Want to read Slashdot from your mobile device? Point it at m.slashdot.org and keep reading!

 



Forgot your password?
typodupeerror
×
Spam Government The Courts Your Rights Online News

First Test of Utah Anti-Spam Law Dismissed 193

fwoomer writes "Apparently, Utah feels that once you've 'opted-in' you can't opt back out as fast as you've opted in. From the story: 'Gillman requested removal on May 14, 2002, from the e-mailing lists his visit to Audio Galaxy a month earlier had linked him to. Two days later, he received a Sprint ad, and on May 28 he filed suit. The court found his attempt to have himself removed from the lists was insufficient to void the pre-existing business relationship.' If he was receiving spam in May after 'opting in' in April, I don't see how it could be unreasonable to expect to be removed from lists as fast as he was added. Unfortunately there's not much detail in this story. A good read, nonetheless." I don't see how signing up with Audiogalaxy establishes a business relationship with Sprint, but, whatever. Presumably some of the other lawsuits filed are against people that have no possible claim to the receiver opting-in.
This discussion has been archived. No new comments can be posted.

First Test of Utah Anti-Spam Law Dismissed

Comments Filter:
  • collusion (Score:4, Insightful)

    by simpl3x ( 238301 ) on Friday March 14, 2003 @05:04PM (#5514645)
    so businesses could group together, making the receipt of "email notifications" part of the terms of service... poof, no more opting out.
    • Re:collusion (Score:3, Interesting)

      by wjvdt ( 621519 )
      I, for one, am surprised to hear that the company actually has an "opt-out" policy. I thought that was just a link they put in SPAM to send you to another site where you'll be added to another mailing list???
  • As to be expected (Score:3, Interesting)

    by unterderbrucke ( 628741 ) <unterderbrucke@yahoo.com> on Friday March 14, 2003 @05:05PM (#5514651)
    If you opt-in, it's quite easy to put an entry to the data entry department. If you opt-out, you need someone who's trained to delete (which believe it or not, is a big deal in the data entry industry).
    • by maddh ( 608481 )
      If you opt-out, you need someone who's trained to delete

      very true, but i'd expect a well designed system just to use a boolean Y or N in the database as to whether the customer wants to receive mail, rather than deleting the whole record. Just because they can't mail to a customer doesn't mean they can't use the info in other ways.

      matt

    • You don't delete someone from your list when they asked to removed, you flag their account as "do not mail." That way, if they are added again at a later date you know not to mail them.
    • Give me a break! (Score:3, Interesting)

      by redgekko ( 320391 )
      Actually, I think the bigger issue is that most companies hire out third parties to spam their mailing list.

      For example, some of my web design and hosting customers pay me to send out their newsletters (strictly opt-in). Say company X sends me their newsletter and mailing list on Feb 25th to be mailed out on March 1st... if somebody decides to opt-out on Feb 28th, they're still going to get the March newsletter because I don't maintain the list.

      I think it's only fair to give companies a few business day

    • Uh yeah, it's a real bitch!
      If you have a user system on the site, you need to add a check box and a boolean value to the user table.

      If you have a mailing list, it is hard to add a url in the end of the mail contains a ID number of the user record and a "random" 32 byte code that can be cross verified with the record in the database.
      Or finally maybe just a url with the email as a value, that will send you a unsubscibe verification mail. You know, much like people really should have verifications mails wh
  • by kawika ( 87069 ) on Friday March 14, 2003 @05:06PM (#5514661)
    Do you think that AudioGalaxy connects to all its partners in real time when it comes to sharing email addresses? If they generate a list for their partners every week, for example, wouldn't it make sense that it also takes at least a week to get off the list? I'm against spam but I'm also for common sense. Which this guy didn't seem to have when he gave permission to be emailed in the first place.

    • by iplayfast ( 166447 ) on Friday March 14, 2003 @05:12PM (#5514744)
      However AudioGalaxy does it, isn't really our worry. They may have a central database, that others use, or they may make a list and send it out world wide. The point is, if you've opted out, from a list, then you have opted out from the list. Perhaps the spammer, should send their emails though AudioGalaxy to be sure that the addresses are still optin.

      I don't know the particulars of the case, but it seems to me, that if a company is providing an opt out service, it should work. The details are the companies problems. (but the judge didn't see it that way :(
      • What a load of junk.

        Did the guy receive spam the day after he opted-in? The day after that? What if it didn't start for a week? Then why should he expect the opt-out to be any faster than that?

        If you bother looking at the various state opt-out programs you'll see that they're handled quarterly - if you sign up for it on Dec 31 then you'll be opted-out starting Jan 1. If you sign up on Jan 1, however, you'll need to wait until the next time the list is distributed - usually Apr 1. The dates may vary, but i
        • They also preschedule mailouts to occur so they don't overload the mail server. So your next two or three weeks of spam may have been queued up a month in advance.

