Slashdot Log In
FTC Goes After Spammers
Posted by
timothy
on Tue Feb 12, 2002 04:34 PM
from the not-enough-iron-in-that-velvet-glove dept.
from the not-enough-iron-in-that-velvet-glove dept.
klaun writes: "Yahoo has an article about the FTC launching a crackdown on deceptive unsolicited email.
Basically they are after scammers offering easy money quick, not the average 'get porn here' type of spam. There is more info at the in a press release at the FTC's website." TheGreatGraySkwid amplifies, saying that this story "tells of an FTC crackdown on Spammers, that had resulted in charges (settled) against 7 chain-letter ring spammers, and several pending cases. I know I could use some Spam relief..." The settlement, unfortunately, isn't exactly stern stuff: the seven spammers "agreed to refrain from participating in deceptive schemes in the future, or lying about the legality or potential earnings from any such schemes."
This discussion has been archived.
No new comments can be posted.
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
For the lazy (Score:3, Informative)
By Andy Sullivan
WASHINGTON (Reuters) - Federal regulators kicked off a crackdown on the junk e-mail known as ``spam'' on Tuesday with an announcement that they had settled charges against seven people accused of running an e-mail pyramid scheme.
The Federal Trade Commission said that the seven defendants had participated in a chain-letter scam that promised returns of up to $46,000 for a $5 payment. Such chain letters are illegal in the U.S.
The chain letter eventually drew in more than 2,000 participants from nearly 60 countries, the FTC said.
While the consumer-protection agency has targeted some 200 Internet-based scams over the past several years, it has not until now gone after spam.
FTC Chairman Timothy Muris said the agency now had e-mail scams in its sights.
``We're going after deceptive spam and the people who send it. We want it off the Net,'' Muris said at a press conference.
The agency plans to settle several more cases within six months, said Eileen Harrington, the FTC's assistant director of marketing practices.
Spam has long been a hot-button issue for Internet users, who often find their inboxes clogged with unsolicited offers for pornography, fake diplomas, and get-rich-quick schemes.
Internet users received an average of 571 pieces of unsolicited commercial e-mail in 2001, a number expected to rise to nearly 1,500 by 2006, according to Jupiter Media Metrix.
Nineteen states have passed anti-spam laws, but attempts to pass a national law have stumbled over opposition from direct marketers who say their activities would be unfairly limited.
FTC officials said they will go after spam using existing laws that prohibit false or deceptive trade practices.
In addition to chain letters, pyramid schemes and other scams, the agency will target spammers who use deceptive return addresses or do not respond to consumer requests to be taken off their contact lists, said Howard Beales, head of the FTC's Bureau of Consumer Protection.
Spammers are not likely to face jail time or large fines from FTC actions. In deceptive-trade cases, the agency can usually only force companies to give back profits and pursue ''structural'' remedies that modify future behavior.
The seven spammers, who had been sent letters of warning by the FTC in September 2000, agreed to refrain from participating in deceptive schemes in the future, or lying about the legality or potential earnings from any such schemes. In addition, the defendants must return any money they take in from the chain letter in the future, can not share their lists of recruits, and must submit to FTC oversight of their actions.
Some 2,000 other participants in the chain letter received a warning letter from the consumer-protection agency.
While the FTC is preparing a national ``do not call'' list for telemarketers, a ``do not spam'' list would probably not be effective, Harrington said.
Harrington said Web users should forward spam to the FTC for analysis, using the e-mail address uce+ftc.gov. The agency has amassed a database of 8.5 million spam messages, and takes in an additional 10,000 per day, she said.
We need technical measures, not laws, for spam (Score:5, Interesting)
However, I don't believe in making laws against spam. They'll always be outdated and interfere with legimate uses of email, since it can be very hard to define exactly what is spam. (Someone taking my address from a newsgroup posting and trying to sell me printer toner is spamming, but how about an email from a company I bought something from a year ago?)
Adam Back [cypherspace.org] has an interesting proposal called Hash Cash [cypherspace.org]. The idea is that if you want to send me an email, you have to burn some CPU cycles to compute a partial hash collision. I choose how many bits are required. Friends and family can send me email for free. I'll charge a few bits for the store I shooped at last week, and even more for people I don't know. If you're in ORBS or MAPS, perhaps I'll charge even more.
