The Northern Spy: combatting spam
TweetFollow Us on Twitter

The Northern Spy: combatting spam

By Rick Sutcliffe

Spam is used either as a noun to refer to unsolicited bulk email, or as a verb to refer to the act of sending same. There are two categories of spam -- the difference depending on whether or not the mail has a commercial or monetary aspect;that is, the sender is attempting to obtain money from the recipients for a service, product, or cause.

There may or may not also be a fraudulent aspect to the spam -- generally one should expect that those who engage in one unethical activity would challenged where the truth is concerned as well. For instance, non-commercial spam is frequently sent to argue for or against some cause, and may be abusive of the recipient, or of some identifiable group or organization to which the recipient may be supposed to belong. Sometimes it's even a one-time friend or former fellow member of some organization who is now prosecuting a vendetta in semi-public fashion.

But no matter what the motivation for sending spam, or how the sender justifies his/her actions, the practice is universally condemned by recipients, legitimate internet service providers, and the laws of most jurisdictions. Whether the spammer is sending thirty or thirty million messages at a time, you don't want to get them, the ISPs don't want to transmit them, and law enforcement agencies want to catch them and put them out of business for good.

Just as the typical new server will be attacked by hackers within seconds of joining the Internet for the first time, the typical email inbox begins to fill up with unsolicited messages soon after being opened. One of the most frequently asked questions by newcomers to the web (there still are some) is what to do about all the junk mail. Under another hat, the Spy offers web services, and noted that as much as 90% of all email presented to his servers is marked as spam. Well, the Spy obtained his first email address on Bitnet around 1972 (yes, the reader sees that date correctly) and herewith tenders a few modest suggestions.

What to do:

First, never answer an email message without checking to ensure it is from a known source. Spammers sometimes send email to many names on a domain (joe@thedomain, sally@thedomain, fred@the domain, etc.), hoping to hit a real account with one of several hundred thousand attempts. Replying will merely confirm to the sender that yours is a valid email address, and (s)he will promptly add it to many lists and sell it to other spammers.

Second, never display an email address in clear text on your web site, where it can be harvested by spammers and sold. Instead, obfuscate it. The simplest is to render it as me--AT--thisAddress.com rather than using the "@" sign. There are other ways to do this in text so it does not look like an address to a harvester (see a link at the bottom), or the address can be placed in a graphic so it can only be read by human eyes. Likewise, the Spy has now reluctantly concluded, do not allow your debating club, philatelic society, condo owners association, authors' group, or knitting circle to publish your email address. Such lists are frequently stolen.

Third, never do anything that the unsolicited email requests. Any attached file you open almost certainly contains a malware program that can take over your computer, either for the purpose of sending more spam, to find those stored credit card numbers, passwords, and other personal information, or to vandalize your files. The Spy adopts a zero-tolerance policy toward file attachments. Unless the sender has been specifically asked to send it, he deletes all such unread. Sorry, students, but you cannot submit your homework that way. The risks are too great.

Likewise, clicking on a link in the message will surely take you to a malicious web site. These fall into two categories. The first consists of fake sites pretending to be your bank, PayPal, or some other place where you have an account. The goal is to obtain your ID, your credit card or other personal information, and/or your password to an account. The second group of malicious sites are those set up to exploit bugs in browsers that may allow the site access to your computer and files. The common theme here is identity theft.

Note that no legitimate bank, Internet Services Provider, forum, or other online service will ever ask you to go to a site via a link embedded in an email message and provide your username and password or other information to "verify" your account, to deal with a "security issue" or to remove some "limitation" on your account. These are always frauds. If you have a concern about your account after receiving such a message, send an email to your contact person for that account (not using a link, but by typing in the address) or go to the service's web site (again by typing the address, not using the link.

Many email programs will warn you that a malicious link is not what it purports to be, but the absence of such a warning should not lull the reader into a false sense of security.

Fourth, most email programs have spam and abuse filters. Out of the box, these may be able to detect and mark some spam, then move it to the recipients' junk folder/box. These mailboxes should be checked weekly for "false positives", that is, messages that are marked as spam, but really are not. Commands found in the mail program's menu can then "teach" the filters that some messages are or are not spam. Over time, the filters will be better able to identify mail correctly, but the spammers themselves know of these filters and are constantly changing the wording of their messages to bypass them, so the training must be ongoing.