          I hate spam as much as anyone else I know, but I'll give some spammers the benefit of the doubt. If a legitimate company sends me spam, then I deal with them directly if possible. It might not get me off every list a middleman sold, but at least I know that the legit company doesn't want to piss me off by sending me more junk I don't want.

          And af
    • Do you think that AudioGalaxy connects to all its partners in real time when it comes to sharing email addresses?

      Good point. The question is what does the law say about how long until the SALE stops? Remember, once somebody has purchased the list, it may not be able to be revoked by the seller. In which case, you have to track down who it was sold too and remove yourself from their bright shiny new list.

      And so on, and so on, and so on...

    • What a stupid law suit. You really do need to give them about a month. This suit just strengthens the side of the spammers (the lowest form of life).
  • Why Sprint? (Score:3, Insightful)

    by The Turd Report ( 527733 ) <the_turd_report@hotmail.com> on Friday March 14, 2003 @05:06PM (#5514666) Homepage Journal
    I don't see how signing up with Audiogalaxy establishes a business relationship with Sprint, but, whatever

    Most likely, the agreement to opting in to AudioGalaxy includes recieving offers from third parties.

  • what?!?! (Score:4, Insightful)

    by garcia ( 6573 ) on Friday March 14, 2003 @05:06PM (#5514676)
    Unfortunately there's not much detail in this story. A good read, nonetheless.

    A "good read" has lots of details, not media bullshit. Remember that submitters and staff before posting a story please.
  • by Anonymous Coward on Friday March 14, 2003 @05:09PM (#5514710)
    This was clearly outlined in paragraph 7 of page 83 of the AudioGalaxy Terms of Service. It's right below the paragraph outlining the rights to your lungs in case of death by bear mauling. I don't know you could miss it, it was in huge 1pt print.
  • by poofmeisterp ( 650750 ) on Friday March 14, 2003 @05:11PM (#5514729) Journal
    What does it matter if you opt-out of a mail list?
    Once you've opted in, the third party can then sell your address again and you then have NO way of tracking it around.
    Unless a system identical to the national "Do-Not-Call Registry" can be established for email addresses, there's not a damn thing you can do about spam in relation to opt-in/opt-out lists.
    • by scottm52 ( 544690 ) <(moc.liamg) (ta) (golbnilcamniw)> on Friday March 14, 2003 @05:20PM (#5514849) Homepage
      Not far off the mark.... However, if one state does establish a no-spam list (like the no-call lists) a HUGE impact against spammers would be felt.

      For example...

      1) State has "no-spam" act...
      2) You get spam
      3) You report spam
      4) State gets enough complaints to act (not many really)
      5) State AG office actually buys something, traces the $$$, gets the bank acct data.
      6) State AG gets Court Order freezing the $$Bank Accts$$ until trial concludes.
      7) Trial occurs or spammer settles

      Result? Just a couple of these from a single state and since spammers don't know where they're sending email, they're gonna get real scared, real fast.

      I only hope the Missouri No-Spam act (pending) will end up implementing an approach like this one.

    • It's a good thing all the spammers are here in the U.S. where they can be stopped by a U.S. law like this.
    • by oliphaunt ( 124016 ) on Friday March 14, 2003 @06:00PM (#5515209) Homepage
      Unless you use sneakemail. [sneakemail.com] Whenever I encounter a webform where it seems like I need to provide a valid email address, e.g. to recieve a tracking number or an initial PIN code or some such thing, I just pull up sneakemail, create a new address, label it with the date and the party who is getting the initial address (March 14 03, audiogalaxy).

      That way, if audiogalaxy sells that address to someone else, not only do I know where that someone else got my address from and (approximately) when it must have happened, but (and this is the important part)

      I CAN CUT THEM OFF
      Sprint can send as many emails as they want to the address from audiogalaxy... that address is no longer valid, because sneakemail let me kill it.

      yes, i'm a paying subscriber, and i've been using it for about 2 years now.
  • by Metallic Matty ( 579124 ) on Friday March 14, 2003 @05:12PM (#5514742)
    I agree with the comment; how does opting in for Audiogalaxy ammount to a Sprint ad?

    I may be a member of the ASPCA; but I don't expect to receive credit cards in the mail as a result..
  • by TrollBridge ( 550878 ) on Friday March 14, 2003 @05:13PM (#5514752) Homepage Journal
    I don't get a whole lot of spam, and I suspect it's because when I DO get spam, I NEVER click on the "Click here to remove yourself from our mailing list" link.

