Please create an account to participate in the Slashdot moderation system

 



Forgot your password?
typodupeerror
×
Spam Microsoft Your Rights Online

Microsoft Will Sell Whitelist Services For Hotmail 380

Ec|ipse writes "Looks like Microsoft has found another way to make money, this time from spam. Microsoft has adopted a "whitelist" program (Bonded Sender by IronPort) which will allow marketers to pay Microsoft so that they are included on a special whitelist, guaranteeing uninteruptable delivery of their messages to Hotmail and MSN users. You can catch the full article at Excite. I especially like the nice naming for spammers, calling them 'marketers' sounds so much more legitimate." mgibbs adds "Hopefully the $20K fine that results from abuse of this system is enough to deter spammers."
This discussion has been archived. No new comments can be posted.

Microsoft Will Sell Whitelist Services For Hotmail

Comments Filter:
  • by Richardsonke1 ( 612224 ) on Wednesday May 05, 2004 @08:44AM (#9062290)
    Sorry to give you one less reason to hate MS, but they are taking the money as a BOND, not as payment. MS only gets the money if the spammers don't follow their rules. Probably something like "must use real return address and have a unsubscribe link that doesn't add you to more lists."
  • by Saggi ( 462624 ) on Wednesday May 05, 2004 @08:48AM (#9062334) Homepage
    In Denmark the marketing rules forbid people to send uninvited marketing material. Unless you specifically accept to receive it - it will be illegal (and punishable by court) to send it. This law is not only to electronic e-mails but goes to all kinds of marketing. You are not allowed to call by phone to someone in order to sell them something (unless the user has registered his phone number somewhere and accepted to receive a phone call).

    So unless you check the checkbox somewhere in your hotmail registration, you will be able to sue MS - in Denmark at least...
  • personal experience (Score:5, Informative)

    by astanley218 ( 302943 ) <adam@ne t h o s t e rs.com> on Wednesday May 05, 2004 @08:54AM (#9062384) Homepage
    My company was informed of this bonded sender program by MSN/Hotmail support 2 months ago. At the time they claimed the Bonded Sender program was a third-party service with no affiliation to MSN/Hotmail or Microsoft. At the same time, they also claimed that even if you DO subscribe to the bonded sender program MSN/Hotmail will give no guarantee that your emails will be delivered!
  • by AndroidCat ( 229562 ) on Wednesday May 05, 2004 @09:02AM (#9062434) Homepage
    It's handy to use for Usenet posting, a web site contact address or one-shot subscription signups. People can get in touch, and if I want to, I can shift communication over to a real mailbox. And every four years when the account gets joe-jobbed by a spammer or nut cult, I just open the next account in sequence. (I'd better update my /. journal.)
  • by wayne ( 1579 ) <wayne@schlitt.net> on Wednesday May 05, 2004 @09:06AM (#9062465) Homepage Journal
    A classic screwed up slashdot submission.

    MicroSoft isn't selling anything, they are using the services of another company, namely bondedsender.com.

    Who are bondedsender? They are part of ironport systems, who also own spamcop.net. Spam reported to spamcop.net automatically gets reported to bondedsender.com and the spammer gets whacked.

    This is really good news because spamcop.net/ironport were recently sued by the spammer snotty scott richter. This means that ironport will have more income to not only fight the spam lawsuit but fight spam in general.

  • by condensate ( 739026 ) on Wednesday May 05, 2004 @09:10AM (#9062499)
    I think this is illegal in most european countries. The european council adheres to the opt-in principle, which basically means that you have to agree to marketing mails before it is legally sent to you.

    AFAIK in the U.S. the opposite, namely the opt-out principle is in use, where, after having received unsolicited marketing stuff, you have to inform the sender that you don't want it. Rather inviting...

  • by the chao goes mu ( 700713 ) on Wednesday May 05, 2004 @09:13AM (#9062524)
    It doesn't matter how you guard your email address. Unless it is a senseless string of characters, someone will eventually send to it. I saw spammers trying huge (10K+ entry) lists of randomly generated lists of names (aaab@aol.com, aaac@aol.com,aaad@aol.com, and so on). Then they would try adding different domains to names known from a first domain (jims@aol.com, jims@hotmail.com, and so on...) You can't just guard your address. Someone will still find you to deliver spam.
  • by Allen Zadr ( 767458 ) * <Allen.Zadr@nOspaM.gmail.com> on Wednesday May 05, 2004 @09:13AM (#9062526) Journal
    The bond is to IronPort and is relinquished to IronPort.