Fifth, if your email is part of a hosting package and you have a control panel for that hosting package (such as cPanel) you may have additional options for stopping spam at the server. These include:

(i) The server's own mail filtering programs, such as the very common Mailscanner, attach a number to all mail scanned, indicating the likelihood of its being spam or abusive. You can set the mail software at the server level to regard anything over a particular score as "high spam, then refuse delivery of high spam. You may fail to get a few false positives, but your mailbox will slim down considerably.

(ii) The server's control panel may also offer user-defined filters that you can set to discard or reject any mail with a particular phrase in its headers, including a specific "From:" (a blacklist). Again, the action is taken at the server level, and the message will not reach you.

(ii)Along the same lines, when you control your own domain, you can create as many email addresses or forwarders as you want. Give these out when you order on line, and as long as the company you dealt with doesn't sell it to a spammer, continue to use it when corresponding with them. When it does show up sold to a spammer, delete it.

(iii) If you are uncomfortable with changing these settings yourself, you can complain to your own web host or email service provider, who should be more than happy to set server wide or account level blacklisting on a troublesome spammer, preventing acceptance of the message by the server. The system operator also has access to a suite of server-wide filters, blacklists, and spam markings that can be taught to the mail scanner.

(iv) Server level spam filters rely on spammer lists maintained by third parties such as Spamhaus. You may be able to report spam directly to such an organization and have the offender blacklisted worldwide. However, despite defining spam as "unsolicited bulk email" Spamhaus has a more restrictive operational definition than envisioned here, and will only take action on commercial spam, not on other bulk unsolicited email, and not on abusive mail.

(v) Yet another spam prevention service worth cooperating with if you have your own site is Project Honeypot. This involves putting code and an "email address" on your website that when harvested and used in a spam email list immediately identifies the mail as spam, for only an illegitimate automatic harvester would detect the alleged address.

Sixth, ISPs (Internet Service Providers), even if only offering mail services, all have explicit clauses in their terms of reference that ban hate mail, abusive mail, and spam of all kinds. Here is an excerpt from a gmail TOS document:

In addition to (and/or as some examples of) the violations described in the terms of service, users may not:

Generate or facilitate unsolicited commercial email ("spam"). Such activity includes, but is not limited to

o sending email in violation of the CAN-SPAM Act or any other applicable anti-spam law;

° imitating or impersonating another person or his, her or its email address, or creating false accounts for the purpose of sending spam;

° data mining any web property (including Google) to find email addresses;

° sending unauthorized mail via open, third-party servers;

° sending emails to users who have requested to be removed from a mailing list;

° selling, exchanging or distributing to a third party the email addresses of any person without such person's knowing and continued consent to such disclosure;

° sending unsolicited emails to significant numbers of email addresses belonging to individuals and/or entities with whom you have no preexisting relationship.

Here is another from Hotmail:

Terms of Service. The Hotmail Terms of Service (TOS) strictly forbids sending unsolicited e-mail -- and the TOS is enforced with zero-tolerance zeal. All reported accounts in violation of the TOS are terminated immediately and permanently. Hotmail publicly posts its closures of those accounts from which unsolicited commercial e-mail has been sent to anti-spam Usenet newsgroups on a regular basis.

In addition, Hotmail recently instituted a "liquidated damages" clause in the TOS. This clause requires members who misuse Hotmail in connection with spam to pay $5 per spam message to Hotmail. This clause serves as a deterrent to keep Hotmail spam-free and will make it easier to pursue spammers.

Nearly all other such email providers, whether large or small, have similar clauses in their TOS, and enforce them. If you receive spam from a domain whose provider you can recognize, you can complain to the "abuse" department of that provider about the mail, and may be able to get the account cancelled, if the provider is reputable. Of course, the spammer is likely to start up again elsewhere, but you do get a temporary respite. If the amount of spam is large enough or the spammer is using a stolen address list, the provider may be willing to take legal action for the fines, or to put the offender in prison. One can always hope.