    For those who don't know this already, all that does is validate that there is a user who actively checks/reads that email account. A list of valid email addresses is VERY valuable to other spammers, who eagerly shell out the $$$ so they can send you MORE spam.

    So in reality "Opting out" often will only bring you MORE spam, not less.

    • by slamb ( 119285 ) on Friday March 14, 2003 @05:20PM (#5514841) Homepage
      So in reality "Opting out" often will only bring you MORE spam, not less.

      Yes, when I get random emails claiming to be opt-out lists or that I opted in, I also don't opt out for this reason.

      But this is a different situation. He opted in to a list with Audiogalaxy. A relatively reputable place, and they already knew his email address was valid because he opted in. It was a reasonable thing to do, and the spam should stop afteward. But judge apparently felt it was not practical for them to have distributed that notification to all their partners in two days, so he threw out the lawsuit. Presumably it takes them that long to distribute opt-ins also.

    • I Agree that "click to remove" just validates the email address to the spammer.

      Since I started using Kmail, I just use the option to bounce the message back.
    • Except that now, many spammers are sending <IMG SRC="http://spammer.com/img.gif?email=spammed@user .com">.

      So they've got your address the second the mail is opened (if your client defaults to HTML mail. The only flaw in Apple's mail client).

      Time to add a new filter...
    • For those who don't know this already, all that does is validate that there is a user who actively checks/reads that email account. A list of valid email addresses is VERY valuable to other spammers, who eagerly shell out the $$$ so they can send you MORE spam.

      No one wants to mail to a remove list. There are plenty of people who will read spam and buy the products. People who want to be removed won't buy anything anyway, so there is no point in mailing them. Additionally, those people are the ones who
  • Partners bullshit... (Score:5, Interesting)

    by Fnkmaster ( 89084 ) on Friday March 14, 2003 @05:14PM (#5514775)
    All the opt-out list systems are just encouraging businesses to set up "partnerships" solely for the purposes of exchanging direct marketing data. I don't want calls from AT&T's "exclusive partner" in marketing baubles, trinkets and bullshit. I set up a business relationship with AT&T to provide me with phone service, period. If they call me to offer a new phone plan, fine, I can tolerate that, it's within the bounds of our business relationship. If their "exclusive partner" calls to offer me baubles, trinkets and bullshit ("exclusive promotional offer to sign up with suckourballs.com"), they can blow me.


    I plan on taking a stand against this personally by breaking off business relationships with companies that insist on sharing my data with their "exclusive marketing partners" and crap like that. I signed up for the Massachusetts State Opt-Out list for a reason.

    • My father tried this already. He's found it impossible to do business with anyone because somewhere in EVERY company's paperwork, there's a caluse that allows them to share your information. Even if there's a separate entry that states they will not share it, it's overridden by another section (or whatever.)
      My father and I, through extensive testing, have discovered that the only lists that you can effectively opt-out of are the ones that drones gather as points of sale in stores (phone, email, address, e
      • Even then (as was the case with Radio Shack before they changed their info gathering techniques) some companies will refuse to proceed with a sale unless you provide them with this information.

        Back when Radio Shack 'forced' you to give info, I would just say 'no. either put in your own info or refuse to take my money and I will just order the parts'. it freaked out many a sales rep, but I never gave the info, and they never refused to sell to me.

        And since I am here (OT): What is the deal with 3/4s of
    • I plan on taking a stand against this personally by breaking off business relationships with companies that insist on sharing my data with their "exclusive marketing partners" and crap like that

      So who are you going to bank with? What about insurance? Home loan? Car loan?

      I can help you on one front at least - State Farm does not share it's data with 3rd parties. Or at least the branch of State Farm that I still have a policy with - I don't recall which one that is. It was pleasant to read through their no
  • by Hayzeus ( 596826 ) on Friday March 14, 2003 @05:19PM (#5514825) Homepage
    ... because in no other era could my penis have had this much correspondence dedicated to its well-being. We're living in a Golden Age, people, but none of you appreciate it...
  • Two points of note (Score:5, Interesting)

    by eaolson ( 153849 ) on Friday March 14, 2003 @05:21PM (#5514855)
    The Sprint lawyer quoted in the article says, "The purported purpose of all these statutes is mainly to stop unsolicited pornography and scams." Funny, I thought the point of the anti-spam law was to stop spam, not porn.

    Secondly, without using tagged addresses, how are we, as end users, supposed to know if we've "opted in" to receiving an email? (This assumes the email in question in this article was not sent by AudioGalaxy on behalf of Sprint, but by Sprint itself to a list it bought from AudioGalaxy.) For example, if I sign up for AudioGalaxy on Monday, they sell their list of addresses to Sprint on Tuesday, and Wednesday I get emails from both Sprint and MCI. The Sprint one is "legit," the MCI one is not, but there's no way to differentiate between them.

