Skip to Content.
Sympa Menu

internetworkers - Re: [internetworkers] Re: SPAM the SPAMMERS

internetworkers AT lists.ibiblio.org

Subject: Internetworkers: http://www.ibiblio.org/internetworkers/

List archive

Chronological Thread  
  • From: Steven Champeon <schampeo AT hesketh.com>
  • To: "'Internetworkers: http://www.ibiblio.org/internetworkers/'" <internetworkers AT lists.ibiblio.org>
  • Subject: Re: [internetworkers] Re: SPAM the SPAMMERS
  • Date: Wed, 19 Nov 2003 13:18:31 -0500

on Wed, Nov 19, 2003 at 01:00:06PM -0500, Shea Tisdale wrote:
> Steve Champeon took a break from fighting spam to write:
> >
> > > I've also watching early implementations of Challenged Response. I
> > > think that could also be very helpful in eliminating spam.
> >
> > Yuck. C/R, for anyone who runs a mailing list, is a bane. I unsub
> > anyone using C/R whose systems are too stupid to know when they're
> > receiving mail sent via a legit mailing list. I sincerely hope it
> > doesn't come into wider use, or that if it does, it gets a hell of a
> > lot better than the systems I've seen...
>
> I think the problem is with the users. I've tried it and you can
> configure it allow the list address to email you before subscribing to
> the list. I do agree that it still needs to be improved before being
> widely adopted, but you have to agree that it is impossible for a
> spammer to get around when implemented.

I use RFC 2919/2368 headers on my list - no C/R system should /ever/
respond to a message with such headers; at best, it should build a
whitelist of known legit mailing lists and avoid them. As for whether
a spammer can get around it - all the message needs is a legit email
for the reply-to, and ten minutes with perl to work around C/R. Give
the spammers a few months, if they haven't already determined ways to
work around the more popular systems.

--
hesketh.com/inc. v: (919) 834-2552 f: (919) 834-2554 w: http://hesketh.com
Book publishing is second only to furniture delivery in slowness. -b. schneier




Archive powered by MHonArc 2.6.24.

Top of Page