Re: [Asrg] Is there anything good enough?

Barry Shein <bzs@world.std.com> Tue, 06 May 2003 22:29 UTC

Received: from www1.ietf.org (ietf.org [132.151.1.19] (may be forged)) by ietf.org (8.9.1a/8.9.1a) with ESMTP id SAA12404 for <asrg-archive@odin.ietf.org>; Tue, 6 May 2003 18:29:13 -0400 (EDT)
Received: (from mailnull@localhost) by www1.ietf.org (8.11.6/8.11.6) id h46Mbsi04204 for asrg-archive@odin.ietf.org; Tue, 6 May 2003 18:37:54 -0400
Received: from ietf.org (odin.ietf.org [132.151.1.176]) by www1.ietf.org (8.11.6/8.11.6) with ESMTP id h46Mbs804193 for <asrg-web-archive@optimus.ietf.org>; Tue, 6 May 2003 18:37:54 -0400
Received: from ietf-mx (ietf-mx.ietf.org [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id SAA12394; Tue, 6 May 2003 18:28:43 -0400 (EDT)
Received: from ietf-mx ([132.151.6.1]) by ietf-mx with esmtp (Exim 4.12) id 19DAxU-00034a-00; Tue, 06 May 2003 18:30:48 -0400
Received: from ietf.org ([132.151.1.19] helo=www1.ietf.org) by ietf-mx with esmtp (Exim 4.12) id 19DAxT-00034X-00; Tue, 06 May 2003 18:30:47 -0400
Received: from www1.ietf.org (localhost.localdomain [127.0.0.1]) by www1.ietf.org (8.11.6/8.11.6) with ESMTP id h46MX4803160; Tue, 6 May 2003 18:33:04 -0400
Received: from ietf.org (odin.ietf.org [132.151.1.176]) by www1.ietf.org (8.11.6/8.11.6) with ESMTP id h46MWW803114 for <asrg@optimus.ietf.org>; Tue, 6 May 2003 18:32:32 -0400
Received: from ietf-mx (ietf-mx.ietf.org [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id SAA12258 for <asrg@ietf.org>; Tue, 6 May 2003 18:23:21 -0400 (EDT)
Received: from ietf-mx ([132.151.6.1]) by ietf-mx with esmtp (Exim 4.12) id 19DAsI-00032P-00 for asrg@ietf.org; Tue, 06 May 2003 18:25:26 -0400
Received: from pcls1.std.com ([199.172.62.103] helo=TheWorld.com) by ietf-mx with esmtp (Exim 4.12) id 19DAsH-00032M-00 for asrg@ietf.org; Tue, 06 May 2003 18:25:25 -0400
Received: from world.std.com (root@world-f.std.com [199.172.62.5]) by TheWorld.com (8.12.8p1/8.12.8) with ESMTP id h46MQB0v032337; Tue, 6 May 2003 18:26:11 -0400
Received: (from bzs@localhost) by world.std.com (8.9.3/8.9.3) id SAA18490; Tue, 6 May 2003 18:26:11 -0400 (EDT)
From: Barry Shein <bzs@world.std.com>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Message-ID: <16056.13955.271718.59630@world.std.com>
To: Alan DeKok <aland@freeradius.org>
Cc: asrg@ietf.org
Subject: Re: [Asrg] Is there anything good enough?
In-Reply-To: <E19D7LU-00078n-00@mail.nitros9.org>
References: <19744716058.20030506103859@brandenburg.com> <E19D7LU-00078n-00@mail.nitros9.org>
X-Mailer: VM 7.07 under Emacs 21.2.2
Content-Transfer-Encoding: 7bit
Sender: asrg-admin@ietf.org
Errors-To: asrg-admin@ietf.org
X-BeenThere: asrg@ietf.org
X-Mailman-Version: 2.0.12
Precedence: bulk
List-Unsubscribe: <https://www1.ietf.org/mailman/listinfo/asrg>, <mailto:asrg-request@ietf.org?subject=unsubscribe>
List-Id: Anti-Spam Research Group - IRTF <asrg.ietf.org>
List-Post: <mailto:asrg@ietf.org>
List-Help: <mailto:asrg-request@ietf.org?subject=help>
List-Subscribe: <https://www1.ietf.org/mailman/listinfo/asrg>, <mailto:asrg-request@ietf.org?subject=subscribe>
List-Archive: <https://www1.ietf.org/pipermail/asrg/>
Date: Tue, 06 May 2003 18:26:11 -0400
Content-Transfer-Encoding: 7bit
Content-Transfer-Encoding: 7bit

On May 6, 2003 at 14:39 aland@freeradius.org (Alan DeKok) wrote:
 > Dave Crocker <dcrocker@brandenburg.com> wrote:
 > > Spoofing is bad, but it is not at all the core problem with spam.
 > 
 >   So there's no point in solving one part of the spam problem, because
 > the problem is larger than that.  Yeah, that makes sense...

No, the problem is that this spoofing is a minor problem and any
solution is easily evaded by spammers.

The real problem is you really don't know much about spam or its
tactics so you easily conflate direction with magnitude.

If a solution seems to go in the direction you want then it must be
worthwhile. That's not true inasmuch as many "solutions" aren't worth
the effort.

But it's hard to convince someone who, due to lack of concrete
experience, has latched onto direction as equivalent to magnitude that
they're wrong because they'll keep coming back to their certainty that
it goes in the right direction, the proverbial spit in the ocean, yes
indeed in theory eventually the ocean will overflow...

The past 10 years (almost) of spam-fighting is littered with people
who knew a little SMTP, a little DNS, etc, and had gotten some spam so
proclaimed themselves experts and saviors.

For example, RBLs were by and large a waste of time if you use the
volume of spam over their lifetime as any measure. The RBLs
proliferated, and spam hockey-sticked in their faces. But because it
just *had* to be having an effect in the right direction its
proponents clung to their defense. Surely this RBL has blocked one
piece of spam! And two! So by induction...

Really bright people have done just as you (and others here) are
doing, sat in their darkened estaminets and, with minimal practical
information, do Einstenian gedanken experiments and declare
themselves, well, Einsteins (of spam fighting.)

The roads are littered with them and their mostly useless "solutions".

I think, in some sort of epistemological way, that's where we're going
here at this point; trying to distinguish magnitude from direction and
assign values to each and both taken together.

-- 
        -Barry Shein

Software Tool & Die    | bzs@TheWorld.com           | http://www.TheWorld.com
Purveyors to the Trade | Voice: 617-739-0202        | Login: 617-739-WRLD
The World              | Public Access Internet     | Since 1989     *oo*
_______________________________________________
Asrg mailing list
Asrg@ietf.org
https://www1.ietf.org/mailman/listinfo/asrg