Virginia Supreme Court Strikes Down Anti-Spam Law
Skater writes "The Washington Post is reporting that the Virginia Supreme Court has struck down the anti-spam law that was used to convict spammer Jeremy James, on the grounds that the ability to be anonymous was more important than the problem of spam. Strangely, the same court only a few months ago upheld the law. 'The court noted that "were the 'Federalist Papers' just being published today via e-mail, that transmission by Publius would violate the [current Virginia] statute." The court suggested that the law does not limit its restrictions on spam to commercial or fraudulent e-mail, or to unprotected speech such as pornography or defamation. And when the state suggested that the court merely tailor a restriction to the law within its opinion, the court declined.'"
I'm going to send him some spam... err, I mean... anonymous speech. The first amendment regularly allows for the limitation of commercial speech.
If 'Publius' spammed my inbox with the Federalist Papers I'd want the asshole's account yanked as much as the latest grow yer tool spam. Spam is unsolicited broadcast mail, period. Zero tolerance.
The correct way to publish would be for Hamilton & friends to open a blog under the Publius pseudonym.
Democrat delenda est
I like it fried in Raman pride noodles.
If Publius sent the Federalist Papers via email to hundreds of thousands of people, it would BE spam. The Federalist papers were items that people VOLUNTARILY sought out - they weren't shoved into everyones mailboxes and under their door thresholds. If they were, they would have been ignored and thrown away just like junk mail is today.
Political freedom of expression is protected; what isn't protected is having ANYTHING shoved down my throat using my own resources.
"As God is my witness, I thought turkeys could fly." A. Carlson
I guess the Judges really got a use out of those Viagra e-mails...
Good.. Bad.. I'm the guy with the gun.
Because if you are really anonymous, nobody will know you exist and therefore they can't send you spam. Problem solved!
The dangers of knowledge trigger emotional distress in human beings.
Spam and junkmail generate too much tax revenue for the governments to ever actually do away with it.
I would not be surprised if we see companies trying to take on the do-not-call list next.
The spammers and phone harassers don't give two fucks about the massive externalities their business models create. It's time to force them to be considered, at which point it may well become clear that the business models themselves aren't viable.
That or drag the motherfuckers into the streets and shoot them.
No. That is wrong. You can be anonymous without spoofing IP addresses or faking domain names.
Correct your usage of "anonymous" first and then I might agree with you.
Bullshit. You still don't understand "anonymous".
And here we get to a fundamental question about what we want the Net to be. The court was entirely right to balk at deciding this for us.
We can have the right to communicate anonymously over the Net. Or we can have the right not to be contacted by anonymous people. We can't have both.
DRM: Terminator crops for your mind!
The only plausible explanation for this ridiculous judgment is maybe that many anti-spam software writers work out of Virginia. The State doesn't want to lose revenue by letting these poor souls go out of business.
slashdot rocks
So the law just needs to be rewritten so as to tackle things which are basically not free speech because they are fraud. I think the judge missed out a little on the analogy though because if people "subscribed" to the Federalist Papers then they wouldn't be spam even though they were published anonymously.
It is illegal to sell prescription drug without a prescription. Its also illegal to offer drugs to children in most states. Everyone here needs to call their country District attorney and ask them what they are doing about peddling drugs over the internet. It almost election time and some of them are trying to get elected as a state DA so now is the time to get on their case.
The court is right about one thing: the law is too vague. Fix the law, and then there will be no problem with the courts.
but your right to spam everyone with it?!
First Ammendment in action?
Spam is the ideal litmus test for where someone stands on the rights of free speech. It's almost universally objectionable, never warranted, and offensive to just about everyone.
Yet I'm not sure if there's anyone in the ./ crowd who will stick to their free speech principles when such principles inconvenience them personally. Is there anyone here who, upon receiving spam, remarks to themselves, "Ah, yes, free speech is not dead. I'm glad that - although I personally could care less about replica watches or increasing the size of my body parts - that somewhere, someone out there is free to send such materials to my inbox. USA! USA! USA!"
Because it stands to reason that if spammers have no right to send anonymous messages, then neither do you or I. While a lot of people may not like this particular consequence of free speech, it's far more dangerous to do away with the legal protections for anonymous speech.
The society for a thought-free internet welcomes you.
What part of that concerns sending a million unsolicited \/1agr4 messages?
In your world, is it considered okay to use hire a dozen people with bullhorns to spew political rhetoric around someone's house at midnight?
No?
OMG! They're taking away FReedom of SPEech!!!111
No one said that he could not publish whatever he wants.
The problem is his DELIVERY of it to people who do NOT want it.
The rest of the posts missed this entirely. The court was right here too...
And when the state suggested that the court merely tailor a restriction to the law within its opinion, the court declined.
Courts more or less interpret laws and process law breakers. Changes in the law are supposed to come from legislation, not the bench.
http://www.maxineudall.com/2010/02/should-economists-be-sued-for-malpractice.html
Imagine if spammers sent you hundreds of text messages to your cell phone every day. Imagine you do not have unlimited text messaging. Lets say each message costs you $0.10 or so. People would be up in arms (hence why we don't see spammers doing this).
Your free speech ends where my money begins. Using my bandwidth and my energy costs me money, you have no freedom of speech there, it's not a public resource.
Is this true? What exempts it?
"Thanks for all the money you paid to us. We've used it to buy off ISO among other things" -Microsoft
Spoof your domain name/IP address to send soliciting emails - ?
Fail to identify yourself in any meaningful way when sending soliciting mail - perfectly legal.
So - in terms of our ability to cope with technology - our mastery of the internet as a society is somewhere between our understanding of postal mail and the telephone.
Sorry - I know there's a joke in there somewhere, but I'm running on empty. Write your own joke.
The court did the right thing.
I submitted an article back in May about this case.
http://yro.slashdot.org/article.pl?sid=08/05/02/1910219
The court's decision is here in pdf:
http://www.courts.state.va.us/opinions/opnscvwp/1062388.pdf
Spam is bad - personally I use gmail and rarely see spam. But it's hard to write a statute that bans spam and doesn't ban slashdot and the internet in general.
Most of the anti-spam statutes out there are unconstitutional. Yay Va. Off to read the opinion.
above post is informative, flamebait.
Spam? Like that stuff from the 90's?
seriously, who gets spam any more? I use my addr for online shopping from trusted places like newegg, and to get email from friends. Anything risky, use a dropbox. I've been spam free for 10+ years.
ok, a few ppl have to publish their addr on a web page, but 90% of us don't need to get a single spam, ever.
It's a 90's problem. Not worth spending time on.
Is the Court truely so clueless ("were the 'Federalist Papers' just being published today via e-mail, that transmission by Publius would violate the [current Virginia] statute.")?
The Federalist Papers were never forced upon unwanting recipients who had to pay for their receipt, they were made available to those who wanted to read them. There was choice involved.
The Federalist Papers were originally published in newspapers, so there's absolutely no parallel to spam. In modern terms, it would be a better comparison to blogs or websites. That can be done anonymously.
Big FAIL for the Court.
"National Security is the chief cause of national insecurity." - Celine's First Law
So wait, I can send mail anonymously to random people that is commercial in nature. Yet I can't break DRM to play some video files in Linux or OS X, nor make backups. Not to mention that I can't download copyrighted stuff even for non profit use.
So much for Government for the people and by the people.
Taxation is legalized theft, no more, no less.
doesn't mean that you can force your speech upon me. That's what spam does. Even if it's non-commercial, you have no right to send me anonymous email, unless I've specifically said or implied I want such - such as by "opting in" to a list server or publishing my email address on a website with an open invitation to send me email.
"National Security is the chief cause of national insecurity." - Celine's First Law
The First Amendment protects everybody--including spammers.
If I thought our republic was in danger, I'd spam everybody in an attempt to rouse them to protect it. That would be core protected First Amendment political speech. The GOVERNMENT should not be able to stop me--especially since I'd probably be rousing people to oust incumbents. To those who would authorize my government to shut such speech down, I despise what they say, but I would defend their right to say it with my life. But enough of that, I'd only be spamming such idiots out of necessity.
