Re: [Asrg] An Anti-Spam Heuristic

Steve Atkins <steve@blighty.com> Thu, 13 December 2012 02:12 UTC

Return-Path: <steve@blighty.com>
X-Original-To: asrg@ietfa.amsl.com
Delivered-To: asrg@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 229B921F845E for <asrg@ietfa.amsl.com>; Wed, 12 Dec 2012 18:12:48 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -3.599
X-Spam-Level:
X-Spam-Status: No, score=-3.599 tagged_above=-999 required=5 tests=[AWL=1.000, BAYES_00=-2.599, GB_I_LETTER=-2]
Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id bXnPqqqWpD-z for <asrg@ietfa.amsl.com>; Wed, 12 Dec 2012 18:12:46 -0800 (PST)
Received: from m.wordtothewise.com (misc.wordtothewise.com [184.105.179.154]) by ietfa.amsl.com (Postfix) with ESMTP id 7C21921F85A0 for <asrg@irtf.org>; Wed, 12 Dec 2012 18:12:46 -0800 (PST)
Received: from [192.168.80.21] (204.11.227.194.static.etheric.net [204.11.227.194]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) (Authenticated sender: steve) by m.wordtothewise.com (Postfix) with ESMTPSA id 77FA02E185 for <asrg@irtf.org>; Wed, 12 Dec 2012 18:12:44 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=wordtothewise.com; s=1.wttw; t=1355364765; bh=yQUM771ddp2iy43sQc2PlHXQiMeZH1cjvF7DO02v3xE=; h=Content-Type:Mime-Version:Subject:From:In-Reply-To:Date: Content-Transfer-Encoding:Message-Id:References:To; b=ZM74gUwOBPUdfMH1G7ka6FhW5xfKXRM1LZY5JXZhI+Lsk8vGQsW5M745l/UeOFWJU 5aWZ+tPOMEkOQNulaPbLBemWzjPkVsrepHC/e2Nybwdx/2nDPgOTc6qv1L29YhnIYm VjXwD2+rLtrCt9z8yLjF3mkimFd5OQDk1zqboAOM=
Content-Type: text/plain; charset="iso-8859-1"
Mime-Version: 1.0 (Mac OS X Mail 6.2 \(1499\))
From: Steve Atkins <steve@blighty.com>
In-Reply-To: <SNT002-W143FB9A867C92FA80D90E04C54E0@phx.gbl>
Date: Wed, 12 Dec 2012 18:12:43 -0800
Content-Transfer-Encoding: quoted-printable
Message-Id: <DA14FA4D-13CB-4C61-90C4-4E690F0EC745@blighty.com>
References: <SNT002-W143FB9A867C92FA80D90E04C54E0@phx.gbl>
To: Anti-Spam Research Group - IRTF <asrg@irtf.org>
X-Mailer: Apple Mail (2.1499)
Subject: Re: [Asrg] An Anti-Spam Heuristic
X-BeenThere: asrg@irtf.org
X-Mailman-Version: 2.1.12
Precedence: list
Reply-To: Anti-Spam Research Group - IRTF <asrg@irtf.org>
List-Id: Anti-Spam Research Group - IRTF <asrg.irtf.org>
List-Unsubscribe: <http://www.irtf.org/mailman/options/asrg>, <mailto:asrg-request@irtf.org?subject=unsubscribe>
List-Archive: <http://www.irtf.org/mail-archive/web/asrg>
List-Post: <mailto:asrg@irtf.org>
List-Help: <mailto:asrg-request@irtf.org?subject=help>
List-Subscribe: <http://www.irtf.org/mailman/listinfo/asrg>, <mailto:asrg-request@irtf.org?subject=subscribe>
X-List-Received-Date: Thu, 13 Dec 2012 02:12:48 -0000

On Dec 12, 2012, at 5:43 PM, Adam Sobieski <adamsobieski@hotmail.com> wrote:

> Greetings. I have some ideas to prevent spam. A number of heuristics include increasing the computation required to send and receive an email, for example one to a few minutes of computation per email on desktop computers.
> 
> One example of a heuristic, from that category, includes the use of a random number generator, seeded or salted with a combination of the sender's email address, the recipient's email address, and the date and time of the sending of the email. Then, in the described example, some amount of computation, measurable in minutes on a desktop computer, churns a stream of bits from the random number generator, in a buffer the size of which can be obtained from the size of the email, and with those bits in that buffer then utilizable by other heuristics. The recipient of an email can, with the sender's address, their own email address, the date and time of the sending of the email, and possibly other data, seed or salt an identical random number generator, churning a stream of bits, with an indicated amount of computation, measurable in minutes, to obtain the same bits in an identically sized buffer.
> 
> By increasing the computation required to send and receive email messages, for example measurable in minutes of desktop computation, desktop graphics card computation, spam can be reduced as spammers would have to compute, per letter, per recipient, per email sending event, as described. In addition to, possibly in combination to, that category of heuristic, increasing the computation required to send and receive emails, the digital signing of email messages can be of use to preventing spam.

You might want to look at hashcash. http://en.wikipedia.org/wiki/Hashcash

Brief summary of the conclusion: cannot work, as spammers have much easier access to free CPU cycles than do legitimate senders of mail.

Cheers,
  Steve