Spam King Pleads Guilty in Seattle 152
arbitraryaardvark writes "The Seattle Times reports that spammer Robert Soloway has pled guilty to mail fraud and tax evasion, in exchange for the state dropping multiple counts of identify theft. 'The electronic-mail fraud charge is punishable by up to five years in prison. The tax charge is a misdemeanor and carries a maximum one-year sentence. The law also allows for fines against Soloway and his business of up to $625,000 on all charges. Both sides agreed to let U.S. District Court Judge Marsha Pechman determine not just the amount of prison time Soloway, 28, might serve but also the number of his victims, the size of any fine and the amount of restitution he may be ordered to pay.' We've previously discussed his arrest and mention in the New Yorker. The wire fraud felony count is based on selling $500 packages to wannabe spammers."
For sending too much email? (Score:2, Interesting)
Re: (Score:3, Insightful)
Re: (Score:3, Informative)
I don't actually. But TFA mentioned how the Washington ID theft statute had never been used in that way before. In my original draft of the summary I described the ID charges as "iffy".
The deal is for potentially a lot of jail time. Fines and restitution don't matter much because he's sheltered all his assets after having gotten sued by Microsoft. 90% of criminal charges are resolved with plea bargains, and that usually involves dropping most charges
Re:For sending too much email? (Score:4, Insightful)
Re: (Score:1)
Re:For sending too much email? (Score:5, Funny)
(X) technical ( ) legislative ( ) market-based ( ) vigilante
approach to fighting spam. your idea will not work. here is why it won't work. (one or more of the following may apply to your particular idea, and it may have other flaws which used to vary from state to state before a bad federal law was passed.)
( ) spammers can easily use it to harvest email addresses
( ) mailing lists and other legitimate email uses would be affected
( ) no one will be able to find the guy or collect the money
( ) it is defenseless against brute force attacks
( ) it will stop spam for two weeks and then we'll be stuck with it
(X) users of email will not put up with it
( ) microsoft will not put up with it
( ) the police will not put up with it
( ) requires too much cooperation from spammers
(X) requires immediate total cooperation from everybody at once
(X) many email users cannot afford to lose business or alienate potential employers
( ) spammers don't care about invalid addresses in their lists
( ) anyone could anonymously destroy anyone else's career or business
specifically, your plan fails to account for
( ) laws expressly prohibiting it
(X) lack of centrally controlling authority for email
( ) open relays in foreign countries
( ) ease of searching tiny alphanumeric address space of all email addresses
( ) asshats
( ) jurisdictional problems
( ) unpopularity of weird new taxes
( ) public reluctance to accept weird new forms of money
(X) huge existing software investment in smtp
(X) susceptibility of protocols other than smtp to attack
(X) willingness of users to install os patches received by email
( ) armies of worm riddled broadband-connected windows boxes
( ) eternal arms race involved in all filtering approaches
( ) extreme profitability of spam
( ) joe jobs and/or identity theft
( ) technically illiterate politicians
( ) extreme stupidity on the part of people who do business with spammers
( ) dishonesty on the part of spammers themselves
( ) bandwidth costs that are unaffected by client filtering
( ) outlook
(X) botnets
and the following philosophical objections may also apply:
(X) ideas similar to yours are easy to come up with, yet none have ever been shown practical
(X) any scheme based on opt-out is unacceptable
( ) smtp headers should not be the subject of legislation
( ) blacklists suck
( ) whitelists suck
( ) we should be able to talk about viagra without being censored
( ) countermeasures should not involve wire fraud or credit card fraud
( ) countermeasures should not involve sabotage of public networks
( ) countermeasures must work if phased in gradually
( ) sending email should be free
( ) why should we have to trust you and your servers?
( ) incompatiblity with open source or open source licenses
( ) feel-good measures do nothing to solve the problem
( ) temporary/one-time email addresses are cumbersome
( ) i don't want the government reading my email
( ) killing them that way is not slow and painful enough
furthermore, this is what i think about you:
(X) sorry dude, but i don't think it would work.