    • by BWJones ( 18351 )
      The Sprint lawyer quoted in the article says, "The purported purpose of all these statutes is mainly to stop unsolicited pornography and scams." Funny, I thought the point of the anti-spam law was to stop spam, not porn.

      Separating the two is obviously a problem wherever you are given all of the porn that surprises you as unsolicited email. However, you have to understand the obsession that people here in Utah have with porn. Until just a couple of months ago, we (Utah citizens) were paying a "porn czar
      • yet in terms of per capita consumption, Utah county has the highest rate of cable porn subscription in the nation.

        My bullcrap-meter is pegging. I'd like to know how you can make that claim, especially considering how secretive the companies are about their adult entertainment revenues.
        • by BWJones ( 18351 ) on Friday March 14, 2003 @06:53PM (#5515655) Homepage Journal
          My bullcrap-meter is pegging. I'd like to know how you can make that claim, especially considering how secretive the companies are about their adult entertainment revenues.

          There was a big legal case where a local video store was accused of distributing porn and this was part of the findings. See this link [star-telegram.com] for details.

  • by Gunzour ( 79584 ) <gunzour@nosPAM.gmail.com> on Friday March 14, 2003 @05:28PM (#5514926) Homepage Journal
    From the article, it seems that this is what happened:

    - User signs up on website run by company A (Audio Galaxy)
    - company A sells User's email address to company B (Sprint)
    - User opts-out on company A's web site
    - User gets spam from company B

    I hate spam as much as everyone else, but I don't see how this can violate any law. If the User opted-in, which it appears he did, and then later opted-out, Audio Galaxy can't be expected to go around to everyone they sold his email address to and say "Hey, that email we sold to you before? Stop using it!" Audio Galaxy should stop selling his email address at that point, but that would have no effect on the apparent sequence of events here.

    If anyone is able to find the actual court ruling I'd be interested in reading it. I don't see where the "existing business relationship" exists (for all we know he may be a Sprint customer), but if the events happened as I listed, I don't think it's relevant.

    • He opted in to receive promotional material from Audiogalaxy's partners. He later opted out, but still received promotional material from Audiogalaxy's partners. That is exactly how it can violate a law. Yes, I do expect them to call up everyone they sold his email address to and say "stop using it" If they are going to sell email addresses of their customers, they need to provide a way to do that, or they are being irresponsible.

      However, I think there should be some room for a resonable time to proces
      • Yes, I do expect them to call up everyone they sold his email address to and say "stop using it" If they are going to sell email addresses of their customers, they need to provide a way to do that, or they are being irresponsible.

        Personally, I don't see why they can't use the same distribution method for opt-outs as they use for opt-ins. Naturally I'm assuming that all partners are reputable and would respect the opt-out list...

        And that can enforced somewhat - say a user opts out, Audiogalaxy forwards

      • If they are going to sell email addresses of their customers, they need to provide a way to do that, or they are being irresponsible.

        I would argue that simply selling the email address in the first place is being irresponsible, but if their privacy policy discloses that, then it is your responsibility to choose whether or not to give them your email address in the first place.

        Let's be realistic, everyone knows there is a lot of spam on the internet. If you can't take basic steps to protect your email ac
    • I hate spam as much as everyone else, but I don't see how this can violate any law. If the User opted-in, which it appears he did, and then later opted-out, Audio Galaxy can't be expected to go around to everyone they sold his email address to and say "Hey, that email we sold to you before? Stop using it!" Audio Galaxy should stop selling his email address at that point, but that would have no effect on the apparent sequence of events here.

      So every slimeball company would form a second company called "ema
      • So every slimeball company would form a second company called "email address holdings [inc]" and immediately sell them your email address upon opt-in. From this point, even if you opt out, EAHI has full rights to keep spamming you and selling your address for ever?

        Well, yes. How do you think we get so much spam in the first place? Spam companies already do stuff like this; it's how they weasle out of anti-spam rules in acceptable use policies.

        I don't think anyone could sanely call that an opt-out.

        Pr
    • If I'm signing up with an email list from foo.com, I only expect mail from foo.com. If I want mail from bar.com, I'll sign up on their list *myself*.

