Discussion Locked

spamming! who's protecting us?

0 helpful
51 replies
Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

I heard recently that a company was taken to court for its spamming, I havent heard any news on the outcome as it was a brief radio report. I do know one thing though Im sick of the amount of spam i get and yes before you ask i dont sign up for third party nut i still get them.
I have been to some sites in the past and unregistered my email but to no avail.
I think there needs to be some action taken in regards to software and security, and accountability, there must be away that we can incorporate the antispam databases to some kind of legal registry.
We also need to take steps in holding e-mail service providers to account for allowing illicit and irratating and unwanted mail.
in turn email providers will become more stringent and more careful about the volume of spam from there domains.
I think this issue has been ignored far too long and its time somthing was done!
what do you think?

51 replies

by dr dij

sign up for free email on yahoo.com or google.com. UPgrade to the paid account ($20/ year on yahoo).

create a disposable address base word.
then setup disposable email addresses.

Use these to register with any site, or to buy stuff online.

If you start getting spammed on that address, you can simply delete the disposable address and no more spam.

You also know who gave out your address.

Another advantage is you can tell the incoming emails to automatically go to separate folders based on what the incoming disposable address is.

This without ANY filters which are often flaky.

One warning: if instead of typing in your address on a site, you are emailing friends or anyone else, be sure to change from the base address to one of the disposable addresses in case they have a trojan email virus that looks for email addresses in inboxes and sends them to spammers.

Since the base address you sign up for at Yahoo is different from the disposable email base address, no spammer can guess your base email address (which can't be changed) unless you send email out or post it somewhere.

I like yahoo's disposable addresses better than googles, as yahoo uses a '-' while I hear google uses a '+' which some sites don't accept in email addresses.

by Former member

I already been doing that in the past problem is that I dont want to spend even more money why should i. the other thing is i had my email for over 10 years and everyone knows me on it and im used to it so why should i change because others cant stop harrassing and annoying decent folk.

Its good advice but its not the point, the point being is it can be stopped but hardly anyone seems to be bothered and we all know why "MONEY" people are paying for the privelige of stopping spam from the very people there paying its madness.

by dr dij

but short of restructuring the web's email system there is NO WAY to stop it! Lots of brilliant people have been pondering this for a while.

So, you won't pay $20 per year for disposable emails where you get basically ZERO spam?

Ok

spam and email systems are free.
You can just hit the 'delete' key $20 worth of times.

You can spend $49.95 on popular email anti-virus products, that very smartly check that the email doesn't have virus but don't check that the link in the email does.

Or you can spend $20 worth of time tuning filters that still let spam thru, and occasionally detain some valid emails

My feeling is that changing your email address is only slightly harder than changing your brand of cigarettes or changing dope dealers.

It's up to you!

by oz_media

Annoying, isn't it? While there is a DNC list it taks a long time to work for you.

Spam is just the web's telemarketing system.

You CAN become unknown to both spammers and telemarketers. I have perhaps two or three calls TOPS from telemarketers each YEAR and 2 or 3 at most, spam mails in my personal account. It's not brain surgery, just stop using that address for ANYTHING, NEVER TYPE IT OUT AGAIN. if yuo can change your address, then don't give it to anyone unless 100% trusted, again, if your friend gets infected and their address book is copied, YOU will get spam if you are in it. Once you reply to be removed from the list, you have just confirmed your address is valid and it gets sold over and over again. Spammers don't really make money from selling things online, they make money from compiling and sellin glists of addresses.

by oz_media

I have at least 5 that i have never paid a penny for. It works the exact same way though, why the paid upgrade? I am sure you found a reason or benefit, I am just curious as to what it might be.

as for a disposable address, ALL free addresses are disposable, just delete ALL mail from them and clean them out. Use your ISP's assigned address for personal email only. It's SO easy!

when typing an address in a forum, I always use AT instead of an @ symbol, which is a bot trigger. ozmedia AT excite.com (spam away, I just delete ALL messages once a month, of course after a QUICK scan for peer mail).

by charliespencer

I don't post my address anywhere, even with spaces between the letters or replacing the '@' with 'AT'. I don't even have it on my personal home page.

by dr dij

disposable addresses till I upgraded.