( ) this is a stupid idea, and you're a stupid person for suggesting it.
( ) nice try, assh0le! i'm going to find out where you live and burn your house down!
Re: (Score:2)
It goes simply like this - As the spam volumes keep on climbing and climbing and ever-decreasing volume of email is actually legitimate, "huge investment in SMTP infrastructure" becomes slowly more of a liability than asset.
You already need heavy-duty spam filtering SOMEWHERE to be able to use business email. I just realized some of my colleagues "just hit delete" on something like 50 emails per day because they lack the know-how to make simple thunderbird/outlook filter
Re: (Score:2)
Publish your public key along with your email address, require that any message sent to you be encrypted with the public key, and then delete any incoming messag which isn't. Use whitelists for mailing lists and such, preferably based on cryptographic signature verification to avoid source spoofing.
So, how does this fail ?
Re: (Score:3, Insightful)
It fails because your Aunt Mathilda doesn't know the first thing about email encryption, nor does she care. Businesses won't mandate its use with the buying public because most of those customers will go somewhere else instead of changing their email habits. "Public keys? How does a key protect anything if it is public?" "Cryptographic signature verification?" Good luck explaining that the John and Jane Public.
I don't expect to see widespread use of email signing (or encryption
Re: (Score:2)
Publish your public key along with your email address
How exactly will this stop spam? All it means is the bots that crawl sites looking for email addresses also need to snag the associated public key at the same time. If the information can be obtained by Joe User then it can be obtained by Joe Spammer and fed to his network of spambots. At best, they might have difficulty associating the correct key with the correct email address (though to be usable by Joe User the browser will probably need to associate the two easily) but in this case they'd just encryp
How encryption reduces and increases spam (Score:2)
But it also reduces spam because it takes CPU work to encrypt email, and spammers are generally not going to bother with that. 5-10 years ago, it was _e
Re: (Score:3, Insightful)
Let's go through it
(X) technical ( ) legislative ( ) market-based ( ) vigilante
What other way will there be of blocking spam? Legislative won't work because there is no one governing body that controls the entire world and can punish those that do wrong.
Market based...well, it might work, but the solution will probable be some sort of technical device like a barracuda appliance.
Vigilante would work if we just shot all the spammers, but then those people would go to jail for mur
Re: (Score:2)
Aside from trolls which could be weeded out from the discussion easily, the geek side of slashdot could (I think) easily come up with a way and agree on the best way to solve this.
This may be oversimplifying it a bit, but I would trust most slashdot users to know how to solve a technical problem.
If a network cable it unplugged, plug it in.
Of course
Re: (Score:2)
Give me some credit. I did say get rid of the trolls. That should drop the number a few million...
Re: (Score:1)
Re:For sending too much email? (Score:4, Insightful)
And you guarantee inclusion of legit traffic from mobile sources, how? You don't know what IP address or ISP will be used. What about legit mailing lists, where the originator is indeterminate?
X.400 provides much better authentication, and offers an API for repudiation, but if that's what people really wanted, we'd be using it. Or maybe everyone would use SMTP-over-SSL where client-side and server-side certificates were validated. We don't use them because people need the privacy, anonymity and flexibility of the existing system, although I'd argue almost anything is technically superior to the existing system.
In the end, although a totally secure option should exist, an insecure option should also exist that is controlled by policy rather than technology, and that ultimately means laws.
Yes, just use DNS hostname. It's a start. (Score:2)
Yes, by DNS hostname. It's not mil-spec perfect (nothing is), but it will be 1,000 times better than the not-even-trying SMTP swamp we have now. DNS works just fine, and doesn't get spoofed, for *finding* mail. It will work for *authorising* servers.
You can layer encryption/signing over the top, if you really want a few more nines. But if people are constantly breaking in and scrawling their name over your stuff, you might as well just lock the doo
Re: (Score:2, Funny)
The "real charges" are based on which charges are politically most popular and Spam is charge that raises the most ire.
