|
|
|
http://www.cnn.com/2002/TECH/internet/08/04/spammed.overview.ap/index.html
Spam: Has it
become a stalemate?
Internet 'becomes more of a chore than an experience'
August 4, 2002 Posted: 10:40 AM EDT (1440 GMT)
NEW YORK (AP) -- Take part in a billion-dollar giveaway for the $49.99 cost
of a brochure. Get dental coverage for just $12 a month. Lose 12 pounds in
seven days. Join a "Britney Spears Orgy!!"
We're never amazed anymore about what clutters our electronic mailboxes daily.
Only bothered.
On a typical day, Hotmail subscