CastleCops, Internet Crime Fighters
Need help? Click here to register for free! Absolutely zero advertisements on this site!

$9736.22 of $21422.68
left sidedonated so farneed $11686.46 donated to reach our goalright side, our goal
Help CastleCops serve the community on new servers, Donate Here to reach our goal.

Donation/Premium
spacer
block bottom
Security Central
spacer
· Home
· PIRT/Fried Phish
· MIRT
· SIRT
· Deutsch
· Wiki
· Newsletter
· O16/ActiveX
· CLSID List
· Contest2007
· Downloads
· Feedback (send)
· Forums
· HijackThis
· Hijacktrend
· LSPs
· My Downloads
· O18
· O20
· O21
· O22
· O23
· O9
· Premium
· Private Messages
· Proxomitron
· Reviews
· Search
· StartupList
· Stories Archive
· Submit News
· WsIRT
· Your Account
· Acceptable Use Policy
block bottom
Survey
spacer
Was 2007 a good year?

Yes it was a wonderful year
Yes, but there is always room for improvement
Status quo
It was a challenge
Other (leave comment)



Results
Polls

Votes: 940
Comments: 25
block bottom
spacer spacer
image Spam-Spackers: Are Filters the Way to Stop Spam? image
SPAM

Experts debate the best means for preventing unwanted e-mail.

There are two senses of stopping spam--stopping it from filling up our in-boxes and stopping spammers from sending it. Of course, if you solve the first problem, you also solve the second. Spammers send spam to make money. If no one sees the spam, they'll be wasting their time sending it and soon will stop.

Two of the most promising solutions to the spam problem are to filter it and to outlaw it. It's too early to say for sure which will win, but so far, filtering works and laws don't.






Jason Catlett and Paul Graham, Network World
May 26, 2003
Posted May 27, 2003

Building Better Filters

A year ago, few people thought filtering was a practical solution. Earlier filters, which identified mail as spam based on whether it contained specific words, were not very effective. If you made them tight enough to catch most spam, you got too many false positives--e-mails mistakenly identified as spam.

The new generation of statistical (also known as Bayesian) filters are much better. Mine lets through 2.5 spams per 1,000, with about 0.5 per 1,000 false positives. Moreover, the false positives that statistical filters yield tend to be mail that resembles spam: newsletters and advertising, not personal mail.

The argument against filters is that we still have to pay the cost of transmitting the e-mail. But this cost would go away if filters were widespread because response rates would be so low that it wouldn't pay to spam. And filters are becoming widespread because it is in the interest of the big online services to implement them. It decreases their infrastructure cost if they're known to be spam-proof, and, as MSN's full-page ads testify, effective spam protection is a big marketing advantage.

Creating Laws

There are two problems with trying to outlaw spam--the legitimate direct marketing lobby and the difficulty of enforcement. Direct marketers want to ensure that spam laws still permit them to contact their customers. The resulting loopholes are so big that spammers get through, too. Because the company they bought your e-mail address from is an "affiliate," they consider you their customer, too. Perhaps a law could be written that is tight enough to prevent this, but I doubt it.

There are several grades of spammers, from companies that call themselves "opt-in" mailers to the guys who hijack mail servers to send pornography. A tightly written law might shut down the "opt-in" spammers, but without effective enforcement the pornography spammers will just ignore it.

Enforcement is a hard problem. Spammers route a lot of their spam through servers offshore. What happens when they move their companies offshore, too? Are we going to be able to extradite people for spamming?

I'm not against trying to outlaw spam. I just don't think new laws will work any better than the current laws. Filtering works now.

Graham has written two books on Lisp and was a founder of the start-up that became Yahoo Store. Recently he has worked on spam filters and a new language called Arc. For more on filtering, see http://PaulGraham.com.

Article continues...
PC World


Posted on Tuesday, 27 May 2003 @ 07:08:17 UTC by cj (1381 reads)
[ Trackback ]
image

"Spam-Spackers: Are Filters the Way to Stop Spam?" | Login/Create an Account | 1 comment | Search
Threshold
The comments are owned by the poster. We aren't responsible for their content.

No Comments Allowed for Anonymous, please register

Re: Are Filters the Way to Stop Spam? (Score: 1)
by MrYowler  on Wednesday, 28 May 2003 @ 19:56:09 UTC
(User Info | Send a Message) http://hacking.catalyst.net/
Filters don't work, either; spammers spend less time figuring out how to evade filters, then we spend putting them up - and they often use our own research and collaborative information resources to defeat our countermeasures.

The reason why law doesn't work, is that the perpetrators, enablers, and perpetuators of spam are not held accountable for their actions. With no line of accountability or responsibility, there is no way to enforce law which prohibits spam-related activity.

Accountability is a singularly unpopular idea, among network and media providers of any kind, since it creates a liability for them, that might well radically change their business model, and therefore their profitability under the current infrastructure. If an ISP allows it's users to transmit traffic to any destination on the Internet, on port 25, then they are effectively enabling spammers to commit relay-rape, and then hide under the protection of their ISP and their right to privacy, to evade prosecution and financial responsibility for the damage done to the relay target. Likewise with proxy service administrators, and people who put up insecure servers with no regard for the people who are targeted by reflection attacks, from these servers. And with the relays, who are as often guilty of protecting the original spammer by refusing to block the relay or provide timely evidence with which to track the spammers, as they are innocent victims.

People need to be held responsible for what comes out of their networks. If Sprint closed up port 25, and forced their users to either become directly responsible for email traffic, or pass their traffic through Sprint-managed SMTP servers, then Sprint would have the capability to manage the volume of email that comes out of it's network, or redirect responsibility straight to the users who agreed to be responsible. They could then be held responsible when unreasonable amounts of spam pass through them, since they had every opportunity to examine the volume and content, and stop it from ever leaving their network. And they need to be held responsible, in order to guarantee that they *do* examine both volume and content, just as we do on the incoming side, with recieving filters. This will force them to hold the individual network users responsible, in turn, and the path of accountability is therefore fully established, to the first person (or organization) who is either grossly negligent, or who is responsible for the mailing. It's just not all that hard to filter mail on the outgoing side - and there is no excuse for failing to do so.

At the same time, this preserves the right to privacy, in that public responsibility falls to whoever runs the network that the message emanated from - and that organization or individual is in possession of the information required to hold the invidual user of that network, personally responsible, so they do not need to go through a lengthy, slow, and expensive process, in order to track down the offender.

It all comes down to accountability. If no one can get to the spammer, then no one can stop them. If no one on the transmit side of spam has a business-model motivator to pay what is sure to amount to a straight expense, on the balance sheet, then no one is going to do so. They have got to be held accountable. If Sprint refuses to take the simplest steps to stop the spam, then let me treat Sprint as if they were the spammer, in civil court. That'll put a coal in their shorts, in the subject! :)




 
Login
spacer
Nickname

Password

Security Code: Type Security Code: Usage signifies AUP acceptance
· New User? · Click here to create a registered account.
block bottom
Related Links
spacer
· del.icio.us!
· digg it!
· reddit!
· TrackBack (0)
· HotScripts
· W3 Consortium
· Spam Cop
· More about SPAM
· News by cj


Most read story about SPAM:
Messenger Pop-up Spam makes us sick

block bottom
Article Rating
spacer
Average Score: 0
Votes: 0

Please take a second and vote for this article:

Bad
Regular
Good
Very Good
Excellent


block bottom
Options
spacer

Printer Friendly Page  Printer Friendly Page

block bottom
spacer spacer