      If foo.com wants to sell my information, they should make this clear to me when I sign up, as I will re-evaluate if I want to sign up. If not, I consider it their responsibility to take me off bar.com's list (and whoever bar.com sold their list to)
      • Then I suggest you read foo.com's privacy policy carefully before you give them you email address in the first place. If you really don't want them to sell your email address, it is *your* responsibility to make sure they won't. Be realistic: you know many companies sell email addresses, and you know that even if you expect them to take you off of their customer's lists, they won't.
  • False Assumptions (Score:3, Interesting)

    by dev_sda ( 533180 ) <(nathan) (at) (unit03.net)> on Friday March 14, 2003 @05:31PM (#5514957) Homepage Journal
    In the article, the sprint attorney Paul Drecksel makes this statement:

    "The purported purpose of all these statutes is mainly to stop unsolicited pornography and scams," Drecksel said. "But what we find in practice is that these laws do nothing to stop those two bad acts. Those companies are here today, gone tomorrow, so lawyers can't make any money pursuing them."


    Apparently Paul doesn't have enough spam to really help him understand that spam is spam, regardless of wether it comes from a large "deep-pocketed" company, or a small time bedroom spammer.

    Coincidentally, his email address is pcd@pwlaw.com
  • "Reasonable" time (Score:3, Insightful)

    by linuxwrangler ( 582055 ) on Friday March 14, 2003 @05:36PM (#5515016)

    "Arent said her bill's language could use some fine-tuning, included (sic) providing e-mailers reasonable time to comply with requests for removal."

    It seems to me that in this connected electronic world the maximum "reasonable time" for removal would be the amount of time it takes to add someone.

    If you plan to share the data with your "partners" then you should be damn certain that you have a mechanism in place to effect removals from all associated databases just as fast.

    This would of course only apply to time of message origination - you can't unregister on Monday and then sue on Tuesday for receiving a mail sent on Sunday but stuck in an intermediate server.

  • With how quick he was to sue Sprint, I wouldn't be surprised to find out that he had some kind of plan to do this.

    Why would he opt-in one month, opt-out the next, and then sue 2-days later the second he gets another piece of spam?

    Seems awfully orchestrated to me.
  • a way to get proof (Score:4, Insightful)

    by standsolid ( 619377 ) <kenny@nOspaM.standsolid.com> on Friday March 14, 2003 @05:40PM (#5515059) Homepage
    buy a domain name (or get a free subdomain from someone -- whatever). I have all my email directed to one account.

    so for signing up with any service i use this address

    joebob-audiogalaxy@junk.foofoofoobar.com
    or
    jo ebob-slashdot@junk.foofoofoobar.com

    and that redirects to my real email address

    joebob@foofoofoobar.com

    any email with To "junk.foofoofoobar.com" i direct to a spam folder. If i find a site that vlaims it won't sell my information, but magically sprint is emailing my audiogalaxy address... it tends to perk my ears up. Proof.
    • by Zlurg ( 591611 )
      This isn't too bad an idea. Maybe we can start harvesting deliberately bad email addresses and deliberately honeypotting those who send to it and publish the list to everyone else with an idle DNS & SMTP server so they can do the same thing. Maybe we could band together and bring the 'Net to a fucking CRAWL with all our nonsene.

      I'm only half kidding with this. I have an idle DNS / SMTP server, and we can make up a domain name not likely to be guessed, like dhxlwqgm.com and that way we KNOW anyone s
    • Good idea, but what do you do about messages where you've been bcc'd - for example some mailing lists do this ligitmately but spammers often do too. Do you blanket ban these or use further filters in these cases?

  • Opting Out.... (Score:3, Interesting)

    by telstar ( 236404 ) on Friday March 14, 2003 @05:41PM (#5515068)
    I usually just block it instead of opting out, but I've found that SO MANY TIMES when I try to opt out, their servers never seem to respond. Surprisingly, their opt-in servers never have the same problem.
  • Telemarketers (Score:5, Insightful)

    by stratjakt ( 596332 ) on Friday March 14, 2003 @05:51PM (#5515146) Journal
    You have to give telemarketers 30 days to remove you from their lists when you ask. I dont see how online spam should be different.

    If you opt in, and then later opt-out, and get an e-mail 2 days later, I don't see it as some great evil. You shouldnt have opted in in the first place.

    You all need to chill pushing for all these spam laws, regulating the internet is a bad thing in the end. Do you really want your real name and SSN tied to your e-mail account for the sake of ending spam? (Because thats about the only solution the government will come up with).

    Beef up your filters and accept it.
    • Re:Telemarketers (Score:4, Informative)

      by oliphaunt ( 124016 ) on Friday March 14, 2003 @08:22PM (#5516245) Homepage
      Really, this is ON-topic... just not till the last point i guess :-/ This filter suggestion you have:

      Beef up your filters and accept it.

      is good. Your logic about the marketers needing 30 days is also reasonable. But since this is a board for nerds, I think it warrants something more involved... you want maintain control over your mailing addresses, and whether or not you recieve mail sent to them. The solutions are out there- you just need to take a few minutes to put the pieces together.

