Security Incidents mailing list archives

RE: A question for the list...


From: "Rob Shein" <shoten () starpower net>
Date: Thu, 29 May 2003 11:06:38 -0400




<snip>


There are a number of different ways to combat spam, with the most 
ineffective functioning at the network layer and the most 
effective at 
the presentation and application layer.  IMHO the only real way to 
combat spam is by the content iself, and there are a few very 
effective tools that work on this level.

Well, the single biggest spammer is in America, so it will 
apply to him. Now bearing in mind, the vast majority of spam 
is sent from about 20 people, you don't need to stop that 
many to stop the flood. There is already anti-spam laws in 
the EU, so if the US also creates an anti-spam law, it means that:
a) EU and the US can work together to stop the flow of spam 
from both the EU and the US.
b) Other countries can introduce anti-spam laws that and can 
also then work with the EU and the US, in applying a legal 
response to a problem that affects everyone on the 'Net. The 
lawyers and the judges can't stop this themselves, and 
neither can the network/system admins. The two parts have to 
work together on this problem, since it is not purely a legal 
problem or purely a technical problem.

The real question about an anti-spam law is can it be used 
againist an American or European who is operating from 
(US/EU) but is using servers in outer Mongolia to distribute spam.

You're missing a critical problem here; evidence.  Collecting evidence from
foreign companies (the biggest spammer may be American, but he uses foreign
servers and ISPs) is a lot harder than it is from companies based here.
Lack of feet on the ground aside, subpoenas have no force, and god knows
what other possible obstacles (like payoffs) could come into play also.
Ultimately, it would be simple to make it nightmarishly hard to trace an
email back to the server, from the server to the ISP, from the ISP to the
customer/spammer.



----------------------------------------------------------------------------
----------------------------------------------------------------------------


Current thread: