Spamhaus Guru Steve Linford Profiled 191
BenLev writes "The New York Times has an article profiling Spamhaus Project director Steve Linford. The feature goes behind the scenes at Spamhaus, 'one of the leading groups that is trying to make the world safe from junk e-mail', showing that it operates from Linford's houseboat on the Thames near London, spammers don't like him, and his volunteer corps likens itself to the X-Men."
good idea. (Score:3, Insightful)
Also, most telemarketing is done from in-country because of LD charges. Not so with e-mail. It's pretty hard to enforce US laws on a Taiwan spamhaus.
Ah well, every little voice against spam warms me a little at least.
Re:good idea. (Score:5, Informative)
Compared to spammers, the sleaziest telemarketers are shining pillars of ethical perfection. Telemarketers will not abuse the Do Not Call list - if nothing else, than because they REALLY fear the FCC (and FTC or whoever winds up administering it). They run legitimate, legal businesses, and can't afford to run the risk of breaking the law.
Spammers, on the other hand, care not for such things. If there ever were a Do Not Spam list created, and it was done in such a way that the list itself would not be published, you can bet somebody would write a script to randomly generate billions of e-mail addresses, check every one of them against the Do Not Spam list, compile a list of every e-mail address that matches, and sell it as a list of confirmed opt-in e-mail addresses on CD-ROM for $500.
Re:good idea. (Score:3, Insightful)
I think a more important difference is that it costs them money to call you. So, basically, a Do Not Call list saves them money because they do not need to call people who hate telemarketing.
Re:good idea. (Score:2)
If a national Do Not Call list saves telemarketers money, why are they fighting it? Heck - why hasn't there been a private firm jumping on this niche?
Telemarketers WANT to call everyone - even those who would prefer not to get calls. One good reason for this seemingly odd behavior is that some of these people
Re:good idea. (Score:3, Informative)
I've spoken to the husband of a friend who works at a telemarketing place, and actually telemarketers hate the DNC list, since it allows people who have problems with saying no and confrontational situations - vulnerable people who are one of the telemarketers' main targets - to say no anonymously, with no conflict.
I
Re:good idea. (Score:2, Insightful)
Plus the majority of spam is either totally fraudulent (i.e. 491 Nigerian crap, MLM schemes, etc) or 80% fraudulent (herbal viagra, weight-loss pills, etc... People who order that shit usually get something in the mail but it's not going to work as claimed).
Since spammers are now willing to unleash whole new virus schemes just to generate the o
You give spammers too much credit... (Score:3)
The only sure-fire solution to the spam problem is brutally and publically torturing spammers to death.
Re:You give spammers too much credit... (Score:3, Interesting)
Re:You give spammers too much credit... (Score:2)
Re:good idea. (Score:2)
Still doesn't deal with off-shore sp
Re:good idea. (Score:1, Interesting)
It's pretty hard to enforce US laws on a Taiwan spamhaus.
And why exactly would anyone want to use US law in this case? Hasn't it been proven to be about as toothless and worthless, not to say non-existant end sometimes even endorsing spammers? Thanks, but no thanks. It would be like trying to get rid of cockroaches by drowning them in excrements.
If anything, a law which actually tries to stop these sleazy vermin should be used. If the mentioned EU law/directive is that much bet
Re:good idea. (Score:2, Insightful)
Let us suppose that 500 million people have access to email.
Let's say that they spend 20 seconds a day dealing with it.
That's 10,000,000,000 seconds,
166,666,666 hours
6,944,444 days
19,013 years
271 lifetimes (Given 70 year life)
That's per day.
Interesting (Score:2)
* 2003-11-09 08:06:52 NYT Profiles Steve Linford & Spamhaus Project (articles,spam)
The New York Times Technology [nytimes.com]'s Saul Hansell profiles Spamhaus Project founder Steve Linford, everyone's favorite houseboat-dwelling, anti-spam activist [nytimes.com] (Google [nytimes.com]). The longish article also neatly describes the history, issues and new directions spam is taking, and the tactics that spammers are using to limit Spamhaus [spamhaus.org]'s effectiveness. Linford is quoted as saying, 'E-mail is the most incredible communication vehicle in
Weird analogy (Score:2)
Re:Weird analogy (Score:2)
The Brotherhood of Evil Mutants, of course!
