[Asrg] filters play a role

"Peter A. Friend" <octavian@corp.earthlink.net> Wed, 05 March 2003 03:12 UTC

Received: from www1.ietf.org (ietf.org [132.151.1.19] (may be forged)) by ietf.org (8.9.1a/8.9.1a) with ESMTP id WAA20144 for <asrg-archive@odin.ietf.org>; Tue, 4 Mar 2003 22:12:09 -0500 (EST)
Received: (from mailnull@localhost) by www1.ietf.org (8.11.6/8.11.6) id h253MtR05793 for asrg-archive@odin.ietf.org; Tue, 4 Mar 2003 22:22:55 -0500
Received: from ietf.org (odin.ietf.org [132.151.1.176]) by www1.ietf.org (8.11.6/8.11.6) with ESMTP id h253Ms505790 for <asrg-web-archive@optimus.ietf.org>; Tue, 4 Mar 2003 22:22:54 -0500
Received: from www1.ietf.org (ietf-mx.ietf.org [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id WAA20132; Tue, 4 Mar 2003 22:11:38 -0500 (EST)
Received: from www1.ietf.org (localhost.localdomain [127.0.0.1]) by www1.ietf.org (8.11.6/8.11.6) with ESMTP id h253M1505774; Tue, 4 Mar 2003 22:22:01 -0500
Received: from ietf.org (odin.ietf.org [132.151.1.176]) by www1.ietf.org (8.11.6/8.11.6) with ESMTP id h253Ld505760 for <asrg@optimus.ietf.org>; Tue, 4 Mar 2003 22:21:39 -0500
Received: from localhost.localdomain (ietf-mx.ietf.org [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id WAA20116 for <Asrg@ietf.org>; Tue, 4 Mar 2003 22:10:21 -0500 (EST)
Received: from localhost.localdomain (ebola [127.0.0.1]) by localhost.localdomain (8.12.8/8.12.8) with ESMTP id h253LQEN002339 for <Asrg@ietf.org>; Tue, 4 Mar 2003 19:21:26 -0800
Received: (from peter@localhost) by localhost.localdomain (8.12.8/8.12.8/Submit) id h253LQAZ002337; Tue, 4 Mar 2003 19:21:26 -0800
X-Authentication-Warning: localhost.localdomain: peter set sender to octavian@corp.earthlink.net using -f
From: "Peter A. Friend" <octavian@corp.earthlink.net>
To: Asrg <Asrg@ietf.org>
Content-Type: text/plain
Content-Transfer-Encoding: 7bit
X-Mailer: Ximian Evolution 1.0.8 (1.0.8-10)
Message-Id: <1046834485.2177.18.camel@ebola>
Mime-Version: 1.0
Content-Transfer-Encoding: 7bit
Subject: [Asrg] filters play a role
Sender: asrg-admin@ietf.org
Errors-To: asrg-admin@ietf.org
X-BeenThere: asrg@ietf.org
X-Mailman-Version: 2.0.12
Precedence: bulk
List-Unsubscribe: <https://www1.ietf.org/mailman/listinfo/asrg>, <mailto:asrg-request@ietf.org?subject=unsubscribe>
List-Id: Anti-Spam Research Group - IRTF <asrg.ietf.org>
List-Post: <mailto:asrg@ietf.org>
List-Help: <mailto:asrg-request@ietf.org?subject=help>
List-Subscribe: <https://www1.ietf.org/mailman/listinfo/asrg>, <mailto:asrg-request@ietf.org?subject=subscribe>
List-Archive: <https://www1.ietf.org/pipermail/asrg/>
Date: Tue, 04 Mar 2003 19:21:25 -0800
Content-Transfer-Encoding: 7bit
Content-Transfer-Encoding: 7bit

I just wanted to add a few comments about what I've seen here regarding
filters.

For one, I don't think any big fan of filters will say that something at
the protocol level doesn't need to be done to reduce and/or eliminate
spam. If he does, well, I won't go into that. I think it's blindingly
obvious that something has to change, and filters are just a small part.

The point regarding the escalating arms race is valid IMO, but not a
good enough reason to ditch the use of filters. I found the point
regarding cost of false positives vs. hitting 'd' very interesting, but
there is more than just a time cost here. I believe (based on experience
dealing with the masses in tech support 8+ years ago) that to see
something as offensive as pornography show up on your screen when you
haven't even clicked anything yet has a very high cost. Higher than an
occasional (if we do our work right) false positive? That's a personal
matter I think.

Anyway, I think filters are here to stay. Any solution we come up with
here is going to take substantial time to tweak and make available. Even
when it is in place, I am sure that some spam will get through somehow,
so we need something to catch what falls through the cracks.

Consider the "everyone uses SMTPAUTH" scenario. Sure, you can see what
account sent the spam, and you can track him down and spank him, but the
damage is done. Filters are a way of dealing with this. Even the large
spam filtering services that use fingerprinting suffer from this
problem; there is always the poor bastard who got the spam before the
spam rule was propagated.

Anyone that doesn't want to use filters can just turn them off, if their
ISP is doing their job right.

Of course filters really have nothing to do with the charter of this
group, so oops, sorry.

Peter




_______________________________________________
Asrg mailing list
Asrg@ietf.org
https://www1.ietf.org/mailman/listinfo/asrg