Seventh (modification of the very first point above for the brave) If you already know the spammer, or know that (s)he has your real address list anyway, you could consider sending a message to the person requiring that your name be removed from the mailing list being used. Keep this message and any reply. If the person refuses, even if implicitly by continuing to send the spam, complain to their services provider as in the previous section. It is a violation of nearly every provider's TOS to refuse to remove an address from a mailing list on request, so if the service they use is a legitimate one (such as gmail or hotmail) this complaint should result in cancellation of their account there. However, it is the Spy's experience that many companies are not as diligent about this as they ought to be.

If your service happens to be the same as the spammer's (say, gmail) you may be able to complain simply by clicking a box next to the email to tell the system operator that the mail is spam or abusive as far as you are concerned.

Eighth, even where no commercial or fraudulent aspect is present, and the mail contains no abuse, the sending of bulk unsolicited email is illegal in many jurisdictions, and may attract heavy fines and/or jail sentences. In celebrated recent cases spam kings Sanford Wallace and Adam Guerbuez, both of whom spammed Facebook accounts with commercial ads were fined $711M and $873M respectively. The latter judgement, made in California, has now, with exchange, amounted to nearly $1B CDN, and has been upheld by the Quebec Supreme Court. There have been other cases where the fines reached into the hundreds of millions, so these are not unique.

The gold standard now appears to have become a fine of $100 per address per message, and the larger ISPs and social networking sites seem to believe that at some point it is very much worth spending the legal money to pursue spammers, even if little or nothing can ever be recovered by way of paid fines (the offender declares bankruptcy). The hope seems to be that the publicity will deter others.

The Spy suspects that little short of jail will make much difference, for in most cases criminal prosecution is indeed a viable option. This is especially so in cases involving fraud, such as that of Alan Ralsky, the self-proclaimed "Godfather of Spam," who was sentenced to 51 months in prison for a pump-and-dump fraud run through spam.

It is worth noting that abusive mail, even if not explicitly threatening, is not only implicitly so, but its repetition is generally deemed harassment. Since uttering threats and harassment are criminal offences in almost all Western jurisdictions, this type of email can also result in slammer time. The recipient must decide whether the threats and/or harassment are sufficiently grave to file a police report.

Moreover, as in the last section, refusal to remove a name from an email list is a serious offence in many jurisdictions, and this may also be an avenue that either you, your provider, or the offender's provider can pursue.

Finally, an oddity of law in some countries, including the United States, prescribes particular penalties for sending unsolicited mail to a wireless device, offering a further legal option where applicable.

How much action is worth it?
In the case of commercial advertising, it is probably sufficient to stop the spam from getting to you, especially if this can be done at the mail server level before you download your mail to your own computer. In the case of abusive mail, particularly if a stolen database is involved, recipients may wish to give serious consideration to complaining up the line, first to their own ISP, then to the offenders' (if this is not just a server under his own control) and then to the police.

Now, wouldn't it be nice if a column like this never needed to be written? The Spy would be happy to see all spammers busted with heavy fines, all thieves of databases and senders of abusive email locked up. Perhaps the rest of us could then get on with our lives.

Rick Sutcliffe, (a.k.a. The Northern Spy) is professor and chair of Computing Science and Mathematics as well as Senate Chair at Trinity Western University. He is also on the board of CIRA, operator of .ca. He's written two textbooks and several novels, one named best ePublished SF novel for 2003. His columns have appeared in numerous magazines and newspapers (paper and online), and he's a regular speaker at churches, schools, academic meetings, and conferences. He and his wife Joyce have lived in the Aldergrove/Bradner area of BC since 1972.

Want to discuss this and other Northern Spy columns? Surf on over to ArjayBB.com. Participate and you could win free web hosting from the WebNameHost.net subsidiary of Arjay Web Services. Rick Sutcliffe's fiction can be purchased in various eBook formats from Fictionwise, and in dead tree form from Amazon's Booksurge.