    IronPort [ironport.com] is NOT Microsoft [microsoft.com]! IronPort is selling a service which Microsoft has purchased for the purpose of using on Microsoft's Hotmail (and MSN) mail service.

  • by lseltzer ( 311306 ) on Wednesday May 05, 2004 @09:19AM (#9062571)
    The bond is held by BondedSender, i.e. IronPort, not Microsoft. According to their site [bondedsender.com] "Proceeds from bond debits are not retained by IronPort Systems and are instead shared with third-party non-profit organizations."
  • Not how it works (Score:5, Informative)

    by mikeage ( 119105 ) <.slashdot. .at. .mikeage.net.> on Wednesday May 05, 2004 @09:26AM (#9062631) Homepage
    This is a very misleading summary. Basically, the bonded program (which even spamassassin recongnizes and assignes according a minus "point") requires mailers to put up a bond before their emails are allowed. They still cannot send spam, however, they may only send mail to registered users. If users complain, the company has to either prove they joined or pay up.
  • Better site... (Score:2, Informative)

    by Allen Zadr ( 767458 ) * <Allen.Zadr@nOspaM.gmail.com> on Wednesday May 05, 2004 @09:29AM (#9062661) Journal
    IronPort's Whitelist access is available, here [bondedsender.org].
  • by Anonymous Coward on Wednesday May 05, 2004 @09:32AM (#9062695)
    That's

    run the gantlet.
    Gauntlets are pieces of armor for the hands. See here [brainydictionary.com] and here [brainydictionary.com].

  • by tramm ( 16077 ) <hudson@swcp.com> on Wednesday May 05, 2004 @09:40AM (#9062744) Homepage
    The SpamAssassin test USER_IN_DEF_WHITELIST [spamassassin.org] checks to see if the sender is in the list of companies that are on its built-in white list. Network Solutions, internic, register.com, nytimes.com, amazon.com, mypoints, paypal, the FT, Palm, Handspring and others are all on it. They don't sell access to it, so it is not the same as what Microsoft is doing. It is similar, however, in that some companies get a free pass (well, up to -15) for any mail that they send out.
  • by Trailer Trash ( 60756 ) on Wednesday May 05, 2004 @09:43AM (#9062770) Homepage
    Okay, people, there are about two clueful people who have posted so far, and about 50 idiots who are yelling "Microsoft is taking money to allow spamming". READ THE ARTICLE. Holy shit.

    For those too st00pid to read it, here's your list of clues. Microsoft gets no money, IronPort gets the money.

    If you're a legitimate emailer (i.e. you email to people who have asked for email) IronPort takes the $20K up front as a bond. If you spam, you get knocked off the whitelist and they take your $20K.

    It's not "pay $20K and spam all you want". It's "put up $20K to say that you won't spam".

    As someone else here said, their standards are *very* high. You must have no more than 1 complaint per million emails, which is a very low number. Having run double-opt-in lists myself before, I assure you that cluefucks will complain about something that they signed up for (and confirmed) the day before.

    As an ISP, let me say that this is a great program.

    They are very anal
  • by Anonymous Coward on Wednesday May 05, 2004 @09:50AM (#9062833)
    You don't need a hotmail account to use MSN messenger. You can use your own e-mail address:
    LINK [msn.com]
  • by fiber_halo ( 307531 ) <fiber_halo@yaDEBIANhoo.com minus distro> on Wednesday May 05, 2004 @10:10AM (#9062992)

    I believe the intention of the whitelist is for companies like airlines, Fedex, etc to send legitimate email notifications to their customers without having to worry about SpamAssassin throwing their email in the trash.

    Presumably there is some sort of due diligence that is done before bonded status is granted so that any ol' spammer can't just pony up $20k and get on the list. One thing is for sure -- they wouldn't stay on that list if they are found to be spamming.

  • by Anonymous Coward on Wednesday May 05, 2004 @10:13AM (#9063010)
    Fron the list of Directors at Ironport.com:

    JACK SMITH: CO-FOUNDER AND INVENTOR, HOTMAIL CORPORATION

    "...After the acquisition, Smith worked as Director of Engineering at Microsoft...then leading a team developing next generation Internet software infrastructure."

    DOUGLAS C. CARLISLE: MANAGING DIRECTOR, MENLO VENTURES
    Former board memeber of Hotmail.

    SCOTT BANISTER: CHIEF TECHNOLOGY OFFICER
    "Scott started his career as a pioneer in the email business. He was founder and VP Technology of ListBot...ListBot was acquired and became Microsoft's ListBuilderTM, part of the bCentralTM suite of business offerings..."