TWW
Adding info to DNS servers (Score:5, Interesting)
Simon
SPF (Score:5, Informative)
SPF [pobox.com]. Several proposals have been rolled up in this, under ASRG [irtf.org], including SPF, RMX, DMP, and related proprosals.
DNS servers is not the way to go. (Score:1)
Instead I think it is better to work on the link between the hacked computer and the provider. Maybe you
Re:DNS servers is not the way to go. (Score:2)
Think too about how many people have their phonenumber shielded so that no one can see it.
And last but not least: posting this as an Anonymous Coward doesn't add to your credibility on this subject;-)
Re:DNS servers is not the way to go. (Score:1)
If I were collecting anonymous tips or whatnot, I would set up a webform and encourage people to submit their tips from public access terminals (say, at a library). No need to rely on anonymous email. Most people probably don't know how to send a truly anonymous email anyway.
Re:DNS servers is not the way to go. (Score:2)
That's just off the top of my head, and both are incredibly good reasons.
Re:Adding info to DNS servers (Score:1)
It is still an internet-draft. I think the URL for the current version is here [ietf.org].
Yes, unless a really high proportion of the people who send you mail made these records available, you couldn't block mail that didn't have it. It might work as a "probably not sp
Re:Adding info to DNS servers (Score:5, Informative)
There are quite a number of such proposals. For instance...
...among others. The Internet Research Task Force Anti-Spam Research Group (IRTF ASRG) currently has a sub-group specifically dedicated to the unification of these proposals. This is a relatively recent initiative (only about a month old). You can find archives of the discussion at gmane.org [gmane.org].
Re:Adding info to DNS servers (Score:2, Insightful)
These guys block pretty large blocks. (Score:3, Interesting)
My particular server (a dedicated box) was innocent, but my hosting facility had spammers on other dedicated boxes.
Isn't blocking a /20 like swatting flys with a hand grenade?
Re:These guys block pretty large blocks. (Score:5, Interesting)
Re:These guys block pretty large blocks. (Score:2, Funny)
Darl? Is that you?
Re:These guys block pretty large blocks. (Score:2)
Talk is cheap. If you believe there are better solutions, I suggest that you implement them. If you're correct, people will use them.
Till then though, we'll stick with Spamhaus.
this didn't happen by accident (Score:5, Informative)
Re:this didn't happen by accident (Score:2)
But they're not paying the price, the OP is.
The idea is you and all the other guys it's pissed off will complain/take your business elsewhere and the ISP will be encouraged to behave responsibly.
But what if there isn't anywhere else to take their business to? Perhaps they recently entered into a long-period contract, or there simply aren't any other providers that they can use (particularly possible if it's the upstream tha
Re:this didn't happen by accident (Score:3, Informative)
Sure. Sounds great. Now - what do you do when the ISP in question just bumps the offending spammer to a new block of IPs? Or how about that one fast-burner marketing type at the ISP who's discov
Re:this didn't happen by accident (Score:2)
So you're saying your solution to handling ISPs that provide connectivity to spammers is to move to ISPs that do not block spam. Interesting.
How long have you been working in the spam industry?
Re:this didn't happen by accident (Score:3, Informative)
Forgive me for not caring. The ISP is supporting criminal activity by hosting spammers. As such, there's no reason for me to want traffic from that ISP. If the OP wants his mail to get through, then he should find an IP address not owned by a bunch of sleazebags who openly support and encourage criminal activity.
By all means block IPs, but specific ones, not whole ranges
That has been tried. It failed. The spam-friendly ISPs just moved their spammers ar
Re:this didn't happen by accident (Score:2)
Or maybe there's something to address the act of knowingly harboring a public nuisance actually created by another party? Humph, there's at least one law permitting a pa
Re:this didn't happen by accident (Score:2)
It has been suggested by anti-spam groups, but many people who find themselves on spam-friendly ISPs prefer whining about it rather than being proactive. Apparently it's not their fault and it's not the fault of the ISP for hosting spammers, it's the fault of people who don't want to accept traffic from spam-friendly ISPs.