URLs


The Northern Spy Home Page: http://www.TheNorthernSpy.com


The Spy's Laws collected: http://www.thenorthernspy.com/spyslaws.htm


The Spy's Shareware download site: http://downloads.thenorthernspy.com/

 
AAPL
$105.22
Apple Inc.
+0.39
MSFT
$46.13
Microsoft Corpora
+1.11
GOOG
$539.78
Google Inc.
-4.20

MacTech Search:
Community Search:

Software Updates via MacUpdate

f.lux 34.0 - Adjusts the color of your d...
f.lux makes the color of your computer's display adapt to the time of day, warm at night and like sunlight during the day. Ever notice how people texting at night have that eerie blue glow? Or wake... Read more
Ember 1.8.2 - Versatile digital scrapboo...
Ember (formerly LittleSnapper) is your digital scrapbook of things that inspire you: websites, photos, apps or other things. Just drag in images that you want to keep, organize them into relevant... Read more
Tonality Pro 1.1.2 - Professional-grade...
Tonality Pro gives you the power to create stunning and dramatic black & white images. This is a complete monochrome image editor with more than 150 one-click style presets, totally unique... Read more
VueScan 9.4.49 - Scanner software with a...
VueScan is a scanning program that works with most high-quality flatbed and film scanners to produce scans that have excellent color fidelity and color balance. VueScan is easy to use, and has... Read more
OS X Server 4.0 - For OS X 10.10 Yosemit...
Designed for OS X and iOS devices, OS X Server makes it easy to share files, schedule meetings, synchronize contacts, develop software, host your own website, publish wikis, configure Mac, iPhone,... Read more
TotalFinder 1.6.12 - Adds tabs, hotkeys,...
TotalFinder is a universally acclaimed navigational companion for your Mac. Enhance your Mac's Finder with features so smart and convenient, you won't believe you ever lived without them. Tab-based... Read more
BusyCal 2.6.3 - Powerful calendar app wi...
BusyCal is an award-winning desktop calendar that combines personal productivity features for individuals with powerful calendar sharing capabilities for families and workgroups. BusyCal's unique... Read more
calibre 2.7 - Complete e-library managem...
Calibre is a complete e-book library manager. Organize your collection, convert your books to multiple formats, and sync with all of your devices. Let Calibre be your multi-tasking digital... Read more
Skitch 2.7.3 - Take screenshots, annotat...
With Skitch, taking, annotating, and sharing screenshots or images is as fun as it is simple.Communicate and collaborate with images using Skitch and its intuitive, engaging drawing and annotating... Read more
Delicious Library 3.3.2 - Import, browse...
Delicious Library allows you to import, browse, and share all your books, movies, music, and video games with Delicious Library. Run your very own library from your home or office using our... Read more

Latest Forum Discussions

See All

Rami Ismail Opens Up distribute​() for D...
Rami Ismail Opens Up distribute​() for Developers Posted by Jessica Fisher on October 24th, 2014 [ permalink ] Rami Ismail, Chief Executive of Business and Development at indie game studio | Read more »
Great Hitman GO Goes on Sale and Gets Ne...
Great Hitman GO Goes on Sale and Gets New Update – Say That Three Times Fast Posted by Jessica Fisher on October 24th, 2014 [ permalink ] | Read more »
Rival Stars Basketball Review
Rival Stars Basketball Review By Jennifer Allen on October 24th, 2014 Our Rating: :: RESTRICTIVE BUT FUNUniversal App - Designed for iPhone and iPad Rival Stars Basketball is a fun mixture of basketball and card collecting but its... | Read more »
Rubicon Development Makes Over a Dozen o...
Rubicon Development Makes Over a Dozen of Their Games Free For This Weekend Only Posted by Jessica Fisher on October 24th, 2014 [ permalink ] | Read more »
I Am Dolphin Review
I Am Dolphin Review By Jennifer Allen on October 24th, 2014 Our Rating: :: NEARLY FIN-TASTICUniversal App - Designed for iPhone and iPad Swim around and eat nearly everything that moves in I Am Dolphin, a fun Ecco-ish kind of game... | Read more »
nPlayer looks to be the ultimate choice...
Developed by Newin Inc, nPlayer may seem like your standard video player – but is aiming to be the best in its field by providing high quality video play performance and support for a huge number of video formats and codecs. User reviews include... | Read more »
Fighting Fantasy: Caverns of the Snow Wi...
Fighting Fantasy: Caverns of the Snow Witch Review By Jennifer Allen on October 24th, 2014 Our Rating: :: CLASSY STORYTELLINGUniversal App - Designed for iPhone and iPad Fighting Fantasy: Caverns of the Snow Witch is a sterling... | Read more »
A Few Days Left (Games)
A Few Days Left 1.01 Device: iOS Universal Category: Games Price: $3.99, Version: 1.01 (iTunes) Description: Screenshots are in compliance to App Store's 4+ age rating! Please see App Preview for real game play! **Important: Make... | Read more »
Toca Boo (Education)
Toca Boo 1.0.2 Device: iOS Universal Category: Education Price: $2.99, Version: 1.0.2 (iTunes) Description: BOO! Did I scare you!? My name is Bonnie and my family loves to spook! Do you want to scare them back? Follow me and I'll... | Read more »
Intuon (Games)
Intuon 1.1 Device: iOS Universal Category: Games Price: $.99, Version: 1.1 (iTunes) Description: Join the battle with your intuition in a new hardcore game Intuon! How well do you trust your intuition? Can you find a needle in a... | Read more »