Re:We need technical measures, not laws, for spam (Score:2)
(Note: I dont actually get email from ebay and amazon because I have unchecked those boxes when I registered myself. I just used them as examples of reputable companies)
Re:We need technical measures, not laws, for spam (Score:3, Informative)
Re:We need technical measures, not laws, for spam (Score:2)
Re:We need technical measures, not laws, for spam (Score:2)
What are you basing this 99% on?
Re:We need technical measures, not laws, for spam (Score:2)
If you (or anyone else) has proof that a large percentage of messages have fraudulent opt-out mechanisms, please share it with slash as well as your state representative. I believe what you originally claimed to be largely true, but I suspect we both have nothing better than a hunch, and so shouldn't be stating it as fact if we want to be taken seriously.
Re:We need technical measures, not laws, for spam (Score:5, Insightful)
I think there's a glass houses problem here. Someone who makes no effort to understand how government works has no room to say others "don't comprehend the reality
Neither senators nor new laws are mentioned in this article. This article is about the FTC -- an agency within the executive branch -- applying existing law to spammers.
The FTC is applying the same laws that prohibit mail fraud and phone fraud to email fraud. They're not prosecuting spammers, they're prosecuting people who engage in false or deceptive trade practices, regarless of the medium of communication they use.
Parent
Re:We need technical measures, not laws, for spam (Score:2, Insightful)
Re:We need technical measures, not laws, for spam (Score:5, Interesting)
Cypherspace.org seems to be
The problems I see with such a system:
1. Requires two-way communication between sender and recipient to establish a one-directional message transfer. Potentially could waste more bandwidth than blindly sending out spam does today.
2. Requires end-users to set up "scorefiles" to dictate how much they trust every sender in the world. At best, provides users with no more functionality than existing score-based mail filters/readers.
3. Ties senders' ability to get their message out to the CPU power of their machine. Owners of dual-10GHz Pentathlon systems should not have a louder voice than the hobbyist running sendmail on an old 286.
4. Spammers HAVE CPU cycles to burn--like most of us, their machines rarely run anywhere near 100% load. They will learn to send out their garbage in a slow,steady stream rather than in huge batches so that their machines can handle it--simultaneously making bulk-mailing harder to identify.
Parent
Re:We need technical measures, not laws, for spam (Score:2)
Re:We need technical measures, not laws, for spam (Score:3, Insightful)
First, it will take YEARS to implement any new standard. If you don't believe me, look at IPv6!
Second, any scheme based on charging per email no matter WHAT the details of this scheme is NOT THE ANSWER. It totally hoses things like mailing lists, SMS, autoresponders, email based applications (send an email command, cause something to happen), kiosk email, etc., etc., etc.
Third, (stupid HashCash), how the hell do you hand out a business cards with your email on it and expect people to be able to communicate with you without jumping through hoops.
Bottom line is that SPAM is NOT a TECHNICAL PROBLEM. It's a SOCIAL PROBLEM, like murder, rape, theft, hate crimes, drugs, etc. The reason women don't get raped every time they walk out the door is because we have set moral and legal standards in our society. We need to set those same standards for spam.
No matter WHAT technical barriers you set up, you either make the system virtually unusable (whitelists, auto-responding password challenges,) impractical (hashcash, charging real money, etc.,) or impotent (spammers will find a way around filters...)
Just like we have laws against theft, rape, and murder, we need laws against spam. Sure, we still have some cases of rape, murder, and theft, but I would MUCH rather have a couple spams per year (that I may be able to recover $$$ damages on) than to have a police-state driven, hostile, and unusable email system. These "technological whiz-kid" solutions will screw us all rather than just screwing the spammers.
Think about it.
Names? (Score:2)
Here you go: (Score:5, Informative)
Parent
The FTC sucks at dealing with fax spam (Score:4, Interesting)
Maybe they will actually fund and staff the elctronic incident center, but I doubt it. If they won't deal with spammers in the U.S. what is the chance that they will contact overseas abusers?
My two cents.