If spam that is core-protected First Amendment speech can be shut down by the government simply because it is shipped out anonymously and in bulk, then something is WAY wrong because the baby (important political speech) is being thrown out with the bathwater (vile spam). Political speech is too important to be trusted to the discretion of our elected officials.
This doesn't preclude laws prohibiting spamming in violation of a "do not spam" list. It doesn't preclude laws barring fraudulent or misleading spamming. It also doesn't prohibit private servers from refusing to store or deliver spam.
Telemarketers, bulk mail distributors, and spammers, suck. But deal with them lawfully--there are legal tools available.
Their First Amendment protection is YOUR First Amendment protection.
You may need a login to read this Washington Post article:
http://www.washingtonpost.com/wp-dyn/content/article/2008/08/18/AR2008081802046.html
I do not block ads. I do block third party scripts.
Actually, I would tell them that it is clear that the American people deserve and desire the right to medicate themselves.
It never suprises how quickly the typical slashdot lefty can be turned into a torches-and-pitchforks fundie when spam is involved. Or anything else they don't like for that matter.
Why is this not seen the same as cellphone spam(telemarketers)?
They cannot legally call, because it would incur a cost to the individual. Given bandwidth caps, each and every spam email takes a bite out of my monthly payment to my ISP.
Anonymous or not, we pay directly out of our pockets to get this crap.
And if some 'spam' caused me to go over my monthly cap (slower service or extra payments), someone gets a kneecapping. Followed by a trial.
For they are legion. And legal.
---- Liquid was a patriot ----
Ok, so if this ass gets away with spam because of this ruling, isn't he potentially still guilty of committing wire fraud? If not for the false crap he was pitching, then because he allegedly forged IP and email addresses?
Why is parent modded 'troll'? His post is on-topic, and makes a important distinction in the last line. Ok, maybe the 'OMG' line is a tad sarcastic, but he is making a point.
Someone please mod him back up.
Why do you believe that it is the only method?
You can nail it to a telephone pole.
You can print it and leave it at bus stops.
People have even nailed things to church doors.
What is it about this subject that makes people turn off their brains?
That's just wrong. Email is NOT publishing. Comparing email to publishing the Federalist Papers is the kind of argument one would expect from a high school debater.
Proverbs 21:19
I'd throw in a first post, but it would just be spam!
How amazed would you be to suddenly find that you just forgot what I wrote and you needed to reread my post.... again.
First Amendment expert Eugene Volokh has a post on this decision over at the Volokh Conspiracy.
This doesn't preclude laws prohibiting spamming in violation of a "do not spam" list. It doesn't preclude laws barring fraudulent or misleading spamming. It also doesn't prohibit private servers from refusing to store or deliver spam.
Telemarketers, bulk mail distributors, and spammers, suck. But deal with them lawfully--there are legal tools available.
Their First Amendment protection is YOUR First Amendment protection.
You have the absolute right to say anything you please. You do not have the right to force me to listen to it. Nor pay for the 'privilege'.
"Volume" as in "number of messages".
Which gets back to my other post. It's not "anonymous" when it is "fraudulent". We can protect anonymity but we should be punishing fraud.
If you're sending email to a spamtrap, it's spam.
If you're sending email to a dozen or so individuals who you have PERSONALLY selected based upon some criteria other than you have their email address, then it is probably allowable under "anonymous".
100,000 messages ... fake domains ... spoofed IP addresses ... I don't care what you're sending, it's spam.
Publius wasn't anonymous. He was only anonymous to THOSE WHO DID NOT KNOW WHO HE WAS.
Someone had to print and distribute the articles Publius wrote.
There is no innate right to be anonymous and carry out vandalism and other crimes. There is an innate right to free speech which should be sufficient to prevent someone from seeking your identity if you are not otherwise committing a crime.
It's easy to ban spam. Just define it without regard to the anonymity issue. I don't want spam from spammers I can identify any more than from anonymous spammers.
It was about time something like this happened. I've tried all the penis enlargement methods I've received in my email until now and nothing worked. I really can't wait to try new stuff because these guys have run out of ideas.
I don't understand the point of a law prohibiting forged headers. DomainKeys/DKIM is a perfectly good technological solution to the problem of forged headers. Yahoo and Gmail both sign their outgoing mail with DK, and within the last few months Yahoo has gotten very aggressive about dropping incoming mail into the bitbucket if it doesn't have a DK signature and isn't coming from a domain that's on their whitelist. People running email servers are just going to have to bite the bullet and implement DK, unless they don't mind not having their users be able to send mail to Yahoo accounts.
But even though DK is rapidly bringing us to the point where forged headers are a thing of the past, that won't do a darn thing to end spam. Spammers can just open an account on Gmail, which is rapidly becoming the world'd biggest wellspring of both internet and usenet spam. The real benefit of DK is not that it ends spam, but that it saves organizations that sign their outgoing mail with DK from being blamed for spam that claims to be from them, but isn't.
So given that forged headers aren't the main problem, and forged headers can be fixed without legislation, I think the bar should be set very high for anyone proposing a legislative attack on forged headers. (But it does seem goofy to me to strike down such a law on free speech grounds. When spammers send me spam, they're using my resources without my permission. That's like putting their soapbox on my lawn instead of on the lawn in front of city hall.)
Find free books.
And to some degree it was dangerously vague. It is not a straw man to be concerned about laws barring anonymity. Plenty of high-level computer policy people have wanted to ban anonymous posting for reasons having nothing to do with spam, or with the cost of transmitting the messages in question. If the reason anonymity were restricted were because of spurious claims anonymous posting helps terrorists, or because politicians didn't like being criticized anonymously, I doubt many here would be defending the law.
Virginia has recently tended to be the kind of place that such technocratic prescriptions, which combine right-wing goals with decidedly non-libertarian means (see also UCITA), take root in the legislature, and I'm glad the court rooted them out.
Another thing to note is that Virginia is not a "blue pencil" state. Contracts in VA cannot be modified by the courts unless there is a clear severability provision which describes what the basic bargaining units of the contract are. Part of the reason for this is that it is for the people who have made the contract, not the court, to decide how the value in the contract balances out when line items are changed. Thus the rule is "when in doubt, throw it out". Whether or not this is the right approach, many states around the country do it this way (and many also don't). This is a law, not a contract, but it is consistent with the "no blue pencil" doctrine for the court to just throw the whole law back to the legislature to fix it rather than trying to rewrite it.
By the way, I'm not a lawyer, I only play one on Slashdot.
Look, I hate spam as much as anyone else, but this conviction needed to be overturned. The law was written very poorly, and could have been interpreted to convict every "Anonymous Coward" here on /. that resides in Virginia.
This is a bad thing , just in case that's not completely obvious.
Should this guy go to jail? Yep. But first, rewrite the law to get it right. Identity theft is and should be illegal. If James sent even one e-mail that misappropriated someone else's e-mail address, then nail him on that charge. If he sent even one e-mail that advertises a business that is fraudulent, then nail him on fraud/conspiracy to commit fraud.
However, the provision in the law that prohibits sending an e-mail anonymously is not and should not be what delineates a legitimate e-mail from a bogus one. If we follow that logic, then any e-mail that doesn't include some narrow variation on first name and last name (first.last@..., firstInitialLastName@...,etc.) could be interpreted as anonymous. This is not a good thing.
MCSE? No, sir...I don't do Windows. Yes, I am an idealist. What's your point?
Why can't email spam be modded up or down (with tags!) instead of just killfiled? Works for slashdot posts, the analogy is clear.
Maybe the answer is smarter (sentient/AI?) systems that truly act as your agent.. The current filtering tools seem quite hit and miss..
They are typically 100% effective for the few hours it takes the spammers to fuzz them.
Spammers have gmail accounts, hotmail accounts, etc. etc. and whenever you put a new "sentient/AI" or any other system in place they just hammer their own accounts until something gets through, then they spam everybody with whatever technique worked.
The amount of effort required to break any anti-spam system (except a few forms of permission based, white-list style ones) will always be many orders of magnitude less than the amount of effort required to build such a system. You really can't win with a filtering strategy as long as spamming remains profitable and reasonably risk-free.
People being the way we are, we will probably continue to fail to make spamming unprofitable so we should focus on increasing the risks. I think the CEOs of corporations that harbor and enable spammer botnets should be flogged, tarred and feathered... are you listening Comcast? Rogers? Cox?
I agree with you. It's just that finer-grained tools can debilitate spammers as effectively as coarse-grained tools.
I see why the court decided as it did. But why not enact a law which applies similar penalties to unprotected commercial speech?
The problem of spam exists on the scale it does because spammers make a profit from the messages they send, and the victims pay most of the costs of processing the email. There is no US constitutional right to freedom of advertising.
So ban commercial spam, and the greater part of the problem can be tackled.
Best of all, if this slimeball carries on spamming, he can get his 9 years in jail after all.
Paul "Say no to feeping creaturism"
Fine-grained tools can be thwarted. One change to the method, and it no longer applies.
As much as I detest and hate spam, I can find nothing wrong with the decision of the Virginia Supreme Court. I have actually read the decision so I do understand what is being said.
First, the statute does not ban all unauthorized use of the mail servers targeted by the defendant, thus the statute in question is not an 'anti-trespass' ordinance as the Commonwealth would claim. This point, they're correct on, and a statute written that way would essentially make ALL unsolicited e-mail sent to someone illegal unless you had prior permission, the same way you can't just cross someone's land without permission. If you post something on Slashdot or on a usenet news article, and I send you a message to ask you a question either because I liked your article or I disagreed with it, as it would stand, that sort of a message violates the statute and would conceivably be chargeable as trespass (or trespass to chattels) we made all unauthorized use of someone's mail server to either be criminal or an action which could be sued over.
Second, the statute does not differentiate between types of messages that have less (or no) protection, such as pure commercial speech, pornography or obscenity, and a message which might be offensive to others but is neither a commercial nor pornographic nor obscene.
On this point, they're correct too. While the Commonwealth is claiming it would not use the law to target non-commercial speech, there's nothing in the law that says it can't. I am thinking of the 'Jesus is Coming' spam that went out a few years ago that was sent by Clarence Thomas (no, it's someone else, not the U.S. Supreme Court Justice). I for one would go after something like that because that's also spam, however then we do have First Amendment issues.
Third, even if fixing the statute to take some e-mail out would stand muster, the court cannot rewrite the statute, that's the legislature's job. The court could conceivably strike portions of the statute to save its constitutionality, it cannot add to the statute or give it a limiting construction; that would mean the judiciary is legislating, something it isn't supposed to do.
Fourth, there's no fraud, because it didn't matter what the sender address was, the mail system would have accepted it whether it was a real address or a bogus one. Fraud requires someone to rely to their detriment on your false information
There's no way to send e-mail anonymously unless you put something false or misleading into the sender address, thus the First Amendment protection on anonymous communications is violated because it prohibits distributing mail with a false header, and that's the only way you can send anonymous mail. (If you say, 'use a remailer' then the remailer can be subpoenaed and their records checked.)
In short, the law comes up short. I don't like the idea of spam but you can't throw the (constitutional) baby out with the (spam) bathwater.
The lessons of history teach us - if they teach us anything - that nobody learns the lessons that history teaches us.
they weren't shoved into everyones mailboxes and under their door thresholds. If they were, they would have been ignored and thrown away just like junk mail is today
Even if they were, they'd just be tossed on the hearth, but the cost would be largely borne by the Federalists.
You have a right to stand on the sidewalk in front of my house saying whatever you want. You don't have a right to come onto my porch, use my paper and pen, and start writing whatever you want under the guise of 'Free Speech', you're consuming my resources and causing me to incur expenses.
Just like when I get an e-mail, I pay for the bandwidth, I pay for the disk space, I pay for those electrons to excite the wires and move the drive heads. But more important than that is my time.
Mass spamming shifts the costs almost entirely to the receiver. What might cost the sender $20 can cost the receivers $200,000. That's why spam is evil.
My God, it's Full of Source!
OUTSIDE_IP=$(dig +short my.ip @outsideip.net)
That little prick should be sent to prison for decades. If YOU did it, they'd lock you up and throw away the key.
Stalin would have agreed with you! Coarse-grained tools are much more effective.
Be interesting if we could add a captcha to the SMTP conversation, server asks a mathematical formula in bc or rpn notation and client has to send an answer back. That will stop spoofed ip packets since the formula will never reach the client sending the spoofed packet and it will not be able to send the answer. Basically a simple form of IPSEC checking that humans could also use when we debug the SMTP.
Just for anti-spoofing and getting the right IP in the packet.
Trying to become famous by taking photos. Visit my homepage please.
Say, we all send what we think of the opinion handed out by the judges of the Virginia supreme court. Some anonymously and some not. Say, using our own words, no clickable links to russian sites. None of the spam filters used by the court would stop these emails. Now with millions of emails clogging up the inboxes of the judges, they would be finding it difficult to find legitimate emails that they need to see for their business. Do you really think they would rule the same way they did after that? I think these judges have been removed from reality and have not personally used the internet much and have a bevy of assistants and secretaries to handle their correspondence. I would not be surprised if these judges get their email printed by their assistants and submitted to them for their perusal along with regular mail. Till these old coots retire and actual people who grew up with the problem of SPAM rise to be the supreme court judges, we would get such stupid rulings.
sed -e 's/Chuck Norris/Rajnikant/g' joke > fact
They have erred in assuming that anonymous speech needs to be able to use fraudulent (forged) return addresses. This is not what the first protects. So, on the face of it, we can strike that one. Next, false return addresses, this too need not be protected as the `registration' for those that can engage in anonymous speech isn't the speakers themselves but rather the person or organization that merely provides part of the pseudonym, there is no requirement that they even handle any part of email routing. This requirement doesn't limit anonymous speech as an unlimited number of such places exist. And an arbitrarily many that are outside the reach of any court in this country, and so true for all other places on earth. Because anyone can obtain such an email address under any naming scheme they want for anonymous speech, they are not limited by the requirement. Likewise, an IP address is a requirement that serves much the same purpose. Just because one needs to have an IP address, doesn't limit free speech, and even if it did, that would just mean that email is unsuitable for that form of free speech.
Balance. There is no balance to the peoples right to not be spammed in this courts ruling. The court needs to recognize the people have a right to not be spammed and to petition the state to help solve the problem for them. The form is reasonable, though it places some inconsequential limits on some anonymous speech. The limits are not consequential, as there is a virtually unlimited number of email provides and not all require proof of identification in order to get an account. In the case the court cites as backing for their ruling, the party that wanted to speak had to register with the government in order to speak anonymously. This is wrong, because if only 5 people register directly with the government and 1 to 5 people spoke, the speech cannot be anonymous at that point as they have a list of 5 people that are registered to speak. And, to enforce the requirement of registration, police can ask a person to prove they are registered. Great. This line of reasoning doesn't apply to the email system, as _any_ register domain can be used to send email. Including domains registered in china or north korea or by the russian mob. Further it doesn't apply as almost 100% of non-fraudulent, non-spam email currently is so registered, with a healthy chunk of that being fairly anonymous.
The internet provides blogs and community sites and many other venues for anonymous speech, the stipulation that any particular place need support anonymous speech is flawed. Each such place, or each such protocol, or site should be free to determine wether or not and in what form, anonymous speech can take. We should be free to require anonymous speech requires the use of a valid email address, or use a valid, registered IP address, or not, as we choose. What we should reject, is that every user of email must register all their email addresses with the government and that all persons that provide email be able to prove who exactly uses a given email address, or that an ISP is required to know exactly which person uses an IP address. Those sorts of restrictions truly limit anonymous speech.
So say we all.
Are you saying that you want the ISPs to monitor and filter traffic?
No, that's exactly the guaranteed-fail strategy they are pursuing.
I want them to use the Internet as designed - identify malefactors (which is trivially easy using their existing equipment) and disconnect them.
ISPs who are too retarded to figure out that this is a huge profit making opportunity (that'd be most of them) should ponder this question: How much would anti-malware vendors pay comcast to have all zombie PCs restricted to a special subnet, where the PC owners would be unable to do anything but visit designated anti-malware sites?
If comcast (for example) eliminated their malicious traffic they'd regain 80% or more of their bandwidth, and they'd have no need to filter anything else.