      I just started using a new account for my main email address, and I'm taking this opportunity to try to break the chain of spam that I developed over 6 or 7 years of using my last address at a .edu domain. What steps am I taking? (note- of course, this is a linux-centric view. If you're using hotmail/outlook/AOL, and you're really concerned about the spam you get, my only suggestion is "find something else.")

      1. Set up Procmail. [uchicago.edu] If you're root, it's a little more involved... if you're not root, odds are procmail is already running somewhere on your system. "man procmail", "man .procmailrc", "man procmailex" should be enough to get you going.

      2. Use Spamassassin [spamassassin.org]. Once again, if you're the only user on your domain, it's more work because you have to dl/install/configure the SA program. Lucky for me, i don't have root on my mail domain, and my friendly new sysadmin had it running already- so all I had to do was set up a new procmail recipe like this one. [spamassassin.org] In fact, i think i used that one, exactly.

      3. Use sneakemail [sneakemail.com] to generate new email addresses for any public post/contact information. Point the sneakemail account you set up to your real address. Don't ever list your actual REAL address ANYWEHRE that a bot can pick it up off the web. Don't give it out to anyone on the phone. Don't use it to send email to anyone at hotmail. Don't list it in the text on your resume or write it out in your .signature. Don't fill it in on warranty registration postecards.

      #3 is the really important one- which is why i brought it up in an earlier post in this thread. You probably have another account that is getting a lot of spam right now, which is why you've read this far. So you .forward that address to your new address, where everything that comes in gets run thru procmail and SA just like any new mail. Procmail lets you set up separate delivery folders for mailing lists, so if you use Sneakemail every time you join a new mailing list, or give your address to another company online, you can direct mail coming to that address into its own folder, because sneakemail tags the "From:" headers with information as to which address someone is sending mail to. SO- to take this particular case in point, you make an "audiogalaxy" sneakemail address, and when you get spam from Sprint on the audiogalaxy address, you know that audiogalaxy sold you out. So you call them up, complain, AND THEN YOU LOG INTO SNEAKEMAIL AND TURN THEM OFF.

    • If you opt in, and then later opt-out, and get an e-mail 2 days later, I don't see it as some great evil. You shouldnt have opted in in the first place.

      Yep, I reckon the guy filing suit might well be a prototypical /. reader.

      "Two days to process my opt-out ? WHAT GIVES !!! Why don't you just set up a real time XML opt-out data transfer so it gets processed in less than 3 seconds ! Thats what I'D DO if it was my web site cos I'm a goddanm IT genius !!!!"

      For frick's sake stop moaning ! If only all the s

  • Common Sense (Score:4, Insightful)

    by Apple Acolyte ( 517892 ) on Friday March 14, 2003 @05:54PM (#5515169)
    For the love of God, please don't bring the government in to regulate the Internet! That's a can of worms I wrongly assumed slashdotters would decry. Common sense dictates that one company cannot be automatically beholden to another's privacy policy. Each company dictates its own terms concerning information collection and privacy. And each firm has its own opt out policy. If AudioGalaxy shares your address with Sprint, and Sprint shares information with spammer C, AudioGalaxy shouldn't be held responsible for the spam that you receive from spammer C, D, E etc. . . AudioGalaxy and Sprint could have been acting in good faith.

    The majority of the responsibility here belongs to the individual. If a firm handles addresses improperly, it's the user's choice whether or not to continue using the service. No company is forcing any user to subscribe to their services. Use some common sense - protect your main address by only giving it out to those you trust, and give everyone else a separate address. That's how I keep myself spam free.

  • Return it Right Back (Score:3, Interesting)

    by ShwAsasin ( 120187 ) on Friday March 14, 2003 @05:55PM (#5515177) Journal
    If the courts have decided that you've got a business relationship, could you send sprint employees mail as well with the message at the bottom which reads "This email is permitted under the terms of the court identying that Spring and ____ person have a business relationship."? Although it sounds very childish, is possible to throw it back in their faces?
    • by adzoox ( 615327 ) on Friday March 14, 2003 @06:11PM (#5515293) Journal
      Very interesting LA Law style tactic. Good suggestion. A local to me tried something similar. He said that our local paper was invading his private space and trespassing. He claimed that the local paper delivery boy was doing nothing more than scouting the place out for late night heists of our condo property when delivering the weekly free sampler paper.

      I believe the local court ruled similarly saying that, one person gets the paper and OTHERs at my place enjoy getting the weekly sampler so EVERYONE should have the benefit of the free paper and delivery to your door. The plaintiff, after losing delivers 50 weekly samplers to the door steps of the court house EVERY week now. About two weeks ago, the city filed a lawsuit for littering. He is claiming that a few people like the repository and actually pick up the paper to read and that a few people inside get regular delivery of the paper. The weekly sampler also includes the arrests listings for Greenville County, he's claiming "informational association" - it's been entertaining to watch.

