[Asrg] Hotmail used for scripted spam (from SlashDot)

Just ran across this SlashDot story that discussed a hole in Hotmail that 
allows spammers to use HotMail for spam 
(http://yro.slashdot.org/yro/03/06/08/0257203.shtml). The source appears to 
be this weblog (http://www.unicom.com/chrome/a/000262.html) and there is a 
link to this SpamCop article (http://spamcop.net/fom-serve/cache/363.html). 
And here is a link to a howto on how to do it 
(http://www.thecodeproject.com/csharp/httpmail.asp).

This seems to support someone's opinion that HotMail is being actively used 
for spamming. Note, that a CRI protocol will not help here since the 
HotMail C/R system will authenticate the sender. Only active involvement by 
the ISP and limiting amount of outgoing email will help. RMX will not 
resolve this issue either.

The best is one of the comments on the posting, which appears to be a copy 
of a letter from MS's customer service:

----snip---
I have checked the mail including the headers and it appears that the
mail passed through a Hotmail server. However, kindly note that this
does not mean such e-mail originated from our domain.

Sometimes, e-mail delivery between different domains are relayed
through other servers. This is the reason why a Hotmail server appears
in the mail header. It is possible that your ISP or e-mail provider
employs such method.
----snip---

Yakov

---------------------------------------------------------------------------------------------------
Yakov Shafranovich / <research@solidmatrix.com>
SolidMatrix Research, a division of SolidMatrix Technologies, Inc.
---------------------------------------------------------------------------------------------------
"One who watches the wind will never sow, and one who keeps his eyes on
the clouds will never reap" (Ecclesiastes 11:4)
---------------------------------------------------------------------------------------------------  

_______________________________________________
Asrg mailing list
Asrg@ietf.org
https://www1.ietf.org/mailman/listinfo/asrg