Yes, sure you could have 500 dift email addresses, but the two part disposables let you read ALL your email in ONE PLACE rather than logging in 500 times. and separates them out to folders based on what address they cam frum.

by charliespencer

"I have been to some sites in the past and unregistered my email but to no avail."

Never do this. This just confirms your address as an active e-mail account to the spammers. When they sell their address lists to each other, they can charge more for yours because it's proven as a good address; you provided the proof for them.

"We also need to take steps in holding e-mail service providers to account for allowing illicit and irratating and unwanted mail."

In order to do that they're going to have to open your mail. Do you really want your e-mail provider reading and screening your e-mail? I'd consider it a violation of my privacy and would switch ISPs if they did this.

"in turn email providers will become more stringent and more careful about the volume of spam from there domains."

Most spammers don't use e-mail providers. Each is usually his own provider. E-mail providers can't be stringent about someone who doesn't use their services. Those few that do use the common e-mail providers set up a temporary account, send their e-mail, and abandon the account. They don't care if the account is deleted; they're done with it.

"what do you think? "

I think since spam bothers you so much, you need to do a little research on exactly how it works. Your suggestions are impractical.

by Former member

we know that more than enough most spammers start from a wellknown providers especially those who are trying to obtain money.

In order to do that you need to maintain a point of contact and as well as that there is always a starting point and in this day and age with I.P,s registered to public scrutiny its becoming easier to track back to any starting point.

I dont see why using methods to track users sending mass spamming from any site would be impractical and surely isnt there supose to be somwhere to start?
you could tell me what steps you think could be taken to help illiminate this problem or why its impractical?.

Its posible we might not be able to eliminate it all together but at least we can try.

any suggestion is better than no suggestion?

by ontheropes

Just because you're irritated enough by SPAM to notice that there's a problem doesn't mean that it hasn't been addressed before now.

by oz_media

"we know that more than enough most spammers start from a wellknown providers especially those who are trying to obtain money."

I have been hird full time to eliminate a cimpany's spam, fine tuning a SPAM server for 1 year, and I have studied and read just about anything i coul dget my hands on with respect to spam. I have worked closely with software engineers who have designe dsome of teh most robust and useful (and most expensive) spam servers you can buy.

I have yet to hear this fact that you speak of, that we all know that most spammers start from a well known providers server.

They may SPOOF a server but usually it is a private data center, orcessing their OWN mail from Guyana or another offshore site. VERY RARELY are they from a reputable or known provider.

As Palmetto suggsted, you should learn about teh subject a bit more, you clearly do not really understand what you are facing, and therefore will never learn how to control it. I mean that with all sincerity, I am not being mean or condescending, this is an IT field of its own and requries you to become a specialist or hire one.

by charliespencer

"we know that more than enough most spammers start from a wellknown providers"

Nobody serious about spam uses a well-known provider. It may look like that's what their doing, based on the address you see in the 'From' field, but that isn't where the mail is actually coming from.

As to registering their IP, no one sending spam bothers to register any information. Big-time spammers often run their own e-mail servers, changing the identifying configuration settings (IP address, DNS name, etc.) on a frequent (sometimes hourly) basis, turning the system off when not actually in use to prevent tracking, and often physically relocate from one place to another. Others hijack unprotected home or business systems to use as spambot zombies. Almost all operate in countries with no anti-spamming laws, no enforcement of what laws they may have, and / or no extradition treaties to send the token few they arrest to other countries.

'surely isnt there supose to be somwhere to start?'

Supposed to be? Sure. Spammers don't care about what's supposed to be.

The best approaches are to:
-NEVER respond to spam, and encourage everyone else to do the same.
-Use anti-spam software if it really annoys you.
-Use a firewall, anti-spyware, and anti-virus software to prevent your system from being exploited as a spambot.
-Never respond using 'Reply to All', and discourage others from doing so. This merely forwards multiple addresses to someone who may not be as careful with your address as you would like. 'Reply to All' is a great way for spammers to get your address indirectly. If you must send an e-mail to multiple recipients, use 'Blind Carbon Copy' (BCC). Never do business with a firm uses 'Reply to All' or doesn't understand how to use BCC, and explain to them why you won't do business with them.

by dumphrey

sending spam more then we need to stop our mail boxes from getting the spam.
Spam eats a large share of the internet's bandwidth on a regular basis.

by Former member

its not that i'm missreading it, nor am i saying you are rong or sugesting any thing under hand. i think your views are very valid and deserve every consideration.