  • by poot_rootbeer ( 188613 ) on Friday March 14, 2003 @06:04PM (#5515235)
    I don't see how signing up with Audiogalaxy establishes a business relationship with Sprint, but, whatever.

    I don't see how being a Slashdot Editor gives you justification for attaching your comments to the story submission instead of leaving a comment like everyone else, but, whatever.

    Time, I think, to go to Preferences and banish Michael to the bit bucket. I'm sure Jon Katz would be glad to switch places with him.
  • The judge was 100% correct. The technical part of what is happening is that site P (Provider) gets your email address and adds it to it's database.

    Site P's database is sold to company B (Broker) on a monthly basis. Company B replicates the information from the database once a month on a given date.

    Company C (Consumer) buys the rights to send email to company B's list once a month.

    If then you request not be be spammed from site P a month later, you must not expect that this change will be reflected imme
  • Here is the scoop (Score:5, Interesting)

    by ..... ( 133478 ) on Friday March 14, 2003 @06:31PM (#5515467)
    The basic facts in the article are right: Gillman opted-in to GroupLotto's list to receive stuff, then some time later opted out. A day after he had opted-out, a received an email from Sprint, an GroupLotto "partner". Gillman sued.

    Sprint moved for summary judgment on four grounds:
    1. Sprint itself did not send the email
    2. The email was sent unitentionally
    3. Gillman had consented to receive the email
    4. Gillman had a preexisting relationship with Audiogalaxy that made the email not "unsolicited."

    The court decided as follows:
    1. The law defines the spammer as either the sender, or the one who causes email to be sent. So Sprint is still a spammer.

    2. This argument calls for a factual judgment, so it isn't appropriate to rule on as a matter of law.
    Sprint basically said that it was GroupLotto's fault that it was sent -- Sprint only wanted to send to opted-in people. Thus the sending was unintentional. However, there are several issues about what the different parties obligations are, so this claim was rejected.

    3. Sprints third argument was also not suitable for summary judgment. Sprint argued that at the time Sprint contracted with GroupLotto to send the email, Gillman was opted-in, and had therefore consented to receive the spam. This argument was partially based on a "two-to-three day" unsubscription time that Sprint claimed was standard -- Gillman could not have expected that he had opted-out until several days had passed. However, there was no such temporal disclaimer from GroupLotto, and it was granted that Gillman had unsubscribed by the time the email was actually sent. This issue of fact was unsuitable for summary judgment. Therefore, it is explicitly undecided if the fact that the email was "in the pipeline" when Gillman opted-out makes it spam or not.

    4. For this argument, Sprint argued that Gillman had a preexisting business relationship that made the spam not "unsolicited." Unfortunately, they were right. The Utah law reads as follows:

    "commercial email is not 'unsolicited' if the sender has a preexisting business or personal relationship with the sender."

    The law makes no provision for discontinuing a business relationship. Thus, you have a "preexisting business relationship" with *anyone* you have ever done business with under the Utah law.

    The judge noted that this is probably not what the legislature meant, but still, she was constrained to follow what they actually passed into law, not what she thought they meant.

    There were a few other problems with the case, but that one flaw was enough to grant summary judgment.

    • "commercial email is not 'unsolicited' if the sender has a preexisting business or personal relationship with the sender."

      Yeah. That's naff, alright. In this case, from what you say, it raises the whole question of what to do about bastards who sell your name on: you don't have any direct business relationship with them, so you can't have opted in... hmmmmm.

      "but still, she was constrained to follow what they actually passed into law, not what she thought they meant."

      Pretty pathetic, if you ask me. There
  • Check out this new forum for discussing spam: http://antispamist.dyndns.org/forum/index.php [dyndns.org]
  • First off, hooray to the submitter for slandering the entire state of Utah. We need more of that on /.

    Those of you who read the article will note that the guy asked to be removed and then two days later got "spammed" by Sprint. Two days is not enough time to be removed. This is something he signed up for. It doesn't mention if he continued to receive spam afterwards.

    The truely annoying spam is the spam that you never sign up for. Where your email address has been snatched by a spider and there is n

  • Something to try: (Score:4, Insightful)

    by interstellar_donkey ( 200782 ) <pathighgate AT hotmail DOT com> on Friday March 14, 2003 @08:00PM (#5516131) Homepage Journal
    Not that it's worth anything, but who knows. When I get spam from a reputable company, I typically try to find their customer service email address and send them this little form letter. I doubt that it does any good, but if enough people showed the larger corporations that we don't want spam, perhaps the meat and potatoes of the spam mailing list scumbags would be dropped just a little.

