Bots was Re: [Asrg] Email service assumptions and making system-wide changes
"Tom Petch" <nwnetworks@dial.pipex.com> Tue, 17 January 2006 12:40 UTC
Received: from localhost.cnri.reston.va.us ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1Eyq8T-00069P-Ma; Tue, 17 Jan 2006 07:40:29 -0500
Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1Eyq8R-00068l-EQ for asrg@megatron.ietf.org; Tue, 17 Jan 2006 07:40:27 -0500
Received: from ietf-mx.ietf.org (ietf-mx [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id HAA11922 for <asrg@ietf.org>; Tue, 17 Jan 2006 07:39:01 -0500 (EST)
Received: from blaster.systems.pipex.net ([62.241.163.7]) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1EyqGY-0005gg-4S for asrg@ietf.org; Tue, 17 Jan 2006 07:48:50 -0500
Received: from pc6 (1Cust118.tnt106.lnd4.gbr.da.uu.net [213.116.60.118]) by blaster.systems.pipex.net (Postfix) with SMTP id D5810E0002C7; Tue, 17 Jan 2006 12:40:03 +0000 (GMT)
Message-ID: <014a01c61b5a$5369ff60$0601a8c0@pc6>
From: Tom Petch <nwnetworks@dial.pipex.com>
To: Barry Shein <bzs@world.std.com>
References: <OF4768D65E.ECA3CB39-ON802570F8.004A9BA8-802570F8.004AA408@slc.co.uk><43CBF4CD.30708@dcrocker.net> <17355.64568.706837.635025@world.std.com>
Subject: Bots was Re: [Asrg] Email service assumptions and making system-wide changes
Date: Tue, 17 Jan 2006 12:07:49 +0100
MIME-Version: 1.0
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2800.1106
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106
X-Spam-Score: 0.1 (/)
X-Scan-Signature: 14582b0692e7f70ce7111d04db3781c8
Content-Transfer-Encoding: 7bit
Cc: asrg@ietf.org
X-BeenThere: asrg@ietf.org
X-Mailman-Version: 2.1.5
Precedence: list
Reply-To: Tom Petch <nwnetworks@dial.pipex.com>
List-Id: Anti-Spam Research Group - IRTF <asrg.ietf.org>
List-Unsubscribe: <https://www1.ietf.org/mailman/listinfo/asrg>, <mailto:asrg-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www1.ietf.org/pipermail/asrg>
List-Post: <mailto:asrg@ietf.org>
List-Help: <mailto:asrg-request@ietf.org?subject=help>
List-Subscribe: <https://www1.ietf.org/mailman/listinfo/asrg>, <mailto:asrg-request@ietf.org?subject=subscribe>
Sender: asrg-bounces@ietf.org
Errors-To: asrg-bounces@ietf.org
You identify bots as the principal current source of spam and you may be right - you are not the first to posit this on this list. I would, however, like to see some evidence. What I do see is a lack of evidence in the form of articles written on technology in serious newspapers, particularly those advising on the use of technology. The concept of bots does not figure, so either these professional journalists are ignorant or our view is skewed or ... By comparison, suggestions that most spam came from a small number of people or that there was an increase in spam from former communist states has been backed up by statistics, by reference to web sites etc. I don't say you are wrong - just that I wonder why others do not see it that way - and I do see it as important to identify the nature of spam in order to propose a realistic solution. Tom Petch ----- Original Message ----- From: "Barry Shein" <bzs@world.std.com> To: <dcrocker@bbiw.net> Cc: <asrg@ietf.org> Sent: Monday, January 16, 2006 9:04 PM Subject: Re: [Asrg] Email service assumptions and making system-wide changes > > I am surprised that after all these years the problem of spam is still > so fundamentally misunderstood. > > The problem at this point are viral-infected zombie bot armies. > > These provide massive e-mail distribution power and most importantly > anonymity and mobility allowing evasion. > > I think we look at the msgs in our boxes and focus on the content and > imagine ourselves sending such a msg to someone else which leads to a > vastly oversimplified view of the situation. > > Everyone gets dozens to hundreds of these spams per day (perhaps some > blocked but they're still being sent.) Services which handle mail > delivery get gazillions of these msgs per day, mostly addressed to > non-existant mailboxes or similar. > > These dirtbags can't do this with legally operated (by them) > facilities. > > Their economics don't warrant it. > > Not even close. > > So they deploy literally hundreds of thousands, in total often over a > million, virus-infected zombie bots for which they're not paying a > nickel for (or at least nothing in proportion to their rational market > worth, sure, even bankrobbers have to buy gasoline.) > > And that's it. > > THAT'S IT. > > Stop or significantly slow that and they're defunct, they can't hit us > with billions of msgs per day for the paltry sums they're earning. > > And even if they could afford it they'd lose that evasive mobility and > they'd be shut down