But please do not say to me that I dont get it because you think your point of oppinion is the way i should think, thats not debate thats enforcing your way on someone else.

what i am doing is looking at it from also a moral ground as well, thats my right. you think that just because your happy with the way things are does not mean every one else is. this world is full of different perceptions and people perceive views in different ways it depends also on the level at wich you see it.
so why get irrated by someone elses point of view. actualy a person can get side tract and locked on to one view, there where a couple of things in your replys that did make me stop and think about the otherside. but that doesnt mean they will drift away from the original point.

Infact what i have felt since being here is some people tend to follow others and kiss up and a lot seem to get annoyed at some ones views very easily especialy those who are technicaly gifted.

What a shame!!!

Problem is that sounds alot like the artical on this forum about ending the whinning.

this forum is not about tech freaks and knowit alls its about people sharing there views especialy in work and productivity thats the point.

Its this kind of thinking thats not accepted in the work place anymore and team work is the new deal. theres no place for ego's and self bosessed individuals.

Maybe this site is not for me who knows I just get the feeling theres too many ego's here!

by Former member

thanks for the tips by the way.

I just feel that spam is the same annoying thing as getting piles of unwanted junk dropping on the door mat every door.

I do think though like the earlier days of linux if we put our heads together we could atleast try to illiminate most of it.

by oz_media

By puttign heads together already. if yuo are really interested, study the text behind GWAVA http://www.gwava.com

Don't bother buying the software, it is not for home use and costs thousands but download the 300+ page user manual, it will teach you a lot that most people don't know about spam. FAR too much to discuss here.

People were fed up with sopam many years ago, and there are many ways to avoid it without someone readong your mail, without spoofing your email address and without getting false positive (which is why most ISP's filters fail, if they are too tight, you miss important mail).

by oz_media

I have had the same address for about 9 years now. I have yet to receive more than 3 a month (if that, I often don't see s single spam email for months), usually from sources i have authorized so it is not technically spam.

You HAVE inadvertently signed up for something, posted yoru email address in a forum somwhere or SOMETHING. Email addresses aren't just guesses, they are mined by bots when they can't be obtained through agreements.

Yu omay even want to check yoru service providers TOS. I have looked at many and they ALL have a clause that they can share YOUR information with affiliates, just by your agreeing to the service, they all do it though.

When you reply to be removed from a list, most of the time you are simply confirming your email address to the spammer, and instead of getting removed, your number is added to a list to be sold.

"Who is protecting us?"

Who SHOULD be protecting you? if you don't feel it is yourself.

I have several email addresses, three are for use with website forums, etc. where yuo need an address to sign up. So I use the free Excite and GMail accounts for that garbage (sorry TR). As for my personal email, I don't type that address ANYWHERE online at all.

I pass it on to family that I trust does not have a problem with virus' and only peopl ethat I kNOW do not open junk mail and use other free emoticon, webshots crap. (thier address book can be collected and then YOU get spam because of THEIR lack of protection).

Other than a chosen few, I think there are maybe three TR peers with my actual email address, which was NEVER posted on TR.

If you were to post say, jdoe@hotmail.com in a web forum, there are bots that scour forums for valid addresses, they are then collected, compiled and sold to spammers.

ISP's are in a constant battle with good and evil. Some peopl erun legit businesses and send out thousands of email through teh ISP's service. Others do not, but they are hard to define without stopping legit businesses from working.

We had a problem at our office where the ISP would stop my distribution list from sending, in order to prevent spam, but it prevented ME from notifying opt-in clients too.

It's the same as those supid low budget spam filters, they are useless and create more false positives than teh spam they stop. Some block all email from the most popular Canadian domains, like SHAW.CA or TELUS.CA etc. What good is that?

So to answer your question, "Who is protecting us?" The answer Is and very well SHOULD BE, yourself. YOU need to protect yourself from SPAm, yes it can be done because I do it and have done it for a large company. Don't expect a fire and forget solution, good software needs heuristic refining, training etc. There's no such thing as afire and forget solution and it sure as hell isn't up to the ISP to decide WHO's email you receive and who's you do not.
They will stop blacklisted accounts but even then there are many problems with legit senders gettign blacklisted for using a server with forwarding abilities etc.

Take responsibility yourself, get a NEW email address and NEVER EVER type it in ANYWHERE. Offer people your address by phone, or from your own email account, don' tpost it anyewhere on line at all, it will get spammed.

by charliespencer

One I've had for about six years. It's for our fantasy racing league, and I've given the address only to those 30 or so players. They know that forwarding my address (or that of any other player) will result in being dropped from the game. I've never received a spam on that address.

The other address is from my ISP, and I give it only to relatives and well-known vendors. Excluding e-mails from vendors I've done business with (which I don't consider spam), I receive less than five spam messages a month. I've had that address for longer than I can remember; at least eight years.

It's all in how careful you are with who you give your address. If I'm filling out a paper form (doctor's office, credit card application, restaurant survey, etc.), I leave the e-mail address blank. Just because they ask doesn't mean I have to give it.

by oz_media

I don't even know if 10 people have my personal address. If it is business I use a busienss address. If it is personal business (music etc.) I have a few GMail accounts (larger file sizes are needed too for music transfers).
If it is ANYTHING else, I use my free excite address.

This way, my personal address, which doesn't actually have my name in it either, is completely private. even the ISP for that address doesn't have ME on file, though he is a personal friend and knows me, his files show a pseudonym and a Vancouver Island address.

by dr dij

spammers may be able to get your email address. 30 people have one email address? chances are at least one of them has an email harvester trojan, or is dumb enuf to email everyone on the list in CC instead of BCC.

The point is that with disposable addresses, you don't need to be anal about giving out an email address, just make it a disposable one that you can setup in seconds without signing up for a new email address from yahhoo or others. If they spam it you can delete it.

It is alot harder to change ISP user names. And I was able to tell that an online inkjet cartridge vendor I dealt with had either a leek (related to onions) or was selling my name to spammers. If not selling my name they had a security breech.

by dumphrey

Fantasy racing?? what is this?

"Just because they ask doesn't mean I have to give it."
At one point Best Buy here was asking phone numbers for rebate forms.... They almost would not sell to me when I refused to give them my number. I had to call a floor manager and threaten to call home office.
I never mail in rebates. Another way to get to much info about you out there.
Several times I have also required businesses to justify to me their need for my SSN.
An SSN is considered "privtae data" and can constitute verification of identity online. Its amazing how easy that info can be to get...
"There is no patch for human stupidity."

by dumphrey

that create temporary email addresses that forward to your regular address. So, base email address (think of this as the root cert), a daily use address, a "safe" on-line vendor address, and a sketchy "gonna need more then penicillin" address. in all cases you can add another layer between you and them with 3 mouse clicks.

by oz_media

I actually used to use it, but found it wasn't needed. I just use the same old excite address ozmedia@excite.com (flood my mail box I really don't care)for most of everythign online. Simple scan once every few weeks in case there is old relevant mail or TR mail and the rest gets deleted in one big lump. EASY, no spam at home, no spoofing, no cover ups needed.

by ontheropes

A simple search with your favorite search engine will turn up several sites that provide temporary email addresses good for anything from five minutes to several hours. I use mail-filter.com. It has some limitations as your base mail-filter email address is easy to figure out but for general website sign-up use it's very handy. Simply apply a filter rule at mail-filter.com and never see another spam email in your inbox.

by dr dij

if you have a two part disposable address, you have ONE email account and NO FILTERS which I found went wacky and lost my email addresses in eudora years ago, and don't always seem to work in outlook.

based on the (disposable) email address someone is sending email to you with, it filters automatically based on incoming address to folder of your choice.

by ontheropes

I'd have to set up filters in Thunderbird or gmail to redirect to a folder.

Sounds like your way is pretty good if you have need for it. At this time I have very basic email needs so mail-filter.com works well enough for me.

by oz_media

Ozmedia at excite dot com.

and by the way, that is my free account that is a spam haven, not my personal, spam free account.

by oz_media

We just ahad a nother thread on that one, sometimes it is imperative and you must do business with them. I also explain the drawbacks but for teh most part, unless someoen else has a virus there is little to no problem.

You're right you are more paranoid than me, but then again you have to be, you ARE American afterall. ZINGER!!!! :D

by Former member

I totaly understand what your saying, but not everone wants to become a techno on perticular subjects thats why we have specialists in perticular fields.

Your right about the fact I am not highly enlightend when it comes to email but if you have noticed alot of unwanted and fraud mail thats comes from third world country's actually are listed mainly from yahoo, hotmail and gmail.

the reason why we have organisations and goverments is to look after the rights and welfare of all, this is not just for rule but for protection especially for those who are not fully aware.

If I wanted to go out and buy a tin of beans then do I need to start to learn about the manufacturing process and what takes place before I eat them?

Everyone has a field that they are better at than others so I think its sensible to raise those issues but leave the technical issue's to the knowits, it doesnt mean that the question shouldnt be pondered or asked?

still its always worth a try though.

by oz_media

I wasn't tryig to imply that you were a fool or anything, or uneducated etc. This really is a field of its own, and requires specific study to understand. Your questions are valid and are exactly the right way to begin understanding how it works.

As for your comments "actually are listed mainly from yahoo, hotmail and gmail."

Most of the time, mail didn't REALLY come from one of those accounts, they are simply spoofed. An account from soem offshore server where there is no legal restrictions on such mail can easily appear to come from a more popular host, such as GMail or Yahoo.

It is like an alias, it isn't the real name, just the name the sender want you to see. When you reply to it, it can be set to automatically update your address as valid in a server based in Guam. if you write a blocking rule for that address, the next email they send will be spoofed from a different address so your filter is useless.

Filtering/bocking domains are the first step and is the most ineffective.

Proper spam control uses heuristics ot weigh text used in an email, first teh address is checked and a message meeting certain criteria will be scored (say a 2), then the subject and body are scanned for specific keywords that you select (such as FREE=4, OFFER=2, CREDIT CARD=5, PORN=9 etc.)and each time the word is repeated a base score is added (ex. FREE OFFER would score a 6).

Once a preset total score is obtained, the message is considered spam and is deleted. If the total score is below your threshold, it is delivered.

So that's basic heuristics. then there are RBLS, which are black lists, these are VERY unreliable and often incorrect. a good spam filter uses multiple checks, heuristic, address blocks, RBL checks etc. Generally you would set the RBL check to a low score, that is added to teh total of all checks. Again, once yoru maximum allowable score is reached, as a combination of all scans, then it is deemed SPAm and deleted.

As you can imagine, it takes ages to set up and fine tune such a scoring system, so many GOOD spam software designers will offer a list of preset rules and words with weights that get you started and you can fine tune to reduce the number of false positives that are deleted (legit mail that is blocked as spam).

On top of all that, some solutions (mainly residential ISP blockers) will actually download mail into your inbox BEFORE scanning it, for the most part this is okay but bad mail is still downloaded before it is scanned and deleted.

A better solution is one that works witha company's Exchange server and actually scans and deletes mail BEFORE it is accepted into the servers, post office.

Conclusion: IN order for an ISP or email host (GMail etc.) to scan mail for spam, they would need ot consult each and every user as to the proper weighting to use when scannign their incoming email. Too many legit emails would be deleted or too few would be deleted, making it an expensive and unreliable service.

As it is, ALL email hosts and ISP protect you from SOME spam. They do block a LOT of mail and the stuff that actually gets through is from savvy senders who know exactly what makes it through and what doesn't.

It's really not easy and really isn't something that can be done on a general level, only a personal level.

Some company's deploy very expensive hardware/software solutions, I worked as an admin for one group that spent over $15K just on the customised SPAM/Exchange server with software to block mail, it took a year of tuning but reduced junk mail from several hundred per user per day down to a couple per user per day without them missing a lot of important email. (I used to hear that one every day! "where's my mail from XXXXXX? It's important, you better get that server fixed so I don't lose email!")

Hope that helps, also read the GWAVA link that I offered somewhere here too, it will give you amssive manual that explains it all if you are really interested.

Best of luck!
OM

by Former member

All public I.P addresses are visible its actualy law that there made available.

and i did not say that spammers in perticular register there I.P address. thats done automaticaly and by whoever your provider or host is.
Ofcourse theres some will say Proxy ahah no no, you can still be traced because from the point of proxy you are still visible before that connection.
every person using a machine to access the public internet requires identification and there machine is linked to that access.

Yes its hard to stop people spamming becasue there moving constantly but there are steps we could try especially in regards to those who supply email accounts.
Like i said in my prior messages we could make them responsible and with geographics taken into account spamming isnt just from country's unreachable its actually here in our own backyards.

The problem is when we get unscrupulous behaviour eminating from country's where we have no access or the law agencies find it difficult to get extradition because of bad relations then we have a problem policing individuals as well as company's. That doesnt mean to say though they are untouchable.

How do you think that criminals with all the money in the world are finaly caught up with especially in connection with cyber crime. its imposible to leave an untracable digital footprint and any hacker police authority will tell you that.

so anybody thinking that you are truly untouchable you need to think again?

we can all sit here and put on our geek heads and try to manipulate peoples words at there expens to try to make ourselves look important and intelegeant but at the end of the day true professional will see the subject and not there own eago and definately not try to inflate it.

lets think about this: if eddison was told by his neighbour that the light bulb was imposible to invent do you think he believed him?

Nothing is imposible, and its what motivates us in our private lives as well as our working lives.

my point is the qoutes made in my replys where questions not facts. and if we raise a question then doesnt that lead in turn to an answer?

Now Im going to put an answer that I believe in principal could partly help solve this kind of problem?

I think that given a geographical position in registering an email, should be locked to that location. its the same addage as not hiding your phone number from the call your making. If you have nothing to hide why hide it! and yes i do beleive that this is posible because its already in use with mobile phones.

So since myself and one other is the only persons so far to actually put in somthing positive and contributory is ther any other I.T, Professional and alike that can do the same?

So all those that have replyed and not given the reasons why its not posible or Impracticle well; Ummm how much do you realy know is what is on everyones mind now?

by dumphrey

While you are bothered by spam, many people accept it in much the same way we accept "legal spam" oh, I mean advertising...
We are so inundated that people are becoming desensitized to the problem.
Also, there is a dilution of responsibility. By this I mean that millions may get a spam from 1 spammer, but individually, that one piece of spam has very little effect. Where as if 1 person got a million spam from one spammer....
Basically each recipient thinks "some one should do something!" And by someone, they never mean them self. Douglas Adams nodded to this effect in his "SEP" field, its "Somebody Else's Problem to deal with," we all turn into Sgt Shultz, "I see nothing! Nothing!"
For those that want to do something, maze traps on web sites are good, list poisoning links, educating your self...
We have to find a way to remove the financial gain from spamming or it will NEVER cease.

by Former member

your right and your comments are extremely valid but i see it from all the angles yes I could take steps to educate myself and yes I will but what about others who ca'nt or just dont or willy never understand.
Are we saying that there rights and protection is less important than ours. There are billions of people across the globe that rely on the developers and solution finders to help protect them and its there responsibility to carry that forward. Its not just about the uneducated or those that find it difficult to understand technology its also about those that work hard, or deprived low wage earners and those that cant find the time to eductae themselves or a million other reasons.

theres a principal I feel is valid since starting this question and the more I think on it, the more I think its definately legit.

its like i said to some one in an earlier response if i buy a tin of beans do i really want to now how its manufactured before i eat it?

yes some may get decensitised to spam but i feel the majority just feel that no one wants to realy do anything about it?

theres a devide between the techy and the average joe bloggs and bloggs thinks his voice is silent?

by tony hopkinson

but it blew my mail box limit. The arse doing it got their loop variables backwards and sent one spam to me i times.

It would have been funny if I hadn't had to delete them a page at a time. :p

by Former member

This is where my questions on accountability of the providers of e-mail come back to. we can atleast develop away to reduce its size and quantity and find a short term solution untill the long term.

by dumphrey

of spammers would have long reaching consequences on our freedom as well. Especially as many spammers are "gorilla" users of the ISP's bandwidth (ie not a regular paying customer). Those that use regular ip addressing are quickly and easily blocked by even a conservative black list. And if a legit business is on this list, it means they were operating an open relay for a good while. The better option is improving the "catch" and prosecution rate of spammers, as well as improving overall end-user security to limit zombies.
I think some good will eventually come out of SPF and greater adoption of end-user encryption and signing, but atm neither is a good solution to SPAM.

http://mxtoolbox.com/
This is a page I use regularly. Some good tools if you deal with email issues a lot.

by Former member

Ok so we are all worried about the carbon footprint and if the bandwith is effected then the carbon footprint is too.

so now we found another reason to add to the reduction of spam, canned spam is ok tho lol :-)

I think with geographical registartion and machine identification it is posible to reduce the problem. In todays hardware we now find ourselves with a unique situation that machines now carry there own ways of identification almost like a DNA strand.

