Re:and DoubleClick by Creepy+Crawler · · Score: 1

      ---yet I'm inundated with them at every turn.

      Yet, I'm not.

      Try using Firefox with heavy blockers. Even a tailored hosts file on your router would help, assuming you are running bind or something similar on your router.

      --
    5. Re:and DoubleClick by ILongForDarkness · · Score: 1
      Some of Google's adds are paid for hits from your search. They are a valid response to your query, imho. It is a potential answer to the query, just the order of the listing is gamed. I agree ads in pages often aren't requested by the user. However, sites that you log into, often say in there EULA that they make there revenue by offering ads, so the user in that case actually has agreed to take the ads with the content they want. Either way though the user initiated the content stream, it was a pull, not a push.

      I think my suggestion would work, because if the company doesn't want to pay for the bandwidth/penality, they could always put in place a EULA were the user explicitly accepts the ads as the cost of the service. Going to a search engine, or something, and getting 10 popups and tickers all over the screen, is a not so subtle way to let the user know that is how they get the free service.

    6. Re:and DoubleClick by idontgno · · Score: 1
      Oh, so you're actually well read up on the current network neutrality controversy. I find it particularly interesting you cite one of the major proponents of NN (Google), as well as one of the major "villains" in the eyes of the opponents of NN (because Google is such a significant source of traffic on the network).

      Good work.

      --
      Welcome to the Panopticon. Used to be a prison, now it's your home.
    7. Re:and DoubleClick by element-o.p. · · Score: 1

      Quote: I think corporations that get spammed, including ISP's should be able to go to companys like DoubleClick and e360 and bill them for the aggregiate costs.

      That's the logic that the big ISPs and telcos are using for their arguments in the net neutrality debate: "If you send a lot of traffic through my network, I'm going to bill you for it." And all (or a lot of) the end users (including, to some extent, me) got up in arms about that, effectively saying "I'm already footing the bill for your bandwidth with my monthly service charge. You can't charge Google or Vonage or anyone else on the Internet for using the same bandwidth that I'm already paying you for!" (sed "s/Google or Vonage/DoubleClick and e360/").

      --
      MCSE? No, sir...I don't do Windows. Yes, I am an idealist. What's your point?
    8. Re:and DoubleClick by ILongForDarkness · · Score: 1

      Thats the problem though. You are paying for the bandwidth, for the spam, ads etc. that you don't even want. I propose that the person initiating the traffic pay, so if you are pushing spam and popups, you pay for the full bandwidth, not just the hop from your server to the targets ISP mail server. But also the hop from the targets mail server to the end user.

    9. Re:and DoubleClick by element-o.p. · · Score: 1

      I see the point you are making, but I don't think it's something that would work very well in practice. At the layer 1 level, the ISP will just see a virtual circuit between the end user, and another host on the network, be that Google or DoubleClick or e360. So who do you bill -- the local user or the remote end? Okay, an ISP can use something along the lines of a stateful firewall to help with the billing. This sounds okay so far -- if I request a page from Google, I get billed; if someone spams me, then they initiated the traffic and they get billed.

      But wait...the spammer doesn't send to me -- they send to my ISP's mail server (okay, I run a mail server at home, too, but that's a special case, and hardly applicable to Joe User). This means the spammer doesn't get billed; whichever SMTP server first accepted the e-mail gets billed. Okay, that's not so bad -- it provides a financial incentive to mail server admins to make sure their servers are secure, since they will be paying for all e-mails that come from their server. Hmmm...but the ISP isn't going to pay those bills out of the goodness of their hearts, so they are going to have to pass those costs on to the end user. I suspect not all ISPs will charge the same amount for their bandwidth since bandwidth cost varies with locality (don't believe me? The company I work for pays ~$7K per month for a T1, since we operate out of some of the most remote areas in the U.S.; my 768K DSL line is ~$50 per month, and if /. is to be believed, you can get 2-5M DSL lines in Japan and Europe for less than I pay for my 768K line), so what happens if my ISP charges me less for bandwidth than they pay to connect to another ISP's SMTP server? You know they are going to pass the cost on to me, but how do they determine how much I owe? The accounting is starting to get complicated, but let's keep going. When the recipient checks his e-mail, he is going to initiate a POP3 connection, so he gets charged for initiating this service. But wait -- I've already payed to send that e-mail, so now it's being double-billed. Okay, so we exempt POP3 from the pay-for-bandwidth scheme...but you and I both know that won't happen. Now, let's throw one last wrinkle into the equation. Suppose I travel for my business, and therefore I frequently use WiFi at hotels when I check my e-mail or post on /. Being a geek, I know that WiFi has some potential security pitfalls (see http://blogs.zdnet.com/Ou/?p=660), so I tunnel e-mail to my server at home using SSH. Now, whether I'm sending or receiving e-mail, I'm getting billed because I'm tunneling through SSH, which I initiate. I'm not too crazy about that, because now I'm definitely getting double-billed for e-mail and therefore paying for the bandwidth for every spam I receive, which is what your proposal was trying to prevent in the first place.

      But don't worry because really, it's even worse than that. Now the ISP needs to log every packet across their network and needs to log the state of each packet as well, so you can determine the initiator of the traffic. You've just made your network a lot busier and greatly complicated your billing system so the ISP incurs even more expense in an effort to bill appropriately. So instead of paying a flat rate fee for Internet service, I now pay the cost of the bandwidth I use, plus the cost of the additional bandwidth for the logging/billing system, plus the cost of the more complex billing software. As a result of this additional complexity, I'm now paying ~$75 per month rather than the ~$50 per month I used pay...but at least I'm not paying for e-mails from those accursed spammers!

      --
      MCSE? No, sir...I don't do Windows. Yes, I am an idealist. What's your point?
    10. Re:and DoubleClick by ILongForDarkness · · Score: 1
      Agreed billing gets complicated. For emails though, couldn't they just query the mail server for a break down of the total messages from each server and bill that way? The load will be all local to the ISP datacenter. The individual user will have a locally hosted account. Spoofing aside, a scheme were at the end of the month, corporate senders of mail get a bill saying you sent 5M messages to or mail server, pay up would be fair.

      As for SSH in a way you already might get penalized by the ISP. A lot of companies are packet shaping the network, and just assume that encrypted traffic is being used to mask the fact that it is a torrent connection. I have 6M cable service. If I VPN into work, with a dedicated server for my connection, all of a sudden I'm down to about 200k/s even from websites. Shut the VPN down, back up to full speed. So your not paying for bandwidth your not using, your just unable to use bandwidth that you are paying for ;)

    11. Re:and DoubleClick by ragefan · · Score: 1

      Possibly, but there is a fundamental difference in the situations. The user requested the data from Google, so there ISP fees apply for the bandwidth. How so? I have never, ever requested Google's Ads when I'm looking at a website, yet I'm inundated with them at every turn. In a fundamental way, push ads are no different than spamming, but, for some reason, they are considered more "acceptable" to the populous. Yes, you requested the ads when you chose to visit the website containing them. The owner of the website wanted the Google Ads on her site and therefore you get them because she wanted you to receive the ads. Its not like the googlebots are hacking sites and inserting ads into pages as they are spidering. If you don't want to see Google ads, you can frequent sites that do not have them.

      With email, you receive spam regardless of asking for it.
  12. And Spamhaus should worry about this how, exactly? by Anonymous Coward · · Score: 0

    Spamhaus are a UK company.

    More and more, noone wants to do business with the US, or travel there as a tourist.

    So why should we care if some far away country wants to claim we owe them some money? Let them come to Europe and say that!

  13. e360 Insight should sue an ISP... by Kazoo+the+Clown · · Score: 2, Interesting

    The suit was mistargeted. Spamhaus doesn't force anyone to use it. It is the ISPs that impose it on email accounts, not Spamhaus, and consequently, THEY should be liable if they do not allow their users to disable such blocking. Use of Spamhaus contributes to email unreliability and should not be imposed by ISP services. An email account carries with it some expectation of usability, which IMHO cannot be simply TOS'ed away in the fine print. Email is unreliable enough without blacklist (or for that matter, even greylist) techniques being applied by lazy ISPs who are looking for a brainless way to reduce their email traffic load. Either ISPs are a common carrier or they are not, the imposition of blocking techniques should carry along with it some responsibilities for its failures.