Re:The FTC sucks at dealing with fax spam (Score:2)
Re:The FTC sucks at dealing with fax spam (Score:2)
Let's get 'em all... (Score:5, Funny)
I personally feel that the porm spam can be just as deceptive as the EZ $$$ NOW! scams.
I mean, let's be honest -- I'm sure we've all received dozens and dozens of emails saying that someone's site has a ton of free pics and videos of the hottest girls. But generally that's a blatant lie, and the lewd site is a reseller of explicit pornography. They simply tell a fib to get you to click on over to their site, which upon being rendered throws a half-dozen pop-up windows on the desktop.
Let's aim higher rather than just taking out the con artists alone.
Listen To My Latest Recording @ EricKrout.com [erickrout.com]
Re:Let's get 'em all... (Score:2)
Porn sites ads are almost alway technically true.
Free for three days is still free.
now what I want to see is the ability to turn off automatic pop-ups and redirects.
the problem with saying "Spammer must be stopped" is the fact that different typs of spammer may violate different law.
Get rich quick spammers are different then un wanted e-mail spam, which would be protected differently then religous or political emails.
Re:Let's get 'em all... (Score:3, Insightful)
The FTC has gone after [idg.net] "trap" sites -- sites with extremely high numbers of pop-ups, or "hydra" ads. In that case, the domain names were misspellings of other popular domains, but I don't think it's a huge leap from misspelled domain names to misleading spam with forged headers.
I'd also like to see the FTC sue advertisers on both porn and non-porn sites that make their banner ads look like browser dialogs windows.
I'll believe it... (Score:4, Informative)
Re:I'll believe it... (Score:2)
Re:I'll believe it... (Score:3, Interesting)
Configuration is simple and straight forward and it integrates nicely with any email system. Personally I'm using exim to pipe all received email through spamc/spamd and then the mail is received by exim after the spam check. There is only one check for spam per email entering my system.
Spamassassin only flags the email as spam, but it's up to the MUA to actually delete it.
This is log output from exim+SA: 2002-02-12 17:21:35 From: Subject: *****SPAM***** save money for dank X-Spam-Status: Yes, hits=14.1 required=5.0 tests=NO_REAL_NAME, FROM_ENDS_IN_NUMS, INVALID_DATE_NO_TZ, REPLY_REMOVE_SUBJECT, EXCUSE_3,REMOVE_SUBJ, TO_BE_REMOVED_REPLY, SUPERLONG_LINE, FREQ_SPAM_PHRASE, FORGED_YAHOO_RCVD version=2.01 Sender: owner-freebsd-questions@freebsd.org
I'll soon move all my email users' to email filtered by spamassassin. This is just too damn simple.
Freedom! (Score:3, Funny)
Just got this spam today.... (Score:5, Funny)
I hate spam as much as the next guy, but, damnit, that's almost ingenious.
Me too, but . . . Re:Just got this spam today.... (Score:3, Insightful)
That worried me more than actual spam. I'd hate to get falsely accused of sending out "HOT SCHOOLGIRL, GOAT, AND LHAPSO-APSO ACTION!" messages.
Re:Just got this spam today.... (Score:2)
Re:Just got this spam today.... (Score:5, Interesting)
mail from:<targets@address.com>
200 ok
rcpt to:<nosuchmailbox@microsoft.com>
200 ok
data
Subject: pr0n served fresh daily
.
250 ok
Parent
Re:Just got this spam today.... (Score:3, Informative)
You forgot to add the "by default". It is possible to set up an exchange system so that it will not relay and will send a 550 back after looking at the RCPT TO: line.
Slap on the Wrist (Score:4, Insightful)
Re:Slap on the Wrist (Score:5, Informative)
Actually, we do have something very similar (sans fines), it's called Spamhaus [spamhaus.org]. It collects evidence of spamming by companies, finds those companies that own those netblocks, and lists the top spam-friendly hosts in the ISP business.
Sitting at the top of the list is media3, which hosts 5 known spammers has known about them for at least 2,163 operational days (operational days for all 5 spam sources), and acts covertly to support them. Their "score" is thus listed as 5*2163*4 = 42,720, nearly 8 times more than the closest spammers. If you want your spam to decrease significantly, you gotta take out those spammers at the top right at their source.