Re:These guys block pretty large blocks. NOT (Score:1)
And you readily admit that your isp was supporting & hosting spammers?!? Was this a troll? If your housing association or your employer starts dumping raw sewage into the local nature preserve, you should expect t
Re:These guys block pretty large blocks. (Score:4, Informative)
Are you absolutely 100% sure you were blocked by Spamhaus and not by SPEWS? Spamhaus generally tries quite hard to avoid "collateral damage".
Re:These guys block pretty large blocks. (Score:3, Interesting)
Anyways, I meant to say that 69.64.32.59 is listed in SPEWS [spews.org] and it is not listed in Spamhaus [slashdot.org]. Given that the wider-reaching SPEWS only lists a /24 in that vicinity, I find it higly implausible that Spamhaus would drop a /20.
Instead, I am starting to consider the notion that there is a pro-spammer astroturf campaign being waged against blocklist sites.
Re:These guys block pretty large blocks. (Score:2)
Starting?
Haven't you heard of "antispews.org"? It's dead now, but it was a clearly spammer-run outfit claiming to serve the "victims" of SPEWS in tracking down whomever ran SPEWS and suing them. Full of bluster on how they were "this close" to exposing the organization, they were a relatively reliable source of amusement in news.admin.net-abuse.email
Re:These guys block pretty large blocks. (Score:2)
Spamhaus was quicker than SPEWS at undoing the blacklist - and again, it appears spammers were in the blocked range so I'm not blaming either organization or anything - Just pointing out that (by design or otherwise) blocking wide address ranges do some collateral dammage.
Here's the old bounce message.
63.205.228.48 does not like recipient.
Remote host said: 554 Service unavailable; Client host [69.64.33.64] blocked using
Re:These guys block pretty large blocks. (Score:3, Interesting)
I'm just pointing out that there are quite a few false positives when large IP ranges are blocked.
Any low-cost hosting (in this case, an under $50/month dedicated linux server) that offers the users the ability to run whatever ser
Re:These guys block pretty large blocks. (Score:2)
But that's the point: the target is the ISP that provides hosting to the spammer. By blacklisting large parts of its address space, it's going to lose legitimate customers. This is supposed to create pressure on it to reform.
I prefer blocking actual spammers, but even that's going to create fa
Re:These guys block pretty large blocks. (Score:2, Informative)
The point is that if your ISP has repeatedly ignored the problem, then there are no false-positives.
Until your ISP cleaned up their act, you were (indirectly) gaining a benefit from the spam, in the form of cheaper hosting.
Re:These guys block pretty large blocks. (Score:2)
If it is SPEWS that blocked you then you have mis-interpreted SPEWS' mission. SPEWS aims to list areas of the Internet from which SPAM is likely to come. Blocking is intended to get the non-SPAM customers to pressure the ISP's by either moving to another ISP or complaining.
Essentially, SPEWS tries to take away the economic benefit of hosting spammers from the ISP.
Re:These guys block pretty large blocks. (Score:2)
Spamhaus was quicker than SPEWS at undoing the blacklist - and again, it appears spammers were in the blocked range so I'm not blaming either organization or anything - Just pointing out that (by design or otherwise) blocking wide address ranges do some collateral dammage.
63.205.228.48 does not like recipient.
Remote host said: 554 Service unavailable; Client host [69.64.33.64] blocked using sbl.spamhaus.org; http://www.spamhaus.org/SBL/sbl.las
Re:These guys block pretty large blocks. (Score:1, Informative)
Except they don't actually block spam.
A filter (whether bayesian or otherwise) has to examine the content of the message - it can't do that until it's received the message.. so by definition, a filter can't block spam.
Blocklists are the only way to block spam.
Re:These guys block pretty large blocks. (Score:2)
Other people are, acting on the information that they provide. Doesn't the USA have rules about freedom of speech and freedom of information?
Do you think it should be made illegal to tell the world that a certain IP block is generating high levels of spam? Because that's all that Spamhaus effectively does.