    1. Re:e360 Insight should sue an ISP... by Phroggy · · Score: 1
      My understanding is that they're not suing Spamhaus for blocking their mail, they're suing Spamhaus for falsely labeling them with "known professional spam operations that have been terminated by a minimum of 3 Internet Service Providers for spam offenses." The plantiff claims that this isn't true, that they're not a spam organization, and that they've never been terminated by any ISP for spam offenses. Plaintiff further claims that being falsely labeled as such by the defendant has damaged Plaintiff's reputation and cost them business.

      Use of Spamhaus contributes to email unreliability and should not be imposed by ISP services. Obviously you don't run a mail server, and have no idea how much spam is being blocked for you. If your e-mail wasn't being filtered, you would either stop using it, or desperately try to find a way to filter it.

      Email is unreliable enough without blacklist (or for that matter, even greylist) techniques being applied by lazy ISPs who are looking for a brainless way to reduce their email traffic load. What would you suggest - that mail administrators employ a team of trained experts to sift through thousands upon thousands of messages every day, manually identifying what is spam and what is not?

      I run a very small mail server at home, just for me and family and friends. This isn't for an ISP or anything, this is just for personal use. Do you have any idea how much spam I block?

      Just on this one small server, in one week, around 10,000 SMTP connections are rejected based on DNS-based IP blacklists (these include blacklists for entire countries, such as Korea and China). Another 2,000 or so are rejected based on various other criteria I've come up with, such as what the reverse DNS hostname looks like (I've put together a list of patterns to match against), or who the envelope sender is, or even the recipient list. Once a message makes it through all of that, it is accepted. Of the accepted messages, around 50-100 are blocked because ClamAV identifies them as known phishing attempts or viruses. Finally, the messages are analyzed with SpamAssassin, which assigns a score to each message (using several rules I've written myself, as well as rules I've selected from the SpamAssassin Rules Emporium). Messages with a score of 5 or higher are quarantined for review. That's about 3,000 messages, nearly all of which are spam.

      If we assume that two thirds of the refused connections are just attempts to re-send the same message (despite the fact that the connections are rejected with a 5.x.x code which indicates a permanent failure), we get a conservative total of 7,000 spams per week, or 1,000 per day. Just on my little server I use for my friends and family.

      Now imagine a large ISP with 100,000+ customers. If they can't effectively block hundreds of spams per customer per day, their customers will go elsewhere, or just stop using e-mail altogether.
      --
      $x='S24;r)>63/* h@<5+oZ)32"5cz';$me='phroggy'x$];
      $x=~y+ -xz+\0-Tx+;print$_^chop$me for split'',$x;
    2. Re:e360 Insight should sue an ISP... by Kazoo+the+Clown · · Score: 1

      Obviously you don't run a mail server, and have no idea how much spam is being blocked for you. If your e-mail wasn't being filtered, you would either stop using it, or desperately try to find a way to filter it.

      I have an unfiltered account that I manage Spambayes to filter it. Using that, I have full access to its results, can tune it as I like and can recover any messages that have been misfiltered. So far it has not yet misidentified legit email as spam, and I only get a couple of spam messages a day that slip through. I've had the email account for years, and it's apparently made it to plenty of spam mailing lists. Before I went to Spambayes I had a complex procmail filter that I finally got tired of adjusting-- but the point is I have *control* over it and I can check and recover when legit emails are miscategorized.

      What would you suggest - that mail administrators employ a team of trained experts to sift through thousands upon thousands of messages every day, manually identifying what is spam and what is not?