Price Scanner via MacPrices.net

Weekend sale: 13-inch 128GB MacBook Air for $...
Best Buy has the 2014 13-inch 1.4GHz 128GB MacBook Air on sale for $849.99, or $150 off MSRP, on their online store. Choose free home shipping or free local store pickup (if available). Price valid... Read more
Nimbus Note Cross=Platform Notes Utility
Nimbus Note will make sure you never forget or lose your valuable data again. Create and edit notes, save web pages, screenshots and any other type of data – and share it all with your friends and... Read more
NewerTech’s Snuglet Makes MagSafe 2 Power Con...
NewerTech has introduced the Snuglet, a precision-manufactured ring designed to sit inside your MagSafe 2 connector port, providing a more snug fit to prevent your power cable from unintentional... Read more
Apple Planning To Sacrifice Gross Margins To...
Digitimes Research’s Jim Hsiao says its analysts believe Apple is planning to sacrifice its gross margins to save its tablet business, which has recently fallen into decline. They project that Apple’... Read more
Who’s On Now? – First Instant-Connect Search...
It’s nighttime and your car has broken down on the side of the highway. You need a tow truck right away, so you open an app on your iPhone, search for the closest tow truck and send an instant... Read more
13-inch 2.5GHz MacBook Pro on sale for $949,...
Best Buy has the 13″ 2.5GHz MacBook Pro available for $949.99 on their online store. Choose free shipping or free instant local store pickup (if available). Their price is $150 off MSRP. Price is... Read more
Save up to $125 on Retina MacBook Pros
B&H Photo has the new 2014 13″ and 15″ Retina MacBook Pros on sale for up to $125 off MSRP. Shipping is free, and B&H charges NY sales tax only. They’ll also include free copies of Parallels... Read more
Apple refurbished Time Capsules available sta...
The Apple Store has certified refurbished Time Capsules available for up to $60 off MSRP. Apple’s one-year warranty is included with each Time Capsule, and shipping is free: - 2TB Time Capsule: $255... Read more
Textilus New Word, Notes and PDF Processor fo...
Textilus is new word-crunching, notes, and PDF processor designed exclusively for the iPad. I haven’t had time to thoroughly check it out yet, but it looks great and early reviews are positive.... Read more
WD My Passport Pro Bus-Powered Thunderbolt RA...
WD’s My Passport Pro RAID solution is powered by an integrated Thunderbolt cable for true portability and speeds as high as 233 MB/s. HighlightsOverviewSpecifications Transfer, Back Up And Edit In... Read more

Jobs Board

*Apple* Solutions Consultant - Apple Inc. (U...
…important role that the ASC serves is that of providing an excellent Apple Customer Experience. Responsibilities include: * Promoting Apple products and solutions Read more
Senior Event Manager, *Apple* Retail Market...
…This senior level position is responsible for leading and imagining the Apple Retail Team's global event strategy. Delivering an overarching brand story; in-store, Read more
*Apple* Solutions Consultant (ASC) - Apple (...
**Job Summary** The ASC is an Apple employee who serves as an Apple brand ambassador and influencer in a Reseller's store. The ASC's role is to grow Apple Read more
Project Manager / Business Analyst, WW *Appl...
…a senior project manager / business analyst to work within our Worldwide Apple Fulfillment Operations and the Business Process Re-engineering team. This role will work Read more
*Apple* Retail - Multiple Positions (US) - A...
Job Description: Sales Specialist - Retail Customer Service and Sales Transform Apple Store visitors into loyal Apple customers. When customers enter the store, Read more
All contents are Copyright 1984-2011 by Xplain Corporation. All rights reserved. Theme designed by Icreon.