Slashdot Mirror


Gmail is Now Blocking 100 Million Extra Spam Messages Every Day With AI (theverge.com)

Google has recruited its in-house machine learning framework, TensorFlow, to help train additional spam filters for Gmail users. With the new filters in place as of last month, the company claims Gmail is now blocking an extra 100 million spam messages every day. From a report: In the context of Gmail's 1 billion-plus users, this isn't necessarily a huge gain -- it works out as one extra blocked spam email per 10 users -- but Google says Gmail already blocks 99.99 percent of spam, so working out what constitutes that last sliver of a percentage is hard.

40 of 72 comments (clear)

  1. Props when deserved by TFlan91 · · Score: 5, Interesting

    Use gmail for work for decade+, spam has certainly never been a problem.

    Although, it does seem to be a bit aggressive sometimes.

    1. Re:Props when deserved by TFlan91 · · Score: 1

      Clarification, 6 years, but it feels like a decade.

    2. Re:Props when deserved by Luthair · · Score: 1

      Doesn't that indicate the 'AI' is unnecessary because the spam filter algorithm has always just worked :)

    3. Re:Props when deserved by Anonymous Coward · · Score: 1

      Yeah, I'm using email from my the biggest operator in my country. Gmail made that email unusable, simply because
      a) So many use gmail
      b) By default, all mails from my ISP are marked as spam, so gmail users never get my mail

    4. Re:Props when deserved by arth1 · · Score: 1

      Although, it does seem to be a bit aggressive sometimes.

      No kidding. About a third of my e-mails to friends who use gmail get blocked, and I have to find an e-mail from them to reply to not to get it blocked. These are all personal e-mails with no links, no mention of products, and really nothing that makes them appear to be spam to any human.
      And given that much of the e-mail get through, it's not any blocking due to the sender address or sending server either.
      My advice right now to my friends is to to ditch gmail due to this - they risk not getting quite a lot of legitimate e-mail, and not even knowing.

    5. Re:Props when deserved by sabri · · Score: 1

      No it doesn't. It's been blocking a ton of legitimate emails lately.

      --
      I'm not a complete idiot... Some parts are missing.
    6. Re:Props when deserved by toddestan · · Score: 1

      Are you sure that's not because the biggest operator in your country isn't responsible for massive amounts of spam email?

    7. Re:Props when deserved by rtb61 · · Score: 1

      That's fine I will be blocking all gmail as spam, want to send be email that doesn't bounce, don't use Gmail. Nasty company, nothing should be done to support it or it mass invasions of privacy. Want to really hurt Google, force them to pay attention, force them to serve us instead of us serving them, then block Gmail and make it worthless.

      --
      Chaos - everything, everywhere, everywhen
    8. Re:Props when deserved by mjwx · · Score: 1

      Use gmail for work for decade+, spam has certainly never been a problem.

      Although, it does seem to be a bit aggressive sometimes.

      I'm pretty sure in the 12 years I've been using Gmail I've never had a false positive. The only way I'd know is if someone emailed me and then told me and this to date has never happened. The biggest issue is sometimes the commercial emails I want end up in Spam (I.E. offers from any company in Las Vegas for some reason) but that isn't a major issue for me. Even the spam folder is mostly ads from companies I don't want to hear from rather than actual spam.

      Conversely I have a Hotmail account that I've had since 1997, it used to be my primary email before GMail came along, its full of almost nothing but spam, Russian women that allegedly "want" to meet me (nah, pale and blonde isn't my thing), business proposals from people who I've never heard of, even the odd Nigerian prince.

      --
      Calling someone a "hater" only means you can not rationally rebut their argument.
  2. And the result is more false positives by kbahey · · Score: 3, Interesting

    And, the result is more false positives ...

    In the past 6 to 8 weeks, I found several emails from people I know in the Spam folder.

    The strange thing is that those were from email addresses are in my contact list, and have been communicating with me for years.

    Bad move Google ...

    1. Re:And the result is more false positives by N7DR · · Score: 2

      It's even worse than that (for me, at least). In the past week, google has bounced several of my perfectly ordinary e-mails to family members with gmail accounts. As far as I can tell, there is no way to tell the AI that it's an idiot. I can't even begin to guess what it thinks is spammy about the e-mails that it's blocked. They don't seem to have anything in common except that they came from me.

      The bizarre thing is that (so far) if I re-send the exact same e-mail a few minutes later, it doesn't bounce.

    2. Re:And the result is more false positives by Applehu+Akbar · · Score: 1

      Google will soon introduce another AI to find all those notices from your bank, airline, library, car manufacturer, and doctors that went to your spam folder.