      No, simply that they leave it in the control of their users-- provide a choice of filtering options but do not impose any. If a users chooses to use Spamhaus, then great, but I've seen many services that a) don't give users a choice, and 2) don't provide access to the filtered messages. I've also seen accounts that attempt to use draconian measures of eliminating all mails that come from certain types of sending systems-- deemed to be "rogue" because they may not be configured to follow the latest "rules" of sending mail (and thereby eliminate a lot of legit emails from many systems in the process). The accounts quickly become unusable when about 1/4 to 1/2 of their incoming emails are bounced or filtered and no indication of this action is given to the mailbox owner that incoming messages have been rejected-- typically it is discovered when senders complain about no response or bounce messages.

      The point is filtering must be a feature that can be completely monitored by the users-- an optional feature and a record of every filtered message must be available. I don't find filtering "for the users own good," or whining about the huge volume of SPAM in the world, to be particularly compelling excuses for introducing additional unreliability in email transmission.

      I believe, and sincerely hope that it is merely a matter of time until a critically important email gets misrecognized as SPAM or as originating from a "rogue" service by an ISP who did NOT provide the feature optionally to their users, and is eventually discovered by a user who then files a lawsuit over it. Common carriers should not have the ability to invisibly and/or arbitrarily filter communications to its customers, especially when they do a lousy job of it (as IMHO, automated blacklists & greylists generally do).

    3. Re:e360 Insight should sue an ISP... by Boogaroo · · Score: 1

      Either ISPs are a common carrier or they are not, the imposition of blocking techniques should carry along with it some responsibilities for its failures.

      Repeat after me, ISPs are not common carriers. They are data services. They don't want to be common carriers.
      There are many reasons they don't want to be common carriers, but the most often stated is because they would have to share the lines with the competition. Cable companies don't want to share and neither do the telcos(but the telcos are stuck with it already).
  14. Sort of by www.sorehands.com · · Score: 4, Informative

    Spamshaus came into Court and filed an answer that in part said, You didn't serve properly and you have no jurisidiction. Then they said, we are not going to play this game, we want to withdraw our answer.

    If you don't answer at all, a default is entered. This is what happened.

  15. Huge gift by Spazmania · · Score: 1

    Whether e360 is now a spammer is not a fact determined by the default judgment. The fact determined by the judgment is that e360 was not a spammer when Spamhaus so identified it on the date of the action giving rise to the complaint.

    This is a HUGE gift from the appeals court.

    --
    Moderating "-1, Disagree" is simple censorship. Have the guts to post your opinion.
    1. Re:Huge gift by seebs · · Score: 1

      Yes, because spamhaus has been accumulating evidence ever since, so at this point, they can list e360 forever. :)

      --
      My blog: http://www.seebs.net/log/ --- My iPhone/iPad app: http://www.seebs.net/seebsfrac/
  16. Linhardt is in trouble now. by www.sorehands.com · · Score: 4, Interesting

    Though the default judgment still stands, the trial court judge will have to look harder at any injunction and money damages -- not take Linhardt's word for it.

    The reason for this is my case against him, at http://www.barbieslapp.com/spam/e360/timeline.htm , because in my case, I argued (and lost) personal juridiction of Linhardt, in part because he said (and the court believed it) that he had no business in California. I pointed out in his affadavit in the Spamhaus where he said "e360 and I lost contracts..." and "e60 and I lost business opportunities.." and that of the 7 companies listed, 4 are in California, he explained it away by saying that he really meant that when he said, e360 and I he meant e360 and I in my role as president. If you don't suffer harm personally, you have no standing to bring a lawsuit. I filed a motion for reconsideration, on Linhardt's personal jurisdiction, in part based on this.

    Spamhaus's lawyers are aware of this.

  17. One step ahead of the shoe-shine... by edittard · · Score: 1

    Its like slander or liable
    # Its like word's you never read in the Biable #
    --
    At the bottom of the /. main page it says 'Yesterday's News'. Well they got that right.
  18. Would this be evil/wrong? by Anonymous Coward · · Score: 2, Funny

    Okay, here's my idea to reduce spam:

    1) Send a massive spam campaign selling pharmaceuticals (viagra, weight loss, zoloft, hair regrowth, you name it)
    2) When the orders come in, send out authentic-looking prescription medication, but instead of medicine the pills are made of fast-acting poison.
    3) Thousands of people who are stupid enough to actually respond to spam, buy medication from spammers, and ingest said medication, are killed.
    4) Massive media coverage of the event makes spamming seem "dangerous" to the average person, hence reducing response rates to future spam.
    5) I make a tidy profit cleaning the gene pool.

    So, where's the downside?

    1. Re:Would this be evil/wrong? by SpamIsLame · · Score: 2, Informative

      2) When the orders come in, send out authentic-looking prescription medication, but instead of medicine the pills are made of fast-acting poison.

      This is unfortunately already happening:

      Vancouver Sun: Online drugs can prove deadly: coroner

      Not a joke: real people are dying from these scumbags.

      There are also several mentions of death via overdose or fake prescriptions containing harmful particles in the recent court documents released on the Chris "Rizler" Smith conviction as well:

      http://spamsuite.com/node/195

      They definitely are killing people, it's just not publicized very often, if at all.

      The downside you speak of is lack of any interest on the part of the media in exposing these (mostly Russian) criminals for the scum that they are. They'll raise the issue of allofmp3.com violating copyright as a barrier to Russia entering the WTO, but not this. I don't understand why.

      SiL
      --
      -- SiL / IKS / concerned citizen
    2. Re:Would this be evil/wrong? by Anonymous Coward · · Score: 0

      I can certainly think of one thing that would elevate this issue in the minds of the public, the government, and the mainstream media: a terror plot. If a bunch of extremists were to carry out this plot, kill a few dozen people, and then release one of those charming "Death to America" videos claiming responsibility, the US government would step into to tackle spam within days, not weeks.

    3. Re:Would this be evil/wrong? by UbuntuDupe · · Score: 1

      The downside? Well, in case anyone's still reading:

      Your post advocates a

      ( ) technical ( ) legislative ( ) market-based (x) vigilante

      approach to fighting spam. Your idea will not work. Here is why it won't work. (One or more of the following may apply to your particular idea, and it may have other flaws which used to vary from state to state before a bad federal law was passed.)

      ( ) Spammers can easily use it to harvest email addresses
      ( ) Mailing lists and other legitimate email uses would be affected
      ( ) No one will be able to find the guy or collect the money
      ( ) It is defenseless against brute force attacks
      ( ) It will stop spam for two weeks and then we'll be stuck with it
      ( ) Users of email will not put up with it
      ( ) Microsoft will not put up with it
      (x) The police will not put up with it
      ( ) Requires too much cooperation from spammers
      ( ) Requires immediate total cooperation from everybody at once
      ( ) Many email users cannot afford to lose business or alienate potential employers
      ( ) Spammers don't care about invalid addresses in their lists
      ( ) Anyone could anonymously destroy anyone else's career or business

      Specifically, your plan fails to account for

      (x) Laws expressly prohibiting it
      ( ) Lack of centrally controlling authority for email
      ( ) Open relays in foreign countries
      ( ) Ease of searching tiny alphanumeric address space of all email addresses
      ( ) Asshats
      ( ) Jurisdictional problems
      ( ) Unpopularity of weird new taxes
      ( ) Public reluctance to accept weird new forms of money
      ( ) Huge existing software investment in SMTP
      ( ) Susceptibility of protocols other than SMTP to attack
      ( ) Willingness of users to install OS patches received by email
      (x) Armies of worm riddled broadband-connected Windows boxes
      ( ) Eternal arms race involved in all filtering approaches
      (x) Extreme profitability of spam
      ( ) Joe jobs and/or identity theft
      ( ) Technically illiterate politicians
      ( ) Extreme stupidity on the part of people who do business with spammers
      ( ) Dishonesty on the part of spammers themselves
      ( ) Bandwidth costs that are unaffected by client filtering
      ( ) Outlook

      and the following philosophical objections may also apply:

      ( ) Ideas similar to yours are easy to come up with, yet none have ever
      been shown practical
      ( ) Any scheme based on opt-out is unacceptable
      ( ) SMTP headers should not be the subject of legislation
      ( ) Blacklists suck
      ( ) Whitelists suck
      ( ) We should be able to talk about Viagra without being censored
      (x) Countermeasures should not involve wire fraud or credit card fraud
      (x) Countermeasures should not involve sabotage of public networks
      ( ) Countermeasures must work if phased in gradually
      ( ) Sending email should be free
      ( ) Why should we have to trust you and your servers?
      ( ) Incompatiblity with open source or open source licenses
      ( ) Feel-good measures do nothing to solve the problem
      ( ) Temporary/one-time email addresses are cumbersome
      ( ) I don't want the government reading my email
      (x) Killing them that way is not slow and painful enough

      Furthermore, this is what I think about you:

      (x) Sorry dude, but I don't think it would work.
      ( ) This is a stupid idea, and you're a stupid person for suggesting it.
      ( ) Nice try, assh0le! I'm going to find out where you live and burn your
      house down!

  19. They can't. by www.sorehands.com · · Score: 1

    If they sue an ISP in the US, the ISP probably would show up. Linhardt only sues people he thinks will default. When he sued several NANAE participants, including me, he dismissed the case (a 2nd time) when the judge was about to rule on two motion to dismiss for lack of jurisidction. Mark Ferguson (www.whew.com) included documentation regarding Linhardt creating fake signup documents.

    If an ISP was sued, both CAN-SPAM and the CDA gives immunity to the ISP for filtering and blocking. See White Buffalo Ventures, LLC v. University of Texas at Austin (5th Cir. 2005) http://www.spamlaws.com/cases/whitebuffalo2.shtml

  20. Gotta love this judge by Mathinker · · Score: 2, Interesting

    I skimmed the ruling, and he really goes through logical contortions to vacate the injunction, while having to accept that everything that e360 claimed was factual, because of the egregious legal errors that Spamhaus made.

    He really had to work hard to "do the right thing".

  21. Satisfied customer by OrangeTide · · Score: 1

    I am satisfied with blocking e360. I don't care if it hurts their business, because they shouldn't be sending me or any of my users emails. Spamhaus provided a means to ensure that we don't get such emails.

    I think Spamhaus could have avoided the issues they are dealing with now by not labeling spammers as spammers, and came up with a more politically correct term that is legally bulletproof.

    --
    “Common sense is not so common.” — Voltaire
    1. Re:Satisfied customer by nuzak · · Score: 1
      I think Spamhaus could have avoided the issues they are dealing with now by not labeling spammers as spammers, and came up with a more politically correct term that is legally bulletproof.

      David Linhardt, DBA e360, is a complete out-and-out spammer -- Spamhaus and others have copious documented proof of this fact. This is not a marketer suing over an erroneous listing, this is a clear-cut "sue to spam" tactic. If we're looking for other terms to describe Linhardt, feel free to pick one or more of these:

      • Liar
      • Con man
      • Vexatious Litigant
      • Coward
      • Perjurer


      --
      Done with slashdot, done with nerds, getting a life.
    2. Re:Satisfied customer by asuffield · · Score: 2, Informative

      I think Spamhaus could have avoided the issues they are dealing with now by not labeling spammers as spammers, and came up with a more politically correct term that is legally bulletproof.


      Spamhaus are not in any trouble because of what name they used, or even what they listed. They're in "trouble" on a technicality, they messed up their claim that this court has no jurisdiction over them (which it doesn't; they are not a US company and have no holdings or business in the US, so a US court can't do a damn thing to them). No trial has been held on the facts of the case. It's not real trouble because the court really can't do anything: regardless of what judgement is made against them, they don't have to pay or comply in any way, and that'll be the end of it. You can't extradite a company, the court can't enforce judgement against assets that are located on foreign soil, and in the UK (where Spamhaus really are) is it not illegal to ignore the proclamations of a foreign court.
    3. Re:Satisfied customer by OrangeTide · · Score: 1

      you and I know what e360 is, but calling someone a huckster forces you to prove that to be a fact in court. If you use more gentle or more vague terms, then the bar is set much lower and makes the court cases much easier to win.

      --
      “Common sense is not so common.” — Voltaire
    4. Re:Satisfied customer by OrangeTide · · Score: 1

      They can be blocked from continuing to do business in that jurisdiction. Not that it is enforceable in this age of the Internet.

      --
      “Common sense is not so common.” — Voltaire
    5. Re:Satisfied customer by asuffield · · Score: 3, Informative

      They can be blocked from continuing to do business in that jurisdiction. Not that it is enforceable in this age of the Internet.


      As a donation-funded non-profit organisation based in the UK and Switzerland, they don't do business in the US at present, never have, and are not particularly likely to do so in the future. They don't even have a tax-exempt status in the US. A US court cannot prohibit US citizens from donating to them, nor can they confiscate those donations. There really isn't anything that a US court can do to them.
  22. The downside... by Anonymous Coward · · Score: 0, Insightful

    So, where's the downside?
     
    ...God would punish you for killing people. So would the criminal justice system.

    God still might even punish you just for thinking up such wicked crap.
    Jesus said that someone who commits murder in their heart or wishes death to someone is no different than someone who actually commits the real thing.

    1. Re:The downside... by Anonymous Coward · · Score: 0

      What if wish death to Jesus in my heart?

  23. One win for the good guys. by Anonymous Coward · · Score: 1, Interesting

    This is no worst than having Megan Law websites showing sexual offenders in the community. I remember when the Megan law website first came and an sexual offender sue that this infringed upon his rights but the courts showed that greater protection of general public is more important and one person rights. I hate to say that most sexual offenders re-offended after they are released. I say this is correct judgment. Spammers are no worst, in my opinion, than these sexual offenders and these people should be "blacklisted" somewhere. I don't need to subscribe to spamhaus and I don't need to look at the Megan Law websites but this information is open to those who need it which I think is important. Spamhaus and other blacklisting services should be able to blacklist true spammers and also allow people that have incorrectly placed on there list to be removed within reason.
    However now with botnets this point is getting mute since spammers are taking over legitimate systems to send out there junk in their stead so legitimate system are being caught in this trap of being blacklisted instead of the real spammers. The best way to stop this is get the spammers and put them in a non-networked prison and give back all of the money they stole so they are truly punished for what they have done to all of us.
    While I'm dreaming would like to have visit the Playboy Mansion....

    1. Re:One win for the good guys. by Anonymous Coward · · Score: 0

      ARGH!
      I hate having to post , but damn dude, at least get facts instead of "I feel this is right" guesses on things like this.
      http://en.wikipedia.org/wiki/Sex_offender#Recidivi sm_rates
      Sex offenders are NOT likely to re-offend. Only about %13 do.

  24. Wouldn't work. by jimicus · · Score: 2, Funny

    Germany, IIRC, still has food purity laws. You can't sell a product as "beer" unless its only ingredients are water, yeast, hops, malt and barley. Sausages must be 100% meat from a named part of the animal (and the animal should not have been named "Fido").

    Spam, I suspect, would fall under the category of "cheese".

  25. So what? by Pig+Hogger · · Score: 1
    So what? This is just fucking bullshit, because Spamhaus is based in Great Britain, where the United States courts do not reach. It's just amazing that the judge even wasted neurons in handing-down judgment in that case.

    You can expect Spamhaus to keep listing Lindtard's e360 spam-sewer ad vitam æternam.

    1. Re:So what? by Anonymous Coward · · Score: 0

      So, according to your logic, MS should tell the EU to go fuck off with all their sanctions, right? After all, they're in the US.

    2. Re:So what? by Anonymous Coward · · Score: 0

      >So, according to your logic, MS should tell the EU to go fuck off with all their sanctions, right? After all, they're in the US.

      MS *ARE* in Europe... MicroSoft Europe has offices in every European country and is headquartered in Paris. Spamhaus has no office in the US at all. It's clear therefore that Spamhaus can (and certainly will) flip the spammer and the insane judge a birdy if he hands down another order to them.