Slashdot Mirror


12% of E-mail Users Have Responded To Spam

Meshach writes "An article in Ars Technica claims that 12% of internet users have actually responded to spam messages and tried to buy items. Although I find this hard to believe, it does explain why my spam folder is always full." Also in spam news, wjousts links to a Technology Review article about how spammers get your e-mail address, writing "E-mail addresses in comments posted to a website had a high probability of getting spammed, while of the 70 e-mail addresses submitted during registration at various websites, only 4 got spammed."

52 of 268 comments (clear)

  1. That's why... by Anonymous Coward · · Score: 5, Funny

    I'm posting as an anonymous coward, so they don't spam my e-mail address.

    1. Re:That's why... by Anonymous Coward · · Score: 2, Interesting

      ... I have an entire domain with a chatchall... that way i can post under [domainI'mRegistering]@[mydomain.com]. then i know exactly where the spam originated from. what was my most recent verified spammer? my bank X_X

  2. They got my email by Archfeld · · Score: 2, Interesting

    and details regarding wow from this web site. Irony abounds.

    --
    errr....umm...*whooosh* *whoosh* Is this thing on ?
    1. Re:They got my email by amicusNYCL · · Score: 2, Insightful

      That's not irony, that's exactly what the study says:

      E-mail addresses in comments posted to a website had a high probability of getting spammed

      It probably doesn't help that your email address is sitting there in plain text with no obfuscation.

      Myself, on the other hand, I've never received spam from having my email harvested on Slashdot. Why do you think that is?

      --
      "Our two-party system is like a bowl of shit looking at itself in a mirror." - Lewis Black
    2. Re:They got my email by Hyppy · · Score: 2, Insightful

      Why did you choose to display your address publicly if you don't want the public using it to send correspondence?

    3. Re:They got my email by FishWithAHammer · · Score: 2, Interesting

      Actually, Anonymous Coward's user ID is 666.

      No joke. Look it up.

      --
      "You can either have software quality or you can have pointer arithmetic, but you cannot have both at the same time."
    4. Re:They got my email by tattood · · Score: 4, Interesting

      One interesting thing I noticed, is that they didnt talk at all about is normal chain-emails. How many times do you receive an email from a friend with some sort of cute story that has been forwarded 10 times before it reaches you. You have to scroll down past 5 pages of email headers, which conveniently contain every email address of people who have been copied on that email. Eventually, one of those chain emails reaches a spammer, and they now have a couple hundred *validated* email addresses to spam to.

      Thats why when I (on rare occasion) forward an email, I delete all the previous email headers, and BCC everyone on the list so that the people I send the email to don't get their email address added. Of course, my email address is still shown as the source, so if the people I send to don't follow the same behavior as me, then my address gets added to the forward list.

      --
      WTB [sig], PST!!!
  3. Of course people respond... by Heed00 · · Score: 5, Funny

    How else are they going to win the Nigerian lottery? You can't win if you don't enter.

    --
    Thought thinks itself.
    1. Re:Of course people respond... by julesh · · Score: 3, Funny

      How else are they going to win the Nigerian lottery? You can't win if you don't enter.

      Of course you can. I got an email just last week telling me I had won, and I've never entered it...

    2. Re:Of course people respond... by dominious · · Score: 4, Funny

      I don't understand how you believe such crap. I always unsubscribe to those mailing lists..I mean they do give you the option to unsubscribe. Thank god I don't belong to that 12% of idiots!

  4. no kidding? by Em+Emalb · · Score: 5, Insightful

    12%?

    Really? I honestly thought it would be much higher...just basing that off of some of my daily interactions with people. It's a good thing breathing is an involuntary action, cause there are a lot of people out there who'd forget to.

    --
    Sent from your iPad.
    1. Re:no kidding? by clang_jangle · · Score: 3, Insightful

      That's what I though too, 12% seems a bit low. I've observed a lot of users who really can't tell you which stuff in their inbox they actually signed up to recieve versus which are just spam. Half the stuff they sign up to receive looks as shady as spam anyway... I just had a conversation this morning where I tried to teach a user to tell the difference between sales hype and legitimate information. He just couldn't get it, it was too much for him. He constantly forwards me things like "AMAZING NEW DISCOVERY...!!!", asking "what do you think of this, should I order it?".

      --
      Caveat Utilitor
    2. Re:no kidding? by Jason+Earl · · Score: 3, Insightful

      The folks responding to the "enlarge your member" ads didn't want to fess up.