Yadda yadda yadda (Score:5, Informative)
The X-Men (Score:2)
Yeah, well, I'll bet none of his volunteer group looks anything like Jean Gray, Storm, or Rogue, but I'll also bet they play them online ...
What're the odds that... (Score:1, Funny)
NOT a chance (Score:2, Funny)
these puppies [navy.mil] on board...
We've got all the laws we need (Score:4, Insightful)
spammers will only slit their own throats. (Score:2)
"Mr. Linford said he believed that spammers could be contained, if not eliminated. A tough new anti-spam law in Europe will help, he said. The proposed Can-Spam act in the United States, he said, is not tough enough, but he figures that when it fails to work, Congress will have to make a stronger law. But Mr. Linford gloomily predicts that spammers will simply move more of their operations to Asia and Latin America."
Fine, let the spammers move their servers to asia and latin america. I've already ba
Just a matter of time until we get secure email... (Score:1)
I don't get a lot of spam, mainly because I don't post my email address all over the internet, but I would love to use a secure (PGP or other) email client. Sure, I could set one up now, but how many of my friends/colleagues will also be using it? Not many at all.
Computers are supposed to be tools used to enhance our productivity. Sadly they quite often do the opposite, mainl
Re:Just a matter of time until we get secure email (Score:4, Interesting)
I doubt that any progress will be made in fighting spam until Microsoft/Apple include authentication options in their default mail applications.
Unfortunately, authentication is unlikely to do much to stop spam unless people use it with a personal whitelist of permitted senders. It is currently straightforward to track a spam email (SpamCop [spamcop.net] can do this if you paste the email in with full header information) but nowadays it typically comes from a cable/DSL user whose machine has been hijacked.
This doesn't seem to be helping... (Score:5, Informative)
-- D3X
My latest endeavour... truly free porn www.NeoX3.com [neox3.com] 5 mins movies supported by only a 15 sec commercial. No-popups or membership or catches.
Re:This doesn't seem to be helping... (Score:3, Interesting)
Re:This doesn't seem to be helping... (Score:2)
of course the people you work for spam
The end of spam (Score:4, Interesting)
Spam filters work only for those able to configure them. For the vast majority of Internet users, they are just a dream.
Spam blacklists are unsustainable in a world where most net connections come across DHCP, and most spam is/will be sent from owned home computers.
Spam merchants will continue to harness the 'dark side of the force', paying crackes and virus writers to create the networks of owned machines they need to operate from...
the Net will split into two halves, an "infected" and a "clean" part, and every single transaction from the infected part will be treated with scrutiny and suspicion.
But this is impossible too.
Conclusion: the purity of the net is a thing of the past. We will come to understand that traffic is bad until demonstrated good. Emails will be 99.999% junk, virus, and trojan, and the art will come not from filtering out this junk but from detecting the signal within the noise.
Clearly, whitelists are part of the solution but they are limited since you can't form a network of whitelists, it's a one-to-one solution that does not scale.
I see only one solution that is scalable. Data clearing houses. You register with me, I'll vouch for all your data, and pass it on to those who need it, along with my signature. A trust network, if you like.
Data clearing houses will rate each other, creating a system of moderation in which data is never guaranteed good, but at least you get a measurable index of confidence.
Re:The end of spam (Score:1)
Re:The end of spam (Score:2)
I think the vast majority of Internet users already use filters, but they are configured by the user's ISP, not by the user.
Spam blacklists are unsustainable in a world where most net connections come across DHCP, and most spam is/will be sent from owned home computers.
Updates of the dial-up list will stop this. Don't accept incoming email connections from machines using DHCP. It's
Re:The end of spam (Score:5, Funny)
Re:The end of spam (Score:2)
Not digital signatures, but reputations (Score:2)
Something like this... you can send data through my clearing house. I have a good reputation, let's say AAA, because I'm really strict about who I accept data from. In any period, you can't send more than 20% of the total you've ever sent, and if you abuse my reputation I'll cut you off.
Perhaps I'll ask you to place a financial deposit in case you misbehave.