This is how microsft as well as others use there Licensing to lock an OEM to a given machine so gone are the days of hardrives holding the key, nearly every part in a modern computer is identifiable for its serial number, modal type and I.D, bring all this together and I think we could be on to somthing. email accounts could be locked to a computer in relation to its graphical location just as licences are?

The question i feel that will be on everyones lips is privacy. again i cant see a reason why privacy would become an issue, soley because people have the right to opt out of giving personal deatils out.
thers also the question of criminal intent? if you have nothing to hide why would you be worried? Data protection is even more on our side in recent years the problem with that is people just are not aware of its use and policy outside of the usual office enviroment.

If my machine was licenced to proof of who i am and what the location is to that account I wouldnt have a problem its just a licence?

Look at the like of online accounts they have to verify you and now there one of the biggest user generated products on the market. paypal, ebay, world banks etc.
and yet the majority is happy to go with that?

by dumphrey

though I wonder about the privacy implications. Security and privacy are often at odds with one another.
Also, machine IDs can be faked if you can control the bit stream. These are the same problems as with SPF, the faking of originating identity is still to easy.
But along those lines....
A machine cert, registered with a primary agency (verisign etc)aplied to all legit machines could be made to work. Basically all servers would be set to drop all mail from an "unsigned" server. This will only work as long as the verification can not be faked and the cost of the set up of the verification makes it prohibitive to regular change (also impacts the flexibility of smaller firms). And for home users, a free cert could be used that rate limits the server to a hundred mail an hour. So even if the server is compromised, its spam potential is very low.

by dumphrey

no one ever said
"Are we saying that there rights and protection is less important than ours"
If any thing, the person who refuses to take action on their own part is saying this.

"I will but what about others who ca'nt or just dont or willy never understand"

Not to be rude, but what do you do with a child that just cant grasp the concept "fire hot"? You damn well don't give em matches. Do you really want to have your personal privacy violated because some guy in Nevada cant work a spam filter? And if an on-line user can not deal with spam, then protecting their identity will be almost impossible. The internet is not a right, its a privilege.

"here are billions of people across the globe that rely on the developers and solution finders to help protect them and its there responsibility to carry that forward"
This is a good point, but can you rely on a developer if you have no way of judging their competence?

"its like i said to some one in an earlier response if i buy a tin of beans do i really want to now how its manufactured before i eat it?"
Well, that depends, are you horribly allergic to any thing in it? Ever wonder why so many products say "made in a plant that processes nuts?" Its because many people do want to know about the manufacturing. The product warns them there may be danger, but the consumer takes the appropriate steps.

"yes some may get desensitized to spam but i feel the majority just feel that no one wants to realy do anything about it?"

desensitization is the mechanism of indifference. And they are correct to a certain point, spam filter companies have no desire to END spam. If they did, their billion dollar industry would be gone. Spammers get more virulent and sneaky as spam filters get more effective, a nasty circle. Each is feeding the other.

Overall, making the ISP responsible for spam is like making the DOT responsible for a drunk drivers actions. "Well, if you hadn't built that road, he never could have hit me!"
Also, as an email admin, I can tell you, if you are getting more then 4 or 5 spam a week, you did something to get on a mailing list, and it will get sold, and your spam will multiply.
Our spam filter blocks about 1 million spam a week. Of that 1 million, 97% are dictionary attacks dropped (never bounced)because of no valid recipient, of the remaining 3%, 2.8% can be reliably blocked by reputation filters, and a simple custom filter blocks the rest (we use 3 custom rules).
And while this is very effective for our business, the spam is still using internet bandwidth. Going after the spammers is the only "effective" way atm to slow down spam.
Like the war on drugs, its completely un-winnable by any means (on a large scale), until education is improved and profitability is removed.

by charliespencer

After telling the manager why I was taking my business elsewhere.