    SCOTT WEISS: CEO
    "...Scott was one of the early team members at Hotmail, the world's largest web-based email service. At Hotmail, Scott was responsible for all partnership and revenue generating business development efforts. It was this experience at Hotmail that helped Scott identify the emerging business opportunity that would later evolve into IronPort Systems. After Hotmail's acquisition by Microsoft, Scott led a business development team at Microsoft with the MSN division. "


    No, they're not Microsoft. But they're dang close.
  • by Arker ( 91948 ) on Wednesday May 05, 2004 @10:15AM (#9063034) Homepage

    I must say I'm really disappointed in this. Ironport have generally been good guys, but their trust level just plumetted. If you read the sender standards [bondedsender.com] page you'll notice that, while they are at least trying to rule out some of the worst spam, their standards explicitly do allow spam (by diluting the concept of 'consent' to the point it's unverifiable and thus meaningless.) On the other hand, it doesn't sound like they're going to try to adjudicate complaints, just charge a small fee for each one and make judgements based on the sheer number of complaints, so it will be interesting to see how that works out. If enough end-users refuse to tolerate spam, that could effectively keep it out of the whitelist, even though the 'standards' are written to allow it.

  • by Electrum ( 94638 ) <david@acz.org> on Wednesday May 05, 2004 @10:17AM (#9063061) Homepage
    IronPort's business is SPAM prevention.

    Actually, they play both sides [ironport.com] of the fence.
  • Not really, a judgement against the bonded sender (they failed to follow the guidelines) results in a small fine being removed from their bond.

    IronPort's bonded-sender [bondedsender.com] service investigations are based on SpamCop. (There are a large number of SpamCop auto-SPAM-reporting products and servers). Basically, if you SPAM chances are you'll be reported to SpamCOP at a higher hit rate than your 'victims' are likely to respond to your "campaign".

  • by petecarlson ( 457202 ) on Wednesday May 05, 2004 @11:44AM (#9064204) Homepage Journal
    can i use this "whitelist" as a "blacklist" it seems a handy thing to have a list of self confessed spammers

    header RCVD_IN_BONDEDSENDER eval:check_rbl('relay', 'sa.bondedsender.org.')
    describe RCVD_IN_BONDEDSENDER Received via a whitelisted Bonded Sender address
    score RCVD_IN_BONDEDSENDER +100.000

    should work for SpamAssassin 2.2x/2.3x

    The +100.000 should ensure they get marked as spam.

  • by Christopher_G_Lewis ( 260977 ) on Wednesday May 05, 2004 @12:26PM (#9064746) Homepage
    Actually, (after quite a bit of searching, mind you) according to this Fees [bondedsender.com] the fine, while small, would not be insignificant.

    They're talking $20 per complaint, after your "free" complaints per month. Which, for the "low" volumne bulk sender( less than 1,000,000 per month), is 1 complaint per month.

    So, for the above example, 10 complains - 1 free complaint * $20 is $180. The sign up costs are $375 Application, $500 license, $500 bond.

    So after your first month, you've spent $875, bonded $500, e-mailed 500,000 messages, and lost $180.

    And somewhere else, I thought read that if your bond drops below half, you have to replace it. So they've effectively created a charge system for spam.

    This would be quite nice if they donated some of the bond money to, say, the SpamAssassin Development Team [spamassassin.org], or maybe SourceForge.
  • Thanks for proving me right about the anti-marketing thing. I knew I could count on /.

    Marketing isn't inherently bad. It is in many ways the only way to know about new products. Word of mouth is great, but at some point somebody has to be told of a product's existance or there'll be nobody to spread the word in the first place.

    You say if you want to buy something, you'll go out and get it. Fair enough. But I'm not fucking psychic. I don't immediately know when a company releases a new product that I might want. Most of the catalogs I read feature items that aren't reviewed in trade magazines. If I want to buy a cal-look running board for a 1973 Super Beetle, what recourse do I have BESIDES catalogs? Before I started getting VW Trends, I thought I'd have to go to junkyards with my fingers crossed if I wanted to find anything for my restoration! Through catalogs, I've found sources and options that have made the restoration much easier, much cheaper, and much nicer looking.

    And I'd much rather read a catalog than visit a store, mostly because the nearest air cooled VW retailer is in Niagara Falls, but partially because I appreciate the luxury of being able to weigh features and price without a salesman breathing down my neck.
  • by petecarlson ( 457202 ) on Wednesday May 05, 2004 @12:33PM (#9064821) Homepage Journal
    No, someone asked if they could block a whole slew of reputable businesses and I told them how one would go about doing it. I have no intention of implementing that on my mail server.
  • by Anonymous Coward on Wednesday May 05, 2004 @12:44PM (#9064940)
    Exactly, but what I haven't seen modded up past the MS slams was who gets the money... I was checking these guys out a few days ago, couldn't understand the model... Set up a bond, but if you get a complaint they take the money? Made no sense... Seemed like the thing was skewwed. But, unlike the majority of you dipshits, I actually researched it before jumping to conclusions.