-Misch
Parent
Re:Slap on the Wrist (Score:3, Flamebait)
Re:Slap on the Wrist (Score:3, Insightful)
You can't have your cake and eat it too. Either the Internet is regulated or it is not. You can't ask the FTC to penalize and enforce the law on spammers when in the next breathe, you ask the government NOT to penalize and enforce the law on intellectual property/copyright.
You feel this way because someone is breaking a law designed to protect you, so you feel violated. Now, the innocent little P2P users may not be hurting you, but they are certainly infringing on laws designed to protect someone else.
Your logic is a great example of the selfish me-me-me whining prevalent in a majority of slashdot posters. Pirated software, MP3s, movies, etc are good because they benefit me!! Don't enforce the laws against this!! Spam is bad because although someone else is getting a free-ride, I am not. Enforce the laws against this!!
Now, I'm not saying by any means that P2P users are evil or should be prosecuted. I just think that before people run around asking for any statutory regulation of the net, they need to think about the flipside of the situation as well. Do you want the net regulated or don't you? You can't have the both and allowing any sort of regulation and enforcement (i.e. spam) only leads the government to further believe that the net should be regulated and all laws fully enforced.
Just my two pennies...
Sometimes I wish I were "average" (Score:2, Funny)
Did someone in Congress finally get SPAM? (Score:5, Funny)
Re:Did someone in Congress finally get SPAM? (Score:2)
When you find out, let me know. Make sure you get their e-mail address so I can forward all of my spam to them.
Re:Did someone in Congress finally get SPAM? (Score:2)
Now it all falls into place!!
court briefs (Score:2)
I like the court briefs for the various spammers they have alreadfy acted against. And I also link them going after more than a thousand more. although it is more in the realm of real crime (chain letters, etc) vs just ordinary spam, what ever that is.
don't forget to forward your spam with full headers to uce@ftv.gov.
the only good spammer is a jailed spammer. although I would love a huge obscene fine to beat them with.
A lot of the spam originates in China, so... (Score:5, Funny)
email for subversive phrases and the like, so just reply to
Chinese spam with little replies of the form at the end of this spam.
Might be a useful tactic on companies who think that unsolicited
email is "just regular advertising".
Bill
"Jack(export manager)" wrote:
>
> Dear Sir
> How are you .
>
> We are a lighting factory in China
> to introduce ourselves to you:
>
> I am XUBIN (Jack) , XUBIN is my chinese name , you can just
> call me Jack !! , I am export manager of [deleted] ,
> China, our group have four factory
[snipped]
>
> Here is our company profile :
>
[Rest of sales talk snipped]
(And now, the reply)
Thank you for your coded order. The weapons and ammunition
will ship by way of the usual route in ten days, and you
already know our secret Swiss bank account number to
wire the payment to.
It is a pleasure doing business with you for so long,
and I hope your cause will prevail. I am new to this
particular computer, so I hope the encryption is
working and the monitoring authorities cannot read
what I am sending you.
Long live the Falun Gong! Free Tibet!
Best regards,
Your arms supplier
Speak for yourself (Score:4, Funny)
Chances are you will receive little or no money back on your "investment." Despite the claims, a chain letter will never make you rich.
Speak for yourself. I made over $46,000 dollars in 90 days, and you can too! and it's totally legal. To learn how, just mail me $5.00.
my understanding from the FTC press release (Score:3, Interesting)
My understanding is that they are going after the chain mail and pyramid schemes, not trying to shut down all the porn email (oooooh, hot girls waiting just for ME!!! WOW!!!) So it won't do anything about the deluge of unwanted email pouring into your inbox, just keep people that are dumb enough to answer the ads from hurting themselves. Like putting nerf corners on the world of email for them
I would rather see some kind of legislation that holds spammers accountable if their "remove' methods do not work. I think a "do not call" type of list would be better than nothing. Filters don't always work, no matter how well you configure them. Maybe a new version of the SMTP protocol that would require a secure connection or authentication by you to be able to send you an email
--insert comment to the effect of "what has slashdot come to posting this type of story
--insert comment to the effect of "if you weren't such a loser you wouldn't get spam"
--insert comment to the effect of "jane you ignorant slut that's not what it says at all"
--insert comment to the effect of "this is all the fault of M$ and their monopolistic practices"
Re:my understanding from the FTC press release (Score:2)
The laws should hold responsible the people who send the spam. If Billy Bob causes 500,000 pieces of spam to be sent, then Billy Bob should go to jail. I don't care if he sent the spam himself through AOL or paid some company to send it through mail servers in China.