Re: (Score:2)
You sound liek a spammer to me. If you are I really do hope you go to a federal recreation facility and room with a guy named "Buba" who really likes you.
Re: (Score:2)
Re: (Score:2)
You don't know a whole lot about how email actually works, do you? Yes, it's a pain in the ass. You sound like you're having more problems with it than a couple state universities I know of though. Read up on the RFC's and learn how to get rid of most of your spam rather than go 'Chicken Little' will ya?
I don't know whether you understand how e-mail works, but you certainly don't appear to understand spam at all. Sure, of course familiarizing yourself with the SMTP RFCs is a good first step, but since most spam is RFC compliant, where does that get you? If you're not 1) spending a lot of time working on blocking spam, 2) spending a lot of money on blocking spam, or 3) letting someone else spend a lot of time or money to block spam for you, then your e-mail address just hasn't gotten distributed to very
Re:For sending too much email? (Score:4, Insightful)
And yet, oddly, junk faxes are illegal, because they cause a significant amount of cost for the receiver. Just like junk email does.
The law won't [i]fix[/i] things, of course. Junk faxing still occurs. But it might help, if it's designed properly.
Re: (Score:2)
And yet, oddly, junk faxes are illegal, because they cause a significant amount of cost for the receiver. Just like junk email does.
IIRC in the US faking the CSID on a fax is also against the law. Even if the CLID is bogus.
The law
Re: (Score:2)
Spam these days is nothing more then a denial of service attack on the SMTP network and should be punished as such. Just because it is on open system doesn't mean abuse shouldn't be punished, quite the opposite actually, since it is an option system abuse must be punished, since it is the only way to get rid of it.
The days where it was easy to filter it out by hand and spam was just
Re: (Score:1)
There are websites that detail the charges against Robert Soloway and what he did.
I see this a victory against the 'email marketers' who send you spam opt in, opt out, three barrel opt out or whatever the dma are calling it this week. Soloway was a pain for isps worldwide, email, and the infrastucture of the internet.
How Soloway worked: Soloway 'gets' your email address, you change it, soloway 'gets' it again, but now uses both, result = one bounce and continued spam and now multiply that several milli
It's ok, buddy (Score:1, Funny)
Re: (Score:2)
I had written tax avoision, and zonk changed it.
Re: (Score:1)
If only it were so good... (Score:1)
I've seen some pretty interesting ideas regarding a more robust email standard, but I wonder what it will take for everyone to switch to something other than SMTP. We're sort of at a point where spam filters are just good enough to keep the signal within reasona
Re: (Score:2)
Also, just about any other system would have problems worse than spam -- but it's hard to talk about something abstract. What, exactly, did you have in mind?
Comment removed (Score:5, Interesting)
Re:If only it were so good... (Score:5, Interesting)
Re: (Score:2)
Re: (Score:2)
(X) technical ( ) legislative ( ) market-based ( ) vigilante
See earlier posts for the rest of the response.
Re: (Score:2)
Re: (Score:2)
This could be built on top of SMTP. The only problem is that either way, you still have to accept mail from people who aren't using it.
Re: (Score:2)
Re: (Score:2)
Why? I travel a lot, are you telling me I need a different email address for every location I visit? Imagine if you needed a different email address every time you left the basement! Oh wait, you probably never have, which is why you think what you do.
Re: (Score:2)
One way of handling this would be to have your machine perform an MX lookup to find out where to send the email. Rather than use a "smarthost". That might run into all sorts of problems with various anti-spam systems which have the effect of forcing people to use
Re: (Score:2)
Re: (Score:2)
Yes, because asking home users to configure their ISP's postfix server is really going to work.
Also, as another poster pointed out, people don't always have their outgoing mailserver set up as a proper MX record for various other reasons -- which means your system would be an inconvenience for a lot of people, for no gain, as I still don't
Re: (Score:2)
Re: (Score:2)
Keep in mind, someone else has been posting also. I don't personally have a travelling issue, as I can VPN back to my own server. Not everyone can do this.