    Dear: Company

    Today I received an unwanted, unsolicited email from your company (spam). I always believed that your corporation was honest and forthright, and it is beyond my comprehension why you would decide to set yourself alongside pornographers and scam artists by using unsolicited spam email.

    Regardless of what your spam mailing company has told you, I have never consciously 'opted in' to receive email from them, you, or any of their partners. They have either gained my 'approval' using deception or trickery, or they have simply lied and found the email address somewhere on the Internet. In either event, I have never, nor will ever want to receive unsolicited spam email. In other words, I don't want to get this type of mail. Ever. And I have never actively asked to receive it.

    Spam mailing companies such as the one you use are corrupt and crooked. These are not honest businesses. And I cannot with good conscious do business with any company that chooses to partner with near criminals to conduct marketing. As such, I will not do business with you until you stop associating with these shady organizations.

    Please do not forward this to your spam mailing list provider in a show of 'good faith' to 'opt me out'. All this will do is inform them that this is a valid email address, and place me on numerous other mailing lists. Like I said, these are not honest business people. If you doubt this, ask them exactly where and where I 'opted in' to get this junk. Ask them why they often use different and misleading domains to get around my 'block sender list'. They will be unable to provide you with an answer, because I have never actively 'opted-in', and they will try every trick in the book to get their junk through. Again, this is because they are dishonest.

    If you decide to stop using this sort of unethical marketing, please inform me. I would be more then happy to continue doing business with you.
    • Please do not forward this to your spam mailing list provider in a show of 'good faith' to 'opt me out'. All this will do is inform them that this is a valid email address, and place me on numerous other mailing lists. Like I said, these are not honest business people. If you doubt this, ask them exactly where and where I 'opted in' to get this junk.

      Otherwise excellent and bang on-message, but I suspect this bit needs some more thought. Company C are to ask spammers S when and where recipient X opted-in,

    • ...the problem with this is that if your approach becomes common, you can "anti"-spam your site. If you own foo.com competing with bar.com, simply send out lots of spam for bar.com. Since they won't know jack shit about the spam, they won't be able to prove anything one way or the other, causing customers to move to foo.com instead.

      The key issue is, you need to get to the senders. Punishing the company will eventually lead to wrong conclusions if the spammers are smart enough.

      Kjella
  • by perlchild ( 582235 ) on Friday March 14, 2003 @08:09PM (#5516211)
    But doesn't that "SCREAM" that selling "email-based permission" lists illegal?
    After all, if business A sells your email address for 2.95, and business B sells it to C for 5.95 and business C does something illegal with it, how would business A sue business C for illegal use? It can't, and that places the burden on the customer. But since you can't limit WHO they sell your "permission to" (obstruction of commerce) that means you're writing them a blank check, with little to zero chance of ever having your rights respected. (the amount of spam makes prosecution for a single spam unlikely in the extreme) YET each spam is an individual crime, that must be investigated seperately.
    There is also the question of just how "valid" the permission you gave to A for purpose X be translated to C for any purposes other than X... And with X usually being "promotions related to a product I bought" X is of little sale value to C... purpose Y is however, very valuable... Hence C wants to buy address "blue" from business A, for purpose Y, now if purpose Y wasn't known at the time permission was given, how can permission be considered to have been given(say permission to advertise an invention that didn't exist when blue gave permission to A)?
    Doesn't the burden it places on the victim(the person whose rights have been abused, by receiving mail whom in most other contexts would be considered illegal) signify to legislators that

    1) to properly track when a permission is given, when most spammers close up shop within a few days and just reappear with the same list, under a different company, require an independant registry of permissions?
    2) to be able to correlate permission with origins of spam, you require to be able to track the origin of any single email message. By that reasoning wouldn't sending a message with forged header be considered illegal until proven otherwise(a bit like how a radar detector or any other device that allows one to bypass enforcement of a law illegal)?
    3) Since permission would have to be tracked by purpose and by sender, shouldn't access to that single registry be paid for to cover administration costs? And once headers are fully considered thrustworthy again, shouldn't it be possible to bill per spam sent?

    I think those are all valid questions, that the legislators should consider
    • It's been a long time since I took algebra, and I'll admit I got a little lost in the A B C...X Y Z of your post.

      I remember reading AudioGalaxy's agreement saying that selling the list is how they support their service. Unless legislators want to make it illegal for me to enter into such an agreement, these agreements are going to be around.

      Here's the thing: If you give me permission to sell information about you, and I sell it to someone who does something illegal with it, am I complicit in the illeg

Get hold of portable property. -- Charles Dickens, "Great Expectations"

Working...