    3. Re:no kidding? by BagOBones · · Score: 2, Funny

      Don't know why but it reminds me of this SNL Skit: Don't Buy Stuff You Can't Afford
      http://consumerist.com/consumer/clips/snl-skit-dont-buy-stuff-you-cant-afford-252491.php

      --
      EA David Gardner -"... but the consumers have proven that actually what they want is fun."
    4. Re:no kidding? by daremonai · · Score: 2, Funny

      You might want to contact Lorena Bobbitt (http://en.wikipedia.org/wiki/Lorena_Bobbitt).

    5. Re:no kidding? by geegel · · Score: 2, Interesting

      I don't know mate. Spam is a numbers' game and the numbers in the study don't add up.

      For a single spam e-mail, the conversion rate sits at about 0.00015%. With millions of e-mails sent, it is still worth it. But from this number to 12% there really is a long way.

      The culprit for the aberration in the study is IMHO the methodology. Basically these people used cold calling (a form of spam in itself) to ask about spamming. Next to the 600 people that actually answered the survey, there are probably thousands more that simply answered with fsck off.

      Junk science at its best.

      --
      right...
  5. Definition of "Spam?" by Hyppy · · Score: 5, Insightful

    The entire premise of this article depends on the definition of "spam." One could mark a legitimate business' unsolicited email as spam, but that doesn't mean that purchasing a product because of the material in one of those emails is newsworthy.

    Nigerian princes in peril are another matter, though.

    1. Re:Definition of "Spam?" by fridaynightsmoke · · Score: 3, Informative

      Do legitimate businesses send unsolicited email? I have never seen one.

      I have, very very often. It seems common in the b2b market in the UK.
      And yes, I am talking about real, honest-to-god legitimate businesses, with reputations; as well as the countless spams from others with differing levels of legitimacy (all the way from slightly dodgy telecoms resellers, through SEOs all the way down to the pill peddlers we all know and 'love').

      --
      This is a substitute for a clever sig that fits within the maximum number of characters.
    2. Re:Definition of "Spam?" by wjousts · · Score: 2, Informative

      Yes, all the time. One of the worst sites I've seen for it is this. It's actually a pretty useful site with some good information and good tools for searching for a specific part, but when you look at any of the parts from a search, they send your e-mail address to that company and that company often spams you.

    3. Re:Definition of "Spam?" by xaxa · · Score: 4, Interesting

      When I chaired a society at university I got loads of spam (my address was listed on the university's website as the contact for the society), and so did the society's email address. Most of them would be asking me to spam everyone in the society with offers for summer "charity" work and so on. I usually replied with this, which scared them off:

      This is a spam.

      Quoting from http://www.ico.gov.uk/what_we_cover/privacy_and_electronic_communications/the_basics.aspx ,----[ Electronic mail ]
      | Electronic mail is emails, SMS (text), picture, video and answer-phone
      | messages. Electronic mail marketing messages should not be sent to
      | individuals without their permission unless all these following criteria
      | are met:
      |
      | 1. The marketer has obtained your details through a sale or negotiations
      | for a sale.
      | 2. The messages are about similar products or services offered by the
      | sender.
      | 3. You were given an opportunity to refuse the marketing when your details
      | were collected and, if you did not refuse, you were given a simple way to
      | opt out in every future communication.
      `----

      You have met none of these criteria. If I receive another message from you I will report your business as sending spam.

  6. Order of the day by Anonymous Coward · · Score: 3, Funny

    Terrify people into compliance!

    "Hey, y'know gramma - I heard answering junk email funds the terrorists." ...

    "Yep, that's right - that email you've got right there advertising cheap knob-expanders? That came straight from Osama bin Laden's laptop, uh huh."

  7. Which sites sell addresses to spammers? by piojo · · Score: 5, Informative

    I would have liked the article to state which sites sell e-mail addresses to spammers. They would certainly deserve it.

    I use unique e-mail addresses for (almost) everything I sign up for, and I've never gotten a spam message from any of those unique accounts. I started getting a lot of spam when I first posted to LKML, which is published online.

    --
    A cat can't teach a dog to bark.
    1. Re:Which sites sell addresses to spammers? by skeeto · · Score: 2, Interesting

      Ditto for me. I've been using that gmail plus-addressing feature for awhile now. At least a year. Since then, every site I have gone to either got a custom address, or a separate throwaway or fake address if their address validator was awful enough to reject addresses with +'s in them (probably half of them). Some occasional spot checking on my spam filter has shown no e-mail arriving to any plus addresses.

    2. Re:Which sites sell addresses to spammers? by piojo · · Score: 2, Informative

      Some occasional spot checking on my spam filter has shown no e-mail arriving to any plus addresses.

      This may not be completely surefire, because spammers might strip out the +stuff at the end of the address. In practice, it should work for now, because according to research like this article, spammers are lazy.

      If in the future your main e-mail address starts to get spam, you could set your account up so that "address+real@gmail.com" goes to your inbox and anything addressed to just address@gmail.com is assumed to be spam. (Obviously, you only give out example+real@gmail.com to those you trust.)

      --
      A cat can't teach a dog to bark.
    3. Re:Which sites sell addresses to spammers? by u38cg · · Score: 2, Informative

      For sites that reject +-address email addresses through gmail, use dots. It's not quite as clear, but if you don't have to do it very often it works. Gmail sees u38cg@gmail.com and u.38.cg@gmail.com as the same address.

      --
      [FUCK BETA]
  8. No suprises. Some problems. by w0mprat · · Score: 4, Insightful

    The data may be skewed: users may consider offers from genuine mailing lists 'spam' whether they've signed up to it intentionally or not, when completing a survey. This more relevant stuff is more likely click-worthy. The survey doesn't necessarily make this distinction and account for it.

    Otherwise, it is somewhat believable as many individuals new to the internet learn many lessons the hard way.

    Mind you, "but another 13 percent said they simply had no idea why they did it; they just did." explains why I still receive 'send this to 10 people or you will has bad luck' from otherwise intelligent and educated people.

    --
    After logging in slashdot still does not take you back to the page you were on. It's been that way for 20 years.
  9. My Penis Enlargement Pills Worked Great!!! by loose+electron · · Score: 4, Funny

    Hey! I got a great deal on penis enlargement, breast enhancement, and this greasy stuff you rub all over your body to increase your sexual desirability scent! Works great! Now if I could only get the dog to stop sniffing me, all the women would be barking at my door!

    Sad to say, one of the places that I buy "generic viagra" from would not return my money when it did not work as well as the "super size me" products... I will just have to wait for my money from the deal I made in Nigeria to counter that loss.

    --
    www.effectiveelectrons.com "chips that work" Analog, RF, Mixed Signal
  10. Comment removed by account_deleted · · Score: 5, Funny

    Comment removed based on user account deletion

  11. Re:Misleading by Overzeetop · · Score: 3, Funny

    That was my thought too. People responding to 12% of all spam is quite a bit different than 12% of people having every responded to a spam email. A 12% response rate for an email marketing campaign is enough to make any marketers nipples hard enough to cut glass.

    --
    Is it just my observation, or are there way too many stupid people in the world?
  12. Lately... by jciarlan · · Score: 5, Interesting
    Every so often I go through my spam folder, it's pretty funny. I've noticed lately that a lot of them don't even have links, it's like they're just trying to annoy us. For example, I received this yesterday:

    Forge your huge love sword

    and that was it. No link, no pictures. My theory is I have a really good friend who goes through a whole lot of effort just to make me smile. Either that, or it's an insult on my manhood designed to make me feel inadequate.

    1. Re:Lately... by CorporateSuit · · Score: 4, Funny

      Well... did you end up forging your huge love sword or not?

      --
      I am the richest astronaut ever to win the superbowl.
    2. Re:Lately... by Dragonslicer · · Score: 3, Insightful

      If I remember correctly, the purpose of those emails is to try to confuse Bayesian filters.

    3. Re:Lately... by Phroggy · · Score: 3, Insightful

      Every so often I go through my spam folder, it's pretty funny. I've noticed lately that a lot of them don't even have links, it's like they're just trying to annoy us. For example, I received this yesterday:

      Forge your huge love sword

      and that was it. No link, no pictures. My theory is I have a really good friend who goes through a whole lot of effort just to make me smile. Either that, or it's an insult on my manhood designed to make me feel inadequate.

      A lot of spammers aren't very smart. They use pre-built off-the-shelf tools, and sometimes they click the wrong button and end up accidentally sending a mal-formed message to three million people by mistake. Sometimes there's a bug in the software, or it's just misconfigured. It doesn't really matter to them - after all, it doesn't cost them anything to send the spam, because they're stealing resources from others.

      --
      $x='S24;r)>63/* h@<5+oZ)32"5cz';$me='phroggy'x$];
      $x=~y+ -xz+\0-Tx+;print$_^chop$me for split'',$x;
    4. Re:Lately... by julesh · · Score: 2, Insightful

      For example, I received this yesterday:

              Forge your huge love sword

      and that was it. No link, no pictures

      This is because many spammers are totally incompetent. Other symptoms:

      * Messages with subject line '$SUBJECT'.
      * Sender names made up from non-name words joined together 'Vivacious F. Baking'

    5. Re:Lately... by redJag · · Score: 3, Insightful

      Or they are looking for hits on transparent GIFs to determine the quality of their mailing list.. ;)

  13. My email address has only been on Slashdot by Neil+Blender · · Score: 5, Interesting

    I got this username and email as an experiment. I have only posted it publicly on Slashdot and have not used it for anything else. I don't even check it. I just checked. I have 5,000 messages in my spam folder. And gmail deletes them after a month. So posting my email publicly on Slashdot only is resulting in 5,000 spams a month.

  14. Sources by Phroggy · · Score: 2, Interesting

    What disturbs me isn't the spam that comes from botnets of infected Windows PCs on residential broadband connections. I expect that. What bothers me is the spam that comes from dedicated servers colocated in actual datacenters, with static IP addresses, domain names, reverse DNS properly configured, and valid SPF records.

    For example, these are apparently all owned by one spammer, that I've received spam from in the past few days:
    mx5.mit9zinger.com
    mx2.finogento.com
    mx1.finogento.com
    mx4.pinchmir.com
    mx1.travel1soe.com
    mx2.kintopuzi.com
    mx1.petchin.com
    mx1.abaganawena.com
    mx1.tineraset.com
    mx2.kimbolimbo.com
    mx2.greenzetrain.com

    From a technical standpoint, everything looks legitimate. Because they offer an apparently-working opt-out mechanism (I'm sure it really just marks your address as "confirmed", but you'd have to come up with a way to prove that) and they're not spoofing any headers, they're probably not in violation of the CAN-SPAM Act.

    --
    $x='S24;r)>63/* h@<5+oZ)32"5cz';$me='phroggy'x$];
    $x=~y+ -xz+\0-Tx+;print$_^chop$me for split'',$x;
  15. Want Spam? Use Yahoo Groups by JimMcc · · Score: 2, Interesting

    I have two email addresses on yahoo.com. One is a jumble of letters and numbers which I use to for access to things I have no desire to ever see again. Dump things like "we'll email you the download link". That email address, which has been around for 7+ years gets the odd spam here and there.

    The other yahoo.com email address is used only to enroll in a number of Yahoo groups and never given out or used for email. (I'm a ham and for whatever reason the ham community has fallen in love with Yahoo groups.) This second email address receives between 100-200 spams per week.

    Keeping in mind that the second email address has never been given out, where did the spammers get my email address from? I can only assume that either Yahoo sells email addresses used in groups for "targeted advertising" or that they have a huge security hole through which the leak Yahoo group email address.

    In any case... What spam? Use Yahoo Groups!

  16. Should we be surprised by this for some reason? by damn_registrars · · Score: 2, Insightful

    We've known for quite some time that spammers pick up email addresses by trolling the internet. With spam so insanely cheap - and highly profitable - to send out, there is no incentive for the spammers to select for email addresses that are known to be read regularly (or ever).

    If they can harvest 1,000 new addresses in a few minutes of bot-crawling the internet, versus a few dozen by buying them from someone with a form somewhere, the choice is pretty simple.

    The take-home message of this is something we've known for quite some time - don't let your email address out on public pages.

    --
    Damn_registrars has no butt-hole. Damn_registrars has no use for a butt-hole.
  17. Comment removed by account_deleted · · Score: 3, Informative

    Comment removed based on user account deletion

  18. Fail! 12% of those who respond to phone polls.... by Anonymous Coward · · Score: 2, Interesting

    The sample is skewed.

    Responding to spam and responding to phone/internet polls are likely highly correlated traits, thus this sample is not of the general population, but of people who like responding to things.

  19. How come nobody shoots spammers? by tekrat · · Score: 2, Interesting

    You would figure with all the crazies on the internet (that we MUST protect our children from), that sooner or later, some hot-head with a gun and enough technical know-how to track down a spammer would start a spammer hunt and start mowing them down.

    It's ONLY when we have a spammer-serial-killer that spammers will stop. Suing them doesn't work, there's a guy out there that makes a living just suing spammers in small claims court. Laws and even government crackdowns don't work. It will only be when spammers live in fear for their lives and the lives of their families that they will consider another line of work.

    What's annoying is that they've gotten so adept at hiding their identities, they are probably the only people on the internet who don't get spam, furthermore, they are probably the least likely to be targeted by the govt-nannyism of the web.

    All in the name of selling snake oil. PT Barnum wouldn't believe how true his law is or that it's grown by a factor of a 1000...

    --
    If telephones are outlawed, then only outlaws will have telephones.
    1. Re:How come nobody shoots spammers? by BubbaDoom · · Score: 2, Insightful

      If we can shoot the spammers, can we then go after the dolts on tv selling snake oil as well?