All kinds of reasons. Someone pointed out the mess that can happen in mergers, acquisitions, and splits, resulting in some very interesting MX records (or lack thereof). Right now, I have some servers on Amazon EC2 which want to send mail, but EC2 has dynamically allocated IP addresses, which puts it
Re: (Score:2)
Millions of home users are the issue here. The kind of people who are still using AOL dialup.
Oh, and simply having authenticated SMTP doesn't mean it's configured to relay from outside its own network.
Re: (Score:2)
No, the point here is, aol did send that email. Are you saying that unauthenticated SMTP is not allowed?
It's not going to. Any solution which fails to take that into account will not work, because it will never be implemented.
Plus, that's not the only time mail is sent from a server which differs from those explicitly l
Re: (Score:2)
No doubt if you tried that you'd soon discover plenty of domains where different machines handle outgoing and incomming email. Some strange setups can easily result from corporate mergers, especially if the resultant company makes internal changes, but keeps trading under all its old brand names.
Re: (Score:2)
Re: (Score:2)
However, it has existed for several years, and we still get lots of spam...
And you can only put in the encouraging restrictions once enough places use it, otherwise you just delay or block most of the email you need to see.
Re: (Score:2)
I think ive just been hit with a new wave that hasnt yet found its way into RBLs but overall I think solutions such as spamhaus are the way to go.
atleast for now
~Dan
Re: (Score:1)
For the second week in a row, I also have seen a sharp downsteps in all of my mail/spam counters: that's message count, black and grey list activity, RCPT throttle, connection throttle (spamfiltered, relay denied and virlisted don't change much, but they have white noise type spectrum regardless).
I have two consecutive downshifts at around 17:00 MET Friday (consistent with business hours but WAY deeper then in the past) and another around 15:00 MET Saturday (unprecedented). It's like some vas
I hope... (Score:5, Funny)
Re:I hope... (Score:5, Insightful)
Your comedic take is about as funny as the drunk guy I saw yesterday that said "Ooops, you just knocked over your home" when he walked past a homeless guy that dropped a cardboard box yesterday.
No, correction..... (Score:2)
I hope... (Score:1)
Re: (Score:2)
Re: (Score:1)
- RG>
The rules he's charged under suck (Score:4, Interesting)
Best Seattle Sentence (Score:2)
spam (Score:1)
Re: (Score:2)
Re: (Score:2)
but... (Score:1)
Calm down! (Score:5, Insightful)
a) move to a country with Sharia law
b) save it for the worst offenders, those that actually murder others, like some US states do
c) grow up. At worst he's annoyed you, and maybe cost you a bit of time or money.
just a hunch... (Score:2)
Re: (Score:3, Interesting)
Re: (Score:2)
In which case the most appropriate US prison for him would probably be Camp X-Ray.
Re: (Score:1)
Re: (Score:2)
Re: (Score:2)
The filters arn't free either
Times that by all the computer users affected and it's a massive loss of time.
In the process making email a much less useful communication tool. Especially if someone misses real email in amongst all the spam or the spammers attempts to evade filtering mean that legitimate email winds up being filtered.
Why should we loose millions of hours a week so he can hawk crap no one needs and 99% never respond to, h
Re: (Score:2)
How about codifying this? Let's say that deleting a spam takes a second, and the guy sends a hundred million spam messages. Put him in jail for a hundred million seconds; that's 27777 hours or 1157 days, a little over three years. And what kind of spam king would send only a hundred million spam messages?
Re: (Score:1)
If an average person spends 20 minutes a month fighting spam (between time they filter through it, work they have to do to pay for the costs, or anything else - which this would be a low number) they end up fighting spam for 3.6 hours every year.