    Snipped from http://www.bondedsender.com/fees.jsp , so you don't tucker yourselves out having to read a bunch of words...


    B. Bond Debits

    The Bonded Sender Program is designed so that most legitimate senders will pay little or no bond debits, while the cost will be prohibitive for any sender of unsolicited commercial email (who would also not qualify based on the current standards for the Bonded Sender Program). Proceeds from bond debits are not retained by IronPort Systems and are instead shared with third-party non-profit organizations.
  • by Animats ( 122034 ) on Wednesday May 05, 2004 @12:52PM (#9065046) Homepage
    IronPort wants you to install a hole [bondedsender.org] to let their stuff through. For SpamAssassin, for example, they want you to put in
    • header RCVD_IN_BONDEDSENDER eval:check_rbl('relay', 'sa.bondedsender.org.')
      describe RCVD_IN_BONDEDSENDER Received via a whitelisted Bonded Sender address
      score RCVD_IN_BONDEDSENDER -100.000

    Note that "-100.000". That says "accept this, even if it looks like spam". You might want to use, say, "-3.0" instead. Give them a little credit, but don't open the floodgates.

    Watch for spam with the "RCVD_IN_BONDEDSENDER" flag in the X-Spam-Status header line. You might want to have Mozilla (I assume Slashdot readers aren't using Outlook) move such messages into a "Bonded Sender" folder. That lets you watch what they're sending.

    As soon as you find a real spam passed by BondedSender, please post it to NANAE.

  • by cardshark2001 ( 444650 ) on Wednesday May 05, 2004 @01:22PM (#9065335)
    SPAM ... SPAM ... SPAM

    What does the Hormel product have to do with unsolicited commercial email?

    The upper case version of the word is trademarked by Hormel, and is acceptable for breakfast (depending on personal taste). The lower case version of the word refers to unsolicited commercial email and is acceptable for hunting someone down and kicking their ass when they send pictures of hot asian teenagers having sex with men who have enhanced their s1ze and are taking \/1c0d1n and v1@gr4 they bought in an online f4rmecy to your 11 year old kid.

  • My Prediction... (Score:2, Informative)

    by JPickard ( 727790 ) on Wednesday May 05, 2004 @01:23PM (#9065345) Journal
    Microsoft really needs to do something about it's image -
    Having been landed in court for antitrust violations and with their software needing updates every week, Microsoft are really looking bad, and people are really looking for an alternative.

    With MacOS and Linux getting updated so much faster, the software Giant and Monopolist will need to act quick if it wants to stand any chance of making it through the to the next decade.
  • by krgallagher ( 743575 ) on Wednesday May 05, 2004 @01:53PM (#9065688) Homepage
    I opened a hotmail account once. My company decided to adopt MS Instant Messaging as a standard and I did not want to give out any real email addresses to set up the .NET Passport thingy so I createrd a new Hotmail account. I was recieving spam in the account within 24 hours.
  • Re:Not how it works (Score:3, Informative)

    by kindbud ( 90044 ) on Wednesday May 05, 2004 @03:14PM (#9066553) Homepage
    That isn't how it works at all. You pay IronPort to get listed on their BondedSender DNS whitelist. Anyone, anywhere can configure their mail server to consult the IronPort DNS whitelist, in the same manner as one would use SPEWS or Spamcop BL, and use that lookup to decide whether or not to subject the message to spam filtering, or to let it pass without any filtering. It is conceivable that a ISP or mailhost could use the BondedSender DNS whitelist as a blacklist, and exclude all BondedSenders from their mail domain.

    IronPort cannot guarantee anything about mail delivery to the people who post bonds in order to be listed in the DNS whitelist. They can only assure the people using the DNS whitelist, that all the entries on that whitelist represent email marketers that adhere to BondedSender requirements. They cannot make end users of the whitelist agree that those requirements merit allowing emails through the spam filter. They cannot make end users of the whitelist agree to anything, since it's free and open in the DNS for everyone to use as they see fit. There are no "registered users" to which BondedSenders mail send mail.

    If users complain, the amount of bond posted by the email marketer is deducted by $20 for each complaint (past the threshhold, which is currently 1 complaint per million emails).

It's a naive, domestic operating system without any breeding, but I think you'll be amused by its presumption.

Working...