      I'd go after the guys who sell:
      Get Rich in Real-Estate books
      Medical Crap that people don't want you to know books
      Spray this crap in your dog dish to make them feel better
      FreeCreditReport.com
      FinallyFast.com
      Get-out-of-debt
      Send us your gold
      Class-action-law-suit for some health condition
      and any kind of exercise equipment.

  20. Re:In other news... by mcgrew · · Score: 2, Insightful

    Have you seen the bell curve? In this case average IS median.

  21. LinkedIn sold my email address by oman_ · · Score: 5, Informative

    A friend of mine invited me to linkedin by using my personal email address and lo and behold I started getting a ton of spam relating to owning a business.

    Never EVER EVER type your (or a friends') email address in to a website no matter how reputable they seem.
    They will change their privacy policy the second they decide to make a buck.

    And I hope the linkedin people go to hell because now that email address is about useless.

    --
    Rats would be more funny if they could fart.
  22. Article and summary are wrong by Phylarr · · Score: 2, Interesting

    If you RTFA, it says that 12% of people have clicked on a spam message. It then uses the phrase "responded to" to describe what those people did.

    Clicking on an email is not the same as responding to it. I've clicked on spam emails. I've never responded to one.

    --
    "Choosing to refrain from producing another person demonstrates a profound love for all life" [vhemt.org]
  23. Re:Have you seen some spam nowadays?! by Capt.DrumkenBum · · Score: 2, Informative

    I have used it as well, with great success. (I am painfully shy in real life.)
    I have put up a couple of ads lately and the email harvesters have found a new technique. They reply to your ad, if you respond to their mail, you are on their list. But they use the same text in the message every time. :) How can they expect anyone to fall for such a message?

    "Kind of sucks that it's almost impossible to get dates through Craigslist now, though."
    Try http://www.plentyoffish.com/

    --
    If I were God, wouldn't I protect my churches from acts of me?
  24. 12%? No, according to research from last year by Anubis+IV · · Score: 2, Informative

    http://www.icsi.berkeley.edu/pubs/networking/2008-ccs-spamalytics.pdf

    The idea that 12% have responded and tried to make purchases is ridiculous. Take a look at the paper I just linked. If you scroll towards the end, you can see the results of the experiment they did. Out of about 350,000,000 e-mails they observed being sent out, they only had about 10.5K (0.00303%) actually click on the link, and of those, only 28 (well below 0.00001%) people tried to make a purchase.

    Now, granted, the poll included historical data, since they asked if people had ever clicked on a link or else tried to make a purchase before, but come on. 12%? Maybe back when spam was new or something, but as another person said earlier, almost all of us are "not retarded" at this point, or at least not stupid enough to go clicking those links. I wonder what percentage of people have actually clicked on spam links in the last year, as opposed to in their lifetime...

  25. The Best Solution by DaMattster · · Score: 4, Interesting

    Is the one developed by the hard working folks at the OpenBSD project whom have been studying spam for well over 5 years. They came up with something that is devlishly clever called OpenBSD Spamd. Spamd is basically a fake smtp engine that sets the TCP RWIN to 1. By doing this, it causes the transmission speed to slow to 1 byte per second. This can cause a backlog or even crash the spam spender. Fight back, don't filter! You can even create a serious of spam trap addresses, publish them, and reverse harvest the IP addresses of the spam senders. Check out http://www.openbsd.org/

    1. Re:The Best Solution by david.given · · Score: 2, Informative

      I use a greylisting SMTP proxy (that I wrote myself). It eliminates about 90% of all spam before I even have to download it. Spamprobe takes care of the rest. It's only on very rare occasions that spam ever makes it to my inbox, and there are practically no fals positives; and I've been using my email address for close to a decade now, on Usenet, on mailing lists, on crappy forums (like this one), and have never bothered to shield it or cloak it. Spam just isn't a problem for me any more.

      Of course, that doesn't mean that it's not still annoying, and I think that public stocks should be reintroduced for this sort of abuse-of-the-commons crime...

  26. Rebates. by seebs · · Score: 2, Interesting

    I submitted a rebate form to MSI. They submitted the address to multiple spam sources.

    No, I'm not guessing. I got IP addresses from helpful people at a couple of the companies, and it correlates with the day they found out I was suing them for refusing to honor the rebate. So, that's one way it can happen.

    --
    My blog: http://www.seebs.net/log/ --- My iPhone/iPad app: http://www.seebs.net/seebsfrac/
  27. Blacklists by justinlee37 · · Score: 2, Funny

    What could possibly go wrong?