Re: [Asrg] News Article - Microsoft and spam

Vernon Schryver <vjs@calcite.rhyolite.com> Thu, 26 June 2003 16:59 UTC

Received: from www1.ietf.org (ietf.org [132.151.1.19] (may be forged)) by ietf.org (8.9.1a/8.9.1a) with ESMTP id MAA09230 for <asrg-archive@odin.ietf.org>; Thu, 26 Jun 2003 12:59:40 -0400 (EDT)
Received: (from exim@localhost) by www1.ietf.org (8.11.6/8.11.6) id h5QGxEO28419 for asrg-archive@odin.ietf.org; Thu, 26 Jun 2003 12:59:14 -0400
Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by optimus.ietf.org with esmtp (Exim 4.20) id 19Va5a-0007OI-De for asrg-web-archive@optimus.ietf.org; Thu, 26 Jun 2003 12:59:14 -0400
Received: from ietf-mx (ietf-mx.ietf.org [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id MAA09203; Thu, 26 Jun 2003 12:59:10 -0400 (EDT)
Received: from ietf-mx ([132.151.6.1]) by ietf-mx with esmtp (Exim 4.12) id 19Va5Y-0003tF-00; Thu, 26 Jun 2003 12:59:12 -0400
Received: from ietf.org ([132.151.1.19] helo=optimus.ietf.org) by ietf-mx with esmtp (Exim 4.12) id 19Va5S-0003tC-00; Thu, 26 Jun 2003 12:59:06 -0400
Received: from localhost.localdomain ([127.0.0.1] helo=www1.ietf.org) by optimus.ietf.org with esmtp (Exim 4.20) id 19Va5N-0007M1-GW; Thu, 26 Jun 2003 12:59:01 -0400
Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by optimus.ietf.org with esmtp (Exim 4.20) id 19Va4V-0007LU-9S for asrg@optimus.ietf.org; Thu, 26 Jun 2003 12:58:07 -0400
Received: from ietf-mx (ietf-mx.ietf.org [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id MAA09131 for <asrg@ietf.org>; Thu, 26 Jun 2003 12:58:02 -0400 (EDT)
Received: from ietf-mx ([132.151.6.1]) by ietf-mx with esmtp (Exim 4.12) id 19Va4T-0003s4-00 for asrg@ietf.org; Thu, 26 Jun 2003 12:58:05 -0400
Received: from calcite.rhyolite.com ([192.188.61.3]) by ietf-mx with esmtp (Exim 4.12) id 19Va4H-0003rr-00 for asrg@ietf.org; Thu, 26 Jun 2003 12:57:53 -0400
Received: (from vjs@localhost) by calcite.rhyolite.com (8.12.10.Beta0/8.12.10.Beta0) id h5QGvlZx019967 for asrg@ietf.org env-from <vjs>; Thu, 26 Jun 2003 10:57:47 -0600 (MDT)
From: Vernon Schryver <vjs@calcite.rhyolite.com>
Message-Id: <200306261657.h5QGvlZx019967@calcite.rhyolite.com>
To: asrg@ietf.org
Subject: Re: [Asrg] News Article - Microsoft and spam
References: <5.2.0.9.2.20030626124043.00bb4ea0@std5.imagineis.com>
Sender: asrg-admin@ietf.org
Errors-To: asrg-admin@ietf.org
X-BeenThere: asrg@ietf.org
X-Mailman-Version: 2.0.12
Precedence: bulk
List-Unsubscribe: <https://www1.ietf.org/mailman/listinfo/asrg>, <mailto:asrg-request@ietf.org?subject=unsubscribe>
List-Id: Anti-Spam Research Group - IRTF <asrg.ietf.org>
List-Post: <mailto:asrg@ietf.org>
List-Help: <mailto:asrg-request@ietf.org?subject=help>
List-Subscribe: <https://www1.ietf.org/mailman/listinfo/asrg>, <mailto:asrg-request@ietf.org?subject=subscribe>
List-Archive: <https://www1.ietf.org/pipermail/asrg/>
Date: Thu, 26 Jun 2003 10:57:47 -0600

> From: Yakov Shafranovich <research@solidmatrix.com>

> ...
> I was wondering about that as well. Would hiring people for go through the 
> human interface test increases the costs for spammers? Does it matter since 
> the cost is so small anyway? What about in a C/R system where a human 
> interface test is used, would spammers actually go ahead and hire people to 
> pass the test from each bounced message?

Let's do some arithmetic.  At $10/hour and 10 seconds per challenge
answered or account created, the cost would be about $0.03 address.
That sounds a little but not very high to send mail until the
challenge whitelist entry is deleted by the spam target.  It sounds
low for a valid sender account that can be used for millions of
messages for days until the free provider notices enough bounces
or receives a complaint and terminates it.

Free providers often impose delays of more than 10 seconds for
account creation.  That can be handled by giving your $10/hour
employees big monitors and have them run several windows simultaneously
to overlap with the delays.  Pay them by the account created or
challenge answered to keep them busy.  Use software to automate
most of the process, including counting and checking the work.
Don't worry about the U.S.  labor laws about piece work, since
you're probably breaking lots of other laws.

I wonder how much of the flood of "work at home" spam today involves
free mail account creation jobs?


Vernon Schryver    vjs@rhyolite.com

_______________________________________________
Asrg mailing list
Asrg@ietf.org
https://www1.ietf.org/mailman/listinfo/asrg