Re: [Asrg] Summary/outline of why the junk button idea is pre-failed

der Mouse <mouse@Rodents-Montreal.ORG> Tue, 02 March 2010 16:34 UTC

Return-Path: <mouse@Sparkle.Rodents-Montreal.ORG>
X-Original-To: asrg@core3.amsl.com
Delivered-To: asrg@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 47DC928C13E for <asrg@core3.amsl.com>; Tue, 2 Mar 2010 08:34:36 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -9.832
X-Spam-Level:
X-Spam-Status: No, score=-9.832 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HELO_MISMATCH_ORG=0.611, RCVD_IN_DNSWL_HI=-8, SUBJECT_FUZZY_TION=0.156]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 1+iYZQ+yhJ7x for <asrg@core3.amsl.com>; Tue, 2 Mar 2010 08:34:35 -0800 (PST)
Received: from Sparkle.Rodents-Montreal.ORG (Sparkle.Rodents-Montreal.ORG [216.46.5.7]) by core3.amsl.com (Postfix) with ESMTP id 1BC6128C11F for <asrg@irtf.org>; Tue, 2 Mar 2010 08:34:34 -0800 (PST)
Received: (from mouse@localhost) by Sparkle.Rodents-Montreal.ORG (8.8.8/8.8.8) id LAA24188; Tue, 2 Mar 2010 11:34:19 -0500 (EST)
From: der Mouse <mouse@Rodents-Montreal.ORG>
Message-Id: <201003021634.LAA24188@Sparkle.Rodents-Montreal.ORG>
Mime-Version: 1.0
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: 8bit
X-Erik-Conspiracy: There is no Conspiracy - and if there were I wouldn't be part of it anyway.
X-Message-Flag: Microsoft: the company who gave us the botnet zombies.
Date: Tue, 02 Mar 2010 11:01:08 -0500
To: Anti-Spam Research Group - IRTF <asrg@irtf.org>
In-Reply-To: <20100302155638.GA2653@gsp.org>
References: <20100302131810.GA22938@gsp.org> <Pine.GSO.4.64.1003020824500.16639@nber6.nber.org> <20100302155638.GA2653@gsp.org>
Subject: Re: [Asrg] Summary/outline of why the junk button idea is pre-failed
X-BeenThere: asrg@irtf.org
X-Mailman-Version: 2.1.9
Precedence: list
Reply-To: Anti-Spam Research Group - IRTF <asrg@irtf.org>
List-Id: Anti-Spam Research Group - IRTF <asrg.irtf.org>
List-Unsubscribe: <http://www.irtf.org/mailman/listinfo/asrg>, <mailto:asrg-request@irtf.org?subject=unsubscribe>
List-Archive: <http://www.irtf.org/mail-archive/web/asrg>
List-Post: <mailto:asrg@irtf.org>
List-Help: <mailto:asrg-request@irtf.org?subject=help>
List-Subscribe: <http://www.irtf.org/mailman/listinfo/asrg>, <mailto:asrg-request@irtf.org?subject=subscribe>
X-List-Received-Date: Tue, 02 Mar 2010 16:34:36 -0000

> No, actually, it takes that into primary consideration.  It simply
> extrapolates out to Internet scale by asking "what if everyone did
> this?"

> Well, and then by extrapolating what we know of past spammer behavior
> and current spammer capabilities.

And, as you know (or should), any datum obtained by extrapolation is of
at least slightly doubtful value.

Not that we (FWVO "we") shouldn't extrapolate.  But we shouldn't
confuse extrapolations with facts.

> [...] and B) large numbers of incompetent users -- which is what we
> have -- do not en masse magically become competent.

Actually, at many tasks, they do.  Not individually, of course, but en
masse; individuals' input needs statistical processing to produce the
more-competent output, though this can sometimes be as simple as just
taking the mean.  (See _The Wisdom Of Crowds_.)

> One of the repeated mistakes made in the anti-spam field over the
> past twenty years -- and I'll admit to making it too -- is to presume
> that just beause spammers aren't doing something today, that they
> can't do it tomorrow.

Indeed.  But it is equally wrong to presume that just because they can
do something, they will.  And, even if they do, this is not a static
field; even something that ultimately gets defeated may be useful,
either in the interim or in what it teaches us.

> Spammers have proven to us that once something starts to catch on,
> they will invest the time to figure out if they can turn it to their
> advantage.

Some of them.  Spammers are no more a homogenous class than
anti-spammers are.  This - FWVO "this" - may well prove to be useless
against certain classes of spammer, possibly even actively harmful.
But that is not to say that it will be useless against all spammers,
nor that it won't prove to have overall positive value.  (Not to say
that it will, either, of course.)

Of course, that's all generalities.  As for the specifics of this
particular instance, I see this as a space in which standardization is
actually a bad thing.  Even stipulating that your extrapolations are
dead on, your dismal outlook is predicated upon there being one
widely-deployed system; postulating dozens of TiS systems, each
slightly different and incompatible, leads me to a much more hopeful
outlook.  And that's what research often is: trying dozens of things to
see what we can learn from them.

/~\ The ASCII				  Mouse
\ / Ribbon Campaign
 X  Against HTML		mouse@rodents-montreal.org
/ \ Email!	     7D C8 61 52 5D E7 2D 39  4E F1 31 3E E8 B3 27 4B