Re: [Asrg] Two ways to look at spam

Bruce Stephens <Bruce.Stephens@isode.com> Sat, 05 July 2003 00:26 UTC

Received: from optimus.ietf.org (ietf.org [132.151.1.19] (may be forged)) by ietf.org (8.9.1a/8.9.1a) with ESMTP id UAA13366 for <asrg-archive@odin.ietf.org>; Fri, 4 Jul 2003 20:26:39 -0400 (EDT)
Received: from localhost.localdomain ([127.0.0.1] helo=www1.ietf.org) by optimus.ietf.org with esmtp (Exim 4.20) id 19YasS-0006rD-JJ for asrg-archive@odin.ietf.org; Fri, 04 Jul 2003 20:26:11 -0400
Received: (from exim@localhost) by www1.ietf.org (8.12.8/8.12.8/Submit) id h650Q80G026353 for asrg-archive@odin.ietf.org; Fri, 4 Jul 2003 20:26:08 -0400
Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by optimus.ietf.org with esmtp (Exim 4.20) id 19YasS-0006qy-GM for asrg-web-archive@optimus.ietf.org; Fri, 04 Jul 2003 20:26:08 -0400
Received: from ietf-mx (ietf-mx.ietf.org [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id UAA13349; Fri, 4 Jul 2003 20:26:06 -0400 (EDT)
Received: from ietf-mx ([132.151.6.1]) by ietf-mx with esmtp (Exim 4.12) id 19YasQ-0004Iz-00; Fri, 04 Jul 2003 20:26:06 -0400
Received: from ietf.org ([132.151.1.19] helo=optimus.ietf.org) by ietf-mx with esmtp (Exim 4.12) id 19YasP-0004Iw-00; Fri, 04 Jul 2003 20:26:05 -0400
Received: from localhost.localdomain ([127.0.0.1] helo=www1.ietf.org) by optimus.ietf.org with esmtp (Exim 4.20) id 19YasL-0006ny-6K; Fri, 04 Jul 2003 20:26:01 -0400
Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by optimus.ietf.org with esmtp (Exim 4.20) id 19YasH-0006nm-22 for asrg@optimus.ietf.org; Fri, 04 Jul 2003 20:25:57 -0400
Received: from ietf-mx (ietf-mx.ietf.org [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id UAA13346 for <asrg@ietf.org>; Fri, 4 Jul 2003 20:25:55 -0400 (EDT)
Received: from ietf-mx ([132.151.6.1]) by ietf-mx with esmtp (Exim 4.12) id 19YasE-0004Ir-00 for asrg@ietf.org; Fri, 04 Jul 2003 20:25:54 -0400
Received: from usergg026.dsl.pipex.com ([62.190.174.26]) by ietf-mx with esmtp (Exim 4.12) id 19YasD-0004Il-00 for asrg@ietf.org; Fri, 04 Jul 2003 20:25:54 -0400
Received: from cenderis.demon.co.uk ([62.49.17.254]) by usergg026.dsl.pipex.com via TCP (with SMTP (internal)) with ESMTP for <asrg@ietf.org>; Sat, 5 Jul 2003 01:25:05 +0100
To: ASRG list <asrg@ietf.org>
Subject: Re: [Asrg] Two ways to look at spam
References: <E19XjUp-0005pA-00@argon.connect.org.uk> <843choanwv.fsf@cenderis.demon.co.uk> <20030704184954.E10667@m433>
From: Bruce Stephens <Bruce.Stephens@isode.com>
In-Reply-To: <20030704184954.E10667@m433> (Walter Dnes's message of "Fri, 4 Jul 2003 18:49:54 -0400")
Message-ID: <848yrdx1k1.fsf@cenderis.demon.co.uk>
User-Agent: Gnus/5.1003 (Gnus v5.10.3) Emacs/21.3 (gnu/linux)
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Sender: asrg-admin@ietf.org
Errors-To: asrg-admin@ietf.org
X-BeenThere: asrg@ietf.org
X-Mailman-Version: 2.0.12
Precedence: bulk
List-Unsubscribe: <https://www1.ietf.org/mailman/listinfo/asrg>, <mailto:asrg-request@ietf.org?subject=unsubscribe>
List-Id: Anti-Spam Research Group - IRTF <asrg.ietf.org>
List-Post: <mailto:asrg@ietf.org>
List-Help: <mailto:asrg-request@ietf.org?subject=help>
List-Subscribe: <https://www1.ietf.org/mailman/listinfo/asrg>, <mailto:asrg-request@ietf.org?subject=subscribe>
List-Archive: <https://www1.ietf.org/pipermail/asrg/>
Date: Sat, 05 Jul 2003 01:25:02 +0100

Walter Dnes <waltdnes@waltdnes.org> writes:

> On Wed, Jul 02, 2003 at 05:33:52PM +0100, Bruce Stephens wrote

[...]

>> So I think the best way to attack spam is to make sending email
>> expensive (in some way---this may involve computational cost rather
>> than some kind of financial framework) such that anybody sending me
>> email thinks a bit first (and so it won't be worthwhile sending to
>> large numbers of people).  So this would be attacking the volume
>> part of usual definitions of spam.
>
>   A few problems...
>
> 1) I don't throw away a pefectly good computer and buy the
> latest/greatest every year.  This email is coming from a 433 mhz
> machine with 128 megs of RAM.  How do I compare with someone who's
> just bought a 512 meg machine that runs at 3 gigahertz ?

Well, the 3GHz one is presumably about 1 order of magnitude faster
(give or take).  So if the usual cost of sending an email is 1 second
on a 3GHz CPU, then it might take 10 seconds on your slower one (or,
the 3GHz machine can send 10 times as many emails in the same time).

For *really* slow machines (such as mobile phones), I imagine the ISP
could charge per email, and provide the CPU power.  Something like that.

> 2) A beowolf cluster of cast-off 1 gigahertz machines will blow the
> "computational cost" to smithereens.

Yes, that's a real possibility.  It's still adding to the cost,
however: running clusters of cheap PCs is only relatively cheap, it'll
still take some running.

A more likely attack would be to include hashcash calculating code in
screensavers, Javascript on web pages, worms, etc., so you use the
zillions of PCs that other people are maintaining.

[...]



_______________________________________________
Asrg mailing list
Asrg@ietf.org
https://www1.ietf.org/mailman/listinfo/asrg