Clearly, people will pay a premium to have their data sent through the most trusted clea
Re:Not digital signatures, but reputations (Score:2)
-Lucas
Re:The end of spam (Score:3, Informative)
That was a problem solved several years ago. Many ISPs simply block any and all DCHP addresses that they can identify, and many specifically list their DHCP addresses with some of the block lists to make it easier.
This is because nearly all email from DCHP addresses is, in fact, spam, and most of the rest is from someone violating their AUP in the first place,
Re:The end of spam (Score:2)
Are you sure? [web-o-trust.org]
Re:The end of spam (Score:2)
Uh-oh. I suspect that any method Bill Gates proposes regarding the internet is bound to suck.
Sending an email to someone carries a small nominal cost, that money going to the recipient.
And who administers these billions of micropayments, shuffling around the planet every day? Let me guess....
Wouldn't be Microsoft, by any chance?
I almost think I'd prefer the spam...
Re:The end of spam (Score:1)
Using SBL from command line? (Score:2)
I read the "how to use SBL page" (here [spamhaus.org]) and I understand that I can set my MTA to use it to block spam. But I'd like to test it out a bit before putting it into production, and ideally I'd like to be able to use this in scripts.
steveha
Re:Using SBL from command line? (Score:3, Informative)
Also, note that you do not have to query directly against the DNSBL DNS server because it's just another host in the DNS heirarchy.
Re:Using SBL from command line? (Score:1, Informative)
The above is good, but try using a TXT lookup instead. Thats "dig D.C.B.A.sbl.spamhaus.org TXT".
For example, let's say our spammer of the day (We'll call him 'Drew Auman', because that's his real name) is spamming his domain "kingherbal.biz" with an IP address 203.197.204.86.
[root@localhost] # dig 86.204.197.203.sbl.spamhaus.org TXT
; > DiG 8.3 > 86.204.197.203.sbl.spamhaus.org TXT
;; res options: init recurs defnam dnsrch
;; got answer:
;; ->>HEADER ;; flags: qr aa rd ra; QUERY: 1, ANSWER
Re:Using SBL from command line? (Score:2)
Here's a quick bash script to do a lookup in various blacklists:
Re:Using SBL from command line? (Score:2)
tmh@sisko:~$ rblcheck 192.168.1.4
192.168.1.4 not RBL filtered by cbl.abuseat.org
192.168.1.4 not RBL filtered by list.dsbl.org
192.168.1.4 not RBL filtered by blackholes.easynet.nl
192.168.1.4 not RBL filtered by dynablock.easynet.nl
192.168.1.4 not RBL filtered by dnsbl.njabl.org
192.168.1.4 not RBL filtered by sbl.spamhaus.org
192.168.1.4 not RBL filtered by l1.spews.dnsbl.sorbs.net
Pay me... (Score:2, Interesting)
Which spammer has the energy ?
If you really want to mail me, you probably have the energy and the money, or if you really want I could pay you back
Attempted slander against anti-spam services also (Score:1, Interesting)
---- quote --------------
Dear Internet user.
We are an organization dedicated to stopping spam. Please help us as we are
funded solely by private donations.
visit www.spamcop.net for full details. Or you can send your donations to:
Julian Haight
PO Box 25732
Seattle, WA
98125-1232
As you can see by this message unsolicited e-mail is an invasion of your
privacy. As you can also see it can be sent anonymously
We will continue our efforts until all spam is elimina
Privacy Policies (Score:1)
Read privacy policies. Keep a spam magnet e-mail address for those web sites that have poor or nonexistent policies.
I read the privacy policy of any website before providing them with my e-mail address. If it looks at all like they might give it to third parties for advertising purposes, or post it on a website in the clear, or put me on lists where it's not clear I can opt out at any time, then I don't give it. If I must, then I give them my old Yahoo e-mail address, which already gets 20-1 spam, because
education of the people buying the stuff (Score:4, Insightful)
If people didn't buy the spammers wouldn't have a market and would go away.
The issue is to educate the general internet populus that are are merely encouring the spam by purchasing from the advertisers.
It sucks, but... (Score:2, Interesting)
In an unrelated rant, my username is a normal English word and my domain is a popular
Re:It sucks, but... (Score:2)
Stop using email? Are you serious? Try selling that idea to the many folks who rely daily on email to accomplish whatever it is they wish to see completed. Business, academia, personal - you name it. And where do you get your stats that the "vast majority" of users use IM's? Not a flame-fest but your post reeks of being out-of-touch.
Re:It sucks, but... (Score:2)
The coming California spam law (Score:2)
This should result in a tide of small suits against big companies. Any company that has some presence in California can be sued easily. Suing out-of-state companies may be possible; it's a "long-arm" statute.
Our
X-Men? (Score:2)
Steve Linford's corrections to the article (Score:2)
Re:first (Score:1, Flamebait)
Actually, you don't (Score:5, Insightful)
Re:first (Score:4, Insightful)
Try looking up Joe Job [catb.org].
Re:first (Score:2)
Which I already am, of course
Bullcrap (Score:5, Informative)
2) There's always the chance of a type 2 error - you could lose (either through accidental blocking or unintetional deleteing) an important email.
3) You pay for the bandwidth that they waste, in the long run. They are simply shifting the price of getting in touch with you from themselves to you. In effect, they are calling you on your dime.
Re:Bullcrap (Score:2)
Yeah, no kidding.
I've gone throught this. This guy tried to send me an email. Pretty important stuff. I ran into him two weeks later and he asked why I hadn't replied to his email. I told him I never received it, so we both just figured he sent it to the wrong address (why he didn't get a bounce though...) This guy was using something like yahoo or hotmail for hi
Bandwidth (Score:2)
Including viral mail in the definition of spam (and as unsolicited bulk email, it fits), it's not even a matter of paying for bandwidth. There are classes of service -- dialup, wireless, pager, etc., for which email simply becomes no longer useful.
At the peak of Swen, I was seeing, on a dialup account, 300+ MB of spam a day. That's over 20 hour download, just for mail, just to keep up. There are some POP filters and the like available, all are very approximate. Fortunately, I have alternatives (shell
Re:Bullcrap (Score:2)
That seems a bit of a contradiction - saying it takes time but doesn't affect your schedule. Even so, how about if you received 1,000 spams a day? 1,000 an hour? See the problem? Also many spams are fraudulent ("herbal viagra", pump-and-dump stock scams, phishing emails purpoting to be a bank security
Re:epitome of laziness (Score:3, Interesting)
Re:epitome of laziness (Score:5, Insightful)
Re:epitome of laziness (Score:2, Interesting)
> that can be deleted in less than 3 clicks.
I run my own server, and mailhost for a number of friends and family.
In total, the server receives approx 10,000 spams a day which is not at all reasonable.
Secondly, because of 'porn spam' my young niece can't have her own email address.
Thirdly, lots of spam in a mailbox can sometimes make you miss important emails if you just delete them quickly.
Finally, no-clicks at all... GUI mailer
Re:epitome of laziness (Score:2, Interesting)
Re:Lucky me? (Score:3, Interesting)
Re:Lucky me? (Score:1)
I used to get 10 or 15 a day to one particular address: it had been on my web site for about 5 or 6 years and was the catch all address for a tree letter
I stopped using it, and stopped using a catch all, so now I get hardly any spam.
How do people end up getting huge numbers of spam? What is different? Is it just common names and guessing? No becuase Then I should still have got a fair amount to the domain as a whole.
What worries me is that the side effect of most anti spam measurers
Re:I'm worried about non-spam email being blocked (Score:2, Informative)
Using custom filters in Yahoo! hampers the spam filtering mechanism and spam does manage to elude the Bulk Mail folder and ends up in some other folder.
Attachments will not cause a mail to be filtered out. In your case, probably the person you sent the image used the whitelist feature in Hotmail and your mail id wasn't in it. Or perhaps a custom filter cau
Re:The guy is a nut (Score:3, Informative)
It's the email server's administrator choice to use such a blacklist or not. In other words: if you're running an email server, you can choose whether you want to block these IPs or not.
You could argue that you're a customer of an ISP that's using Spamhaus or ORDB to block spam and you canno