Off-topic: Fantasy racing involves each player picking real-world drivers and then getting credit for the points those drivers earn at the track. Rules, dues, and prized vary by league.

In our case, we take NASCAR Sprint Cup drivers and sort them into five groups based on current point standings. Before each race you pick one driver from each group. You can pick a driver only nine times in the 36-race season. Just before the race starts I publish each player's selections so everybody can see who everyone else selected. After the race I total up your points (okay, the software does it for me) and publish the results. We're a "workplace" league with most members from work, with relatives and invited friends. We charge $5.00 each a year to cover the web site and software, and don't pay any cash prizes; strictly a bragging-rights and trash-talking league. Peer mail me if you want the gory details, or visit

http://www.switchracing.com

by oz_media

No need for 500.

I just use one online account for 99.9% of all web logins, etc where an email address is requried.

The others I have are for specific uses, I don't kill them off or use them temporarily. I simply don't use my personal address for anything, everything else is on a free email account. One main inbox for most of it, I just scan for messages from a TR memner before I delete all messages in one go, once a month. VERY little effort and NO spam at home.

by oz_media

Just about everythign you buys these days has an online registration form. I NEVER register anything, you simply don't need to.

If you have a recipt, you can return or have teh product repaired, you DON'T need to register it. They also tease you with offers of free updates and free coupons etc. These are usually useless and never used either. If they have a deal for you, you will be bale to get it through other means, just as anyone else will, its never s ecret savings club.

As for phone numbers, Radio Shack used ot do that, (they were notorious for info collected to buy a blank cassette tape).

I just give them a number that's off by one digit, IF they insist. That way even at a later date, it was simply written down wrong by the employee, close enough if a warranty issue that requires such proof but they never do.

by tony hopkinson

How is the next mass market email campaign going to go if spam gets stopped?

If you want to attack the real problem, you need to look a bit closer to your desk.

Wait, you're going to tell me that none of your mass mailings are unsolicited right.

How do you tell a solicited mail from an unsolicited one? You mark it as unsolicited as soon as you read it. The purpose of the mail, to be read.

Seeing the wee technical problem here?

No one is protecting us from spam, people in sales, marketing and business development have them assassinated as soon as they foolishly raise their heads above the parapet.

by dumphrey

great book by Tom Holt, its about lawyers...
Was reading it last night and your post jumped out at me.

by dumphrey

it was a common trick to play. but the guy down the hall was the "admin" for our campus so it was no biggie.

by dumphrey

and you do indeed have the right to have an opinion, and I defend your right to that opinion, even if I disagree with you.

I had a bunch more but I realized I had no way of saying it that would not come across to you as rude, judging by your response to my earlier posts.

"of things in your replys that did make me stop and think about the otherside. but that doesnt mean they will drift away from the original point."
Glad you stopped to think, and at least you know what the other point of view and its arguments are, your one up on me, since you have not "presented your side" so to speak.
Now, I challenge you to make me stop and think about your side.

by tink!

will always be a part of life. Just as advertisements are always there in every medium. So long as there is a service that reaches a multitude of people at once, there will be advertisers taking advantage of it. Postal service has been inundatd with Junk Mail for years now, and that has not gone away. Because to do so would mean creating a law banning such things, which would then carry over into a Freedom of Speech argument. No one wants to go there!

So of course when email service was created, junk email service followed right behind. Can you really hold a company accountable for [b]annoying you[/b]? I could see attempting to go after them if they were mass sending viruses or phishing links. But normal spam that simply advertises services or products just goes along with the flyers you get in your snail mail box.

Just plop them in the garbage/recycle bin.

Tink :)

by oz_media

I agre ewith most of your post however when you say "Can you really hold a company accountable for annoying you? "

The answer is YES. If you ask to be removed from future snail mailings or phone marketig, they MUST cease and desist within a reasonable time frame, which is determined by the depth of their marketing lists. (whether they are maintained at one office or provided to telemarketing offices throughout teh country).

I managed a large call centre once and used ot get the DNC lists and had to get IT to update teh dialler every week. We also had teh CRTC that would call on a regular basis to listen to and monitor agents calls for accuracy of information. I ended up working for the CRTC doing just that, monitoring call centres and agents across Canada.

This discussion is closed to new replies.