The important thing to remember about spam is that there is always a path to the spammer. He may have a P.O. box or a web site or a phone number in the spam, but there's always something that law enforcement could use to find his identity.
amazing (Score:3, Funny)
Deceptive Advertising... (Score:5, Funny)
I am demanding that the FTC require (under penalty of large fines) that all nude teen cheerleaders be photographed with their high school ID showing their date of birth and their high school yearbook turned to the page where their cheerleading squad group picture is.
I think if the web site says "cheerleader" and then the model was actually in the pom-pom or flag squad, the fines should be TREBLE.
FTC Sends Out "Fake Spams" (Score:5, Funny)
When a user clicks on the "unsubscribe" option, their email address is logged by the FTC. The FTC sends an autoreply indicating that using the "unsubscribe" option on spams is dangerous.
-jbn
indecision and inaction (Score:5, Insightful)
This isn't about free speech, or "corporate right to send me ads if I opt-in." Don't worry, those companies make sure they pay someone to remind your senators that their god-given-right to send you ads should be permitted. Too bad the rest of the spam won't really let you work part time from home making $10,000/month while watching a legal cable descrambler, happy with a clear credit record, a really large penis, limitless virility, instant weight loss on demand, and the occasional degree from a prestigious unaccredited school.
There are two reasons spam continues. Welcome to economics:
a) there's still no effective financial deterrent to sending spam, regardless of whether it's ambiguously relevant direct marketing, or utter fraud
b) there is some financial benefit for the senders, regardless of amount
There are plenty of other things you could debate...such as when did spam become accepted? Was it when you -- yes YOU! -- made the unconscious decision that "just deleting" the message is OK. You don't have the time to follow up on the headers. If you're in one of the states that actually ban it, you don't have the time to do something...hell it's not worth the effort. It's just an email, right?
Think of this in another way: If random people each stole one cent out of your bank account every month, would you consider it worthwhile to pursue them? Would you want your bank to develop filters to block all small transactions? Would you think such a loss is unacceptable?
Quite honestly, the actions of civil libertarians and "we'll fix this with technology" advocates has not helped. I filter, you filter, we all delete. Guess what, spammers will continue to find ways around filters, so long as conditions A & B hold true. And every online provider will continue to spend lots of money trying to stop this crap. And every user will continue to hit delete. And people will constantly change email addresses to avoid it, spam filters will continue to mislabel valid email as spam. Stop dealing with the symptoms, deal with the problem!
This isn't a technology issue. You will never get every mail server, client, system, whatever to comply to a block-spam standard. Just look at how long it's taken to get even the basic don't-relay habits in place. This isn't a "but what if I want Amazon to send me my favorite buy-me-now specials." This is an issue that someone in power doesn't give enough of a damn to do something effective to create a financial deterrent that makes it preferrable for these people to steal your money some other way. And yes, unfortunately, we're talking legislation, otherwise you will not send a clear message or provide an effective deterrent. Inconsistency on this means ineffective.
Wow, looking back I'm feeling sorry for the rant. It's simply that this kind of cluelessness annoys me. Time to go delete a couple more messages.
Why? (Score:2)
Why do we listen to the complaints of these direct marketers.. No where in the constitution, do it say you have the right to annoy the piss out of random people and force solicitations down their throats. There is no such thing as good direct marketing. We need to end this bs and outlaw spam at the federal level.
I know on
Re:Crackdowns Unsuccessful (Score:2, Informative)
Re:Crackdowns Unsuccessful (Score:2, Insightful)
Frankly, telemarketers and spammers should be considered time thieves. I guarentee you that one of these guys, given six months to live, would want to waste their time with spam.
That's why it should be illegal everywhere.Re:Normally, a cease agreement is sufficient (Score:2)