When you take that 3.6 hours spent by one person in a year and multiply it by the millions of people that receive the spam (for simplicity's sake lets just say its a paltry 1 million), thats costing 3,600,000 hours in a year.
A pe
Re: (Score:2)
His company made at least $300,000 last year at $495 a shot - so he sold at least 606 of his packages in a year. With a package lasting 15 days it means he had to sell 24.3 packages to cover 20,000,000 people for one year (since he also sold email addresses and the cumulative effect of that would cover enough to hit the 20 min/month ratio) that means he could cover 500 million people/addresses in a year. W
Re: (Score:1)
Re: (Score:2)
Re: (Score:2)
Re:Calm down! (Score:5, Insightful)
For the people advocating death/rape for this guy: just wait until you are falsely imprisoned, or simply imprisoned for a minor infraction such as telling your mind verbally to someone who turns out to be on the 'good' side of the law. It happens very frequently in this country. And non zero odds that it will happen to you as well.
To everyone else: don't get me wrong, I'm not at all saying Soloway is innocent and should not be punished for his crimes. Just that wishing cruel and unusual punishments on him, which sadly are highly likely to happen to anyone that ends up in jail or prison, will also be forced on a small part of the innocent population as well, and that it's never right.
I also don't feel stupidity should be punished with nightly beatings, rape, disfigurement, torture, and potentially murder in the prison system either, despite the fact that the people wishing these things on others will probably never learn just how stupid such desires are until it happens to them.
But I sure do wish there was less stupid people in the world, such as those that cheer for this sort of treatment.
Re: (Score:1)
it's not that hard... (Score:1)
Re: (Score:1)
This may be a wild guess, but you've never run a mail server, have you?
Re: (Score:1)
Re: (Score:1)
I've done what you said and made 3 email accounts. I only ever gave my email address to 1 other person, my Mom.
But somehow the spammers knew my name was John and they found all my adresses!!
john@yahoo
john@gmail and
john@hotmail
I can't figure out how they did it!!
Re: (Score:2)
Language (Score:1)
"identify theft"? (Score:1)
Who is fighting the Spam (Score:1)
The information of it started to leak at first and then it all was simplified to being a simple client.
Is it not a reason why human trafficking business is growing?
Next question - who is fighting the Spam?
sweet (Score:2)
Will we ever get his collaborators? (Score:2)
There's a good chance that those are different groups of people, and an even better chance that those groups were getting kick-backs from the spammer. Its rare that the registrars and ISPs that keep spamming operations afloat are truly igno
Public Flogging Needed (Score:1)
I suspect that if we finally got around to actually making criminals responsible for their crimes instead of free food/medical/housing that c
Re: (Score:2)
Listening to their self congratulations after they decided that knocking him
Re: (Score:2)
w00t!
I don't think w00t! is the appropriate response as FTA:
One thing is clear from the plea agreement: Soloway does not have a lot of assets for the government to seize. Among the items Pechman will be asked to consider for forfeiture are Soloway's collection of 24 pairs of sunglasses, valued at more than $3,700; 27 pairs of shoes, worth more than $7,400; and clothing worth about $14,200.
HAHA! seems much more appropriate... Even though the guy apparently dresses nicer then I do by leaps and bounds.
Re: (Score:2)
Re: (Score:2)
Well, yes but that goes without saying. After all, you are a slashdotter, aren't you?
Death threats are not protected speech (Score:1)
Re: (Score:2)
~Dan
Re: (Score:1)
~Dan
Re: (Score:1)
Re: (Score:2)
Re: (Score:2)
Can you really read your own post and think you were adding constructively to the topic? Spamming is annoying, ID theft is a crime, but neither deserves more than fines and some jail time."
I guess no one here shares my sense of sadistic humor. Quite honestly, guys like him have ruined the Internet. I remember when the free exchange of ideas on the internet was free of spam and scammers wanting to steal my money. There was a time y
Re: (Score:3, Insightful)
Re: (Score:2)
You misspelled 'BitTorrent'.