or at least blocked at a low-level so quickly > they'd go find another profession like stealing people's pets for lab > research or whatever. > > How to fix what I describe is a further discussion. > > But for the love all that is good and right let's try to agree on what > the problem is. > > It ain't some miscreant spinning an SMTP server on his laptop much > like any of us sending email only more fervently. > > It's massive, organized criminal infection and exploitation of vast > zombie bot armies numbering in the hundreds of thousands of infected > PCs. > > Get rid of that and the amount of "spam" you receive wouldn't be worth > chatting about. > > You're welcome. > > -- > -Barry Shein > > The World | bzs@TheWorld.com | http://www.TheWorld.com > Purveyors to the Trade | Voice: 800-THE-WRLD | Login: Nationwide > Software Tool & Die | Public Access Internet | SINCE 1989 *oo* > > _______________________________________________ > Asrg mailing list > Asrg@ietf.org > https://www1.ietf.org/mailman/listinfo/asrg _______________________________________________ Asrg mailing list Asrg@ietf.org https://www1.ietf.org/mailman/listinfo/asrg
- [Asrg] Re: Bots Frank Ellermann
- [Asrg] Spam, why is it still a problem? Craig Cockburn
- Re: [Asrg] Spam, why is it still a problem? der Mouse
- Re: [Asrg] Spam, why is it still a problem? Tom Petch
- Re: [Asrg] Spam, why is it still a problem? Danny Angus
- Re: [Asrg] Spam, why is it still a problem? Andrew W. Donoho
- Re: [Asrg] Spam, why is it still a problem? Dave Crocker
- [Asrg] Re: Spam, why is it still a problem? Frank Ellermann
- Re: [Asrg] Spam, why is it still a problem? Barry Shein
- RE: [Asrg] Spam, why is it still a problem? Hallam-Baker, Phillip
- Re: [Asrg] Spam, why is it still a problem? Seth Breidbart
- [Asrg] Email service assumptions and making syste… Dave Crocker
- Re: [Asrg] Email service assumptions and making s… Barry Shein
- [Asrg] Re: Email service assumptions and making s… Frank Ellermann
- Re: [Asrg] Email service assumptions and making s… Seth Breidbart
- Re: [Asrg] Email service assumptions and making s… Douglas Otis
- Re: [Asrg] Email service assumptions and making s… Barry Shein
- Re: [Asrg] Email service assumptions and making s… Seth Breidbart
- [Asrg] Re: Spam, why is it still a problem? Stephane Bortzmeyer
- Re: [Asrg] Re: Spam, why is it still a problem? Gadi Evron
- [Asrg] Re: Spam, why is it still a problem? Stephane Bortzmeyer
- Re: [Asrg] Re: Spam, why is it still a problem? Tom Petch
- Bots was Re: [Asrg] Email service assumptions and… Tom Petch
- Re: [Asrg] Email service assumptions and making s… John Levine
- Re: Bots was Re: [Asrg] Email service assumptions… John Levine
- Re: [Asrg] Email service assumptions and making s… Barry Shein
- Re: [Asrg] Email service assumptions and making s… Douglas Otis
- Re: Bots was Re: [Asrg] Email service assumptions… Barry Shein
- [Asrg] Re: Bots Frank Ellermann
- RE: [Asrg] Re: Bots Larry Seltzer
- Re: [Asrg] Re: Bots Douglas Otis
- Re: [Asrg] Re: Bots Seth Breidbart
- [Asrg] Re: Bots Frank Ellermann
- Re: [Asrg] Spam, why is it still a problem? Craig Cockburn
- [Asrg] Re: Bots Frank Ellermann
- Re: [Asrg] Re: Spam, why is it still a problem? Craig Cockburn
- RE: [Asrg] Re: Bots Larry Seltzer
- Re: [Asrg] Re: Bots Gadi Evron
- Re: [Asrg] Re: Spam, why is it still a problem? Douglas Otis
- Re: [Asrg] Spam, why is it still a problem? John Levine
- Re: [Asrg] Spam, why is it still a problem? Craig Cockburn
- Re: [Asrg] Re: Spam, why is it still a problem? Craig Cockburn
- Re: [Asrg] Spam, why is it still a problem? Danny Angus
- Re: [Asrg] Email service assumptions and making s… Danny Angus
- Re: [Asrg] Email service assumptions and making s… Danny Angus
- Re: [Asrg] Spam, why is it still a problem? John Levine
- Re: [Asrg] Spam, why is it still a problem? John Levine
- Re: [Asrg] Email service assumptions and making s… Seth Breidbart
- Re: [Asrg] Spam, why is it still a problem? Craig Cockburn
- Re: [Asrg] Spam, why is it still a problem? Bill Cole
- Re: [Asrg] Spam, why is it still a problem? John Levine
- Re: [Asrg] Spam, why is it still a problem? Barry Shein
- Re: [Asrg] Email service assumptions and making s… Barry Shein
- Re: [Asrg] Email service assumptions and making s… Laird Breyer
- [Asrg] Re: Email service assumptions and making s… Frank Ellermann
- Re: [Asrg] Email service assumptions and making s… Danny Angus
- Re: [Asrg] Spam, why is it still a problem? John Levine
- RE: [Asrg] Re: Spam, why is it still a problem? Wesley Peters
- Re: [Asrg] Spam, why is it still a problem? Dave Crocker
- Re: [Asrg] Email service assumptions and making s… Dave Crocker
- Re: [Asrg] Spam, why is it still a problem? Danny Angus