    3. Re:And the result is more false positives by religionofpeas · · Score: 1

      The bizarre thing is that (so far) if I re-send the exact same e-mail a few minutes later, it doesn't bounce.

      Not only is their AI very smart, it's quick learning too!

    4. Re:And the result is more false positives by shanen · · Score: 1

      Any chance they are correlational attacks from the spammers? I've seen some evidence that at least one of the main spammers has managed to link many of the email address for better impersonation attacks. In that case, what you are describing could be an overreaction from the Gmail filters, perhaps based on pairings that are completely out of your scope...

      --
      Freedom = (Meaningful - Coerced) Choice != (Speech | Beer^2), and sad sock puppets' bad mods avail them naught.
    5. Re:And the result is more false positives by Solandri · · Score: 3, Informative

      The strange thing is that those were from email addresses are in my contact list, and have been communicating with me for years.

      Being in your contact list is not a white flag. A common tactic of spam malware is to send the contact list of infected person's PC to the spam author. They then spam everyone in the contact list using the owner of the list as the From: email address, precisely in the hopes that an email "from" someone you know is more likely to make it past your spam filter.

    6. Re:And the result is more false positives by arth1 · · Score: 1

      And, the result is more false positives ...

      In the past 6 to 8 weeks, I found several emails from people I know in the Spam folder.

      It's worse than that. Perfectly legitimate e-mail gets outright rejected before it makes it to the spam folder. As a recipient, you won't even know, and have no way of finding out.

    7. Re:And the result is more false positives by OldComputer · · Score: 1

      My recent experience exactly! Not only have some of my co-workers' emails incorrectly landed in my spam folder, but some digests I receive now get stuffed in my spam folder every day despite me hitting the "Not Spam" button on 3+ of them. I was pondering just a few days ago what the heck was going on with Gmail spam filtering. I never had a problem up until this "AI" improvement.

    8. Re:And the result is more false positives by BeaverCleaver · · Score: 1

      Came here to say the same thing. Gmail's spam filtering is abysmal. I couldn't find a robust way to flag email as "not spam" either. And what's with the 30day expiry? Then it's just gone? I have missed several bills due to this and had to pay late fees. Hey Google, storage is cheap (and you pioneered this with amazing 1gb limit back in the early 2000s) so how about giving us a few more days to go through the spam that your AI has falsely flagged?

    9. Re:And the result is more false positives by ayesnymous · · Score: 1

      And, the result is more false positives ...

      In the past 6 to 8 weeks, I found several emails from people I know in the Spam folder.

      The strange thing is that those were from email addresses are in my contact list, and have been communicating with me for years.

      Bad move Google ...

      This problem is not new - it's been around since forever.

  3. Re:Statistical filters... not AI. by jellomizer · · Score: 2

    Because of Buzzword.
    When I started working, I help code Decision Support Systems, then they Became Business Intelligence Systems, Now they are called AI.
    Of course I am not sure if My job is an Application Architect or Full Stack Developer?
     

    --
    If something is so important that you feel the need to post it on the internet... It probably isn't that important.
  4. Blocked or filtered to Spam folder ? by ardmhacha · · Score: 3, Interesting

    I have had a GMail account since the invitation only days. I actually got an invite from someone giving them away on slashdot. I am careful about where I use the address and I get very little spam (about 10 / month or less).

    When I read about GMail's great spam filters I wonder does that mean that the spam emails are actually blocked (ie. never make it to me at all) or just filtered to my Spam folder.

    1. Re:Blocked or filtered to Spam folder ? by RhettLivingston · · Score: 3, Insightful

      I've probably been using gmail as long as you. Might have even got the invitation from the same place.

      I'm fairly positive that all spam goes to the spam folder. I can't remember the last time I had to mark a spam message. I do look at the spam folder periodically for its entertainment value and to keep up with the flavor of the current scams. I haven't had a false positive in many years.

    2. Re:Blocked or filtered to Spam folder ? by aacolo · · Score: 1

      Like other mail providers, google honors DMARC. If a spoofed email comes from a domain where the DMARC record has p=reject, then it will never make it to the recipient's spam folder. p=quarantine or p=none will likely end up in spam.

      I've seen fewer emails in my gmail spam folder lately, but have also sent ordinary transnational emails to gsuite/gmail users that ended up in their spam folders. It started recently, so they have some kinks to work out.

    3. Re:Blocked or filtered to Spam folder ? by Anonymous Coward · · Score: 1

      One thing they seem to be doing now is preventing people from sending through GMail if it's suspected as spam, it bounces back to the sender. I'm the admin of a forum (running for about 2 decades now). We use GMail for account activation, notifications, etc. We've used it for years, the past couple months it's become virtually unusable (literally unusable for new users), with all the forum notifications being flagged as spam and not even reaching the destination.

  5. Re:Statistical filters... not AI. by Anonymous Coward · · Score: 3, Insightful

    if it's software it's ai
    if it's material it's 3d printed

  6. Gmail is used to spam others though by the_B0fh · · Score: 1

    Isn't the biggest issue with Gmail not whether their users get spammed, but the fact that gmail is used to spam others? It's like they refuse to scan their outbound emails for spam, despite knowing that spammers use their service.

    Also, they push everyone to use SPF/DKIM/DMARC, yet gmail itself doesn't use it, making it easier for spammers to send crap as gmail.

    That's kind of fucked up.

    1. Re:Gmail is used to spam others though by shanen · · Score: 2

      Hmm... I don't have hard stats but my feeling is that the spam that actually originates within Gmail is a relatively small part of it. However there is a large fraction of spam that uses Gmail accounts as the drop boxes for the suckers, either with Reply-to: headers or in the body of the pitch.

      Since I do most of my spam analysis within Gmail, it is not clear if that is a Gmail-specific problem (of better spammer support) or if the spammers just use that approach for each target email system. In that hypothesis, they would favor Gmail drop boxes for spam to Gmail addresses, but favor Outlook drop boxes for spam to Outlook email addresses, and so on.

      (I do have accounts on a couple of other email systems, partly as legacies, but mostly to see if any of them EVER get around to offering decent anti-spam features. Most of my Outlook spam is actually fake identity stuff, but I get almost no email of any kind there.)

      --
      Freedom = (Meaningful - Coerced) Choice != (Speech | Beer^2), and sad sock puppets' bad mods avail them naught.
    2. Re:Gmail is used to spam others though by the_B0fh · · Score: 1

      Talk to the people who run email servers, especially those hosted email services. They hate gmail. And not because it's competition, but because of the pain of having to work with gmail.

    3. Re:Gmail is used to spam others though by shanen · · Score: 1

      Not sure what triggered your late reply, but sort of curious what you mean by the pain of "having to work with gmail".

      I was actually a postmaster for what was probably, at that time, the largest free email system in Tokyo. My vague recollection is that the cooperation among postmasters was always limited.

      --
      Freedom = (Meaningful - Coerced) Choice != (Speech | Beer^2), and sad sock puppets' bad mods avail them naught.
  7. So you don't care about false filters, eh? by shanen · · Score: 1

    I always wonder if people who praise Gmail's filters are shills or sycophants, or they just never notice the failures. Anecdotal evidence, but here are a few low points of my experience with Gmail, which I continue to use only because the alternatives seem no better (though some are clearly worse).

    (1) I just had another false negative this morning. Especially relevant to today's story because the slightest intelligence, artificial or otherwise, would have known it could not possibly be valid email for me.

    (2) There has been a long stream of stupid phishing probes from the same source. My intelligence can clearly tell that they are NOT the google, but they all claim to be from Gmail admins with various kinds of threats of account termination and such.

    (3) Biggest problem with false positives is a bit complicated to describe. One of my "professional" email addresses is actually an alumni email address which was switched to Gmail a couple of years ago. As a naive forwarder there had been no problems for many years, but my theory is the google made them an offer they couldn't refuse, so they switched. Therefore I set up the forwarding to my regular working address, which is my first Gmail account, and it seemed to be working normally. Later on I rejoined a professional organization using that alumni email address, but after a year of communication problems I finally discovered that some of the organization's email was being tossed as false positives and NOT being forwarded. I don't really know how much was lost, though I am sure it interfered with my involvement in the organization. Nor was I able to figure out the basis on which Gmail was tossing some of the email, but it certainly has become a major nuisance to try to work with yet another account because I can't trust the google, and even worse because the two accounts are fighting with each other. Near as I can understand the situation, the alumni email account is not a "real" google identity, but some kind of organizational account with slightly different functions.

    (4) Other false positives and false negatives continue unabated. Usually they are tilted towards false negatives, which is probably better than more false positives--as long as I'm checking. Oh, wait. That kind of defeats the purpose of the filters, doesn't it?

    (5) Perhaps most importantly on the filtering topic is that the spammers have proven that they can live with filters. Their marginal cost remains close enough to zero that they are always willing to spawn another million or billion spam messages. If the google is doing anything to put them out of business, they are certainly hiding it well. And don't give me the sob story about it being impossible before explaining where the pump-and-dump stock scam spam went. The spammers' business models CAN be broken, but the google don't care. (Of course that is sadly true of the alternatives, too. At least all the alternatives I currently know about.)

    That's the spamming problem, but going on to other email features... There are a number of features I want, but I am absolutely convinced the google is incapable of moving in such directions. The features they have added over the last few years are mostly features I want to disable, especially this confidential mode garbage. If you don't trust me enough, then I do NOT want to receive your email. The only aspect of confidential email I want is to bounce any such email that is sent to me. (I am not sure if it is a positive thing that the spammers have not yet figured out how to abuse confidential email. But I'm sure they will, given the google's "Live and let spam" attitude.)

    --
    Freedom = (Meaningful - Coerced) Choice != (Speech | Beer^2), and sad sock puppets' bad mods avail them naught.
  8. I spend a lot of time in the "Junk" folder now by Tablizer · · Score: 4, Funny

    It's making my business negotiations with Nigerian princes very difficult. Maybe I should go into boner pills instead.

    1. Re:I spend a lot of time in the "Junk" folder now by Tablizer · · Score: 1

      Your DP robots look fake, which is normally redundant unless you do it really bad.

  9. Time for more real intelligence? by shanen · · Score: 2

    You managed to remind me of what I still think is the best solution approach. It's actually another aspect of MEPR (Multidimensional Earned Public Reputation). In this application, the dimensions of concern are those that would indicate a particular person with ACTUAL human intelligence is (or is not) skilled at recognizing spam.

    One implementation (but the google will never implement it) would be as an opt-in spammer-fighting tool beyond the incredibly naive Spam button. (The additional phishing-report option is not a real solution, but it's a tiny bit better than nothing.) The spammer-fighting tool I fantasize about would parse the suspected spam and let the human being help assess the various aspects of the spam (and recommend appropriate countermeasures) in a kind of automated dialog. MEPR is relevant so that the email server or website can weight the responses and respond appropriately.

    Now it's time for some defeatist moron (or shill) to pop in with the idiotic options-based form letter explaining why you can't fight spam. (I'll ignore it, of course. I'm much too stupid to just give up--but again I remind you of the pump-and-dump stock scam spam.) Therefore I'll just bid you ADSAuPR, atAJG.

    --
    Freedom = (Meaningful - Coerced) Choice != (Speech | Beer^2), and sad sock puppets' bad mods avail them naught.
  10. Not good enough by Gravis+Zero · · Score: 1

    Instead of filtering malmail, they should be fighting malmail in a way that matters.

    * Every phishing email should receive an equal number of plausible (scripted/AI written) replies from dedicated email addresses and domains. (This poisons the well.)
    * Every site employing "sign up for promotional emails by default" checkbox should be downranked on Google.
    * Every site employing "signing up implies consent for promotional emails until you cancel them" should be delisted from Google.
    * Every domain found to have hired spammers should be delisted from Google entirely (this requires an investigative unit).

    Google enables malmailers to continue by not punishing their behavior.

    --
    Anons need not reply. Questions end with a question mark.
  11. Re:I still get tons of spam by budsetr · · Score: 1

    Probably all mailchimp sponsored. See this for help: https://ma.tt/2018/06/mass-uns...

  12. Doesn't like non-google email lists by WillAffleckUW · · Score: 1

    It always puts those in my spam folder, which it hides so I don't realize it put them there.

    Other than that, it works fairly well.

    I feel sorry for legitimate salespeople trying to sell you stuff personally, though.

    --
    -- Tigger warning: This post may contain tiggers! --
  13. Re:Statistical filters... not AI. by nwaack · · Score: 1

    Get with the program, gramps!!! This is computers doing stuff and therefore, according to current vernacular, is CLEARLY ARTIFICIAL INTELLIGENCE!!! Like, OMG, stop throwing shade at the AI or you're gonna get clapped back!!!!

  14. missed monetization opportunity by js290 · · Score: 1

    The monetization opportunity here is to simply charge various rates for emails sent, spam or otherwise. No AI required.

    --
    "Tempers are wearing thin. Let's just hope some robot doesn't kill everybody." --Bender
  15. Easy solution by DidgetMaster · · Score: 1

    The problem with email spammers is the same one as with robocallers. It costs nothing to send email or call a million people. If the email providers and phone companies simply charged people for every call they make or email they send over some minimum (e.g. 100 per month) it would put and end to it almost immediately. It wouldn't even take much. Just a penny or two per message would stop the mass mailers and callers in their tracks. For the rest of us, it would rarely affect our costs. Even in months where you go over the limit, it would only cost you a couple bucks at most.

  16. Spam as an attack by The+Evil+Atheist · · Score: 1

    Can we just rule spam as a form of denial of service attack or wire fraud? That much spam being sent out in the first place must have some effect on the network, and using AI to filter spam is an unnecessary strain on the electricity network.

    --
    Those who do not learn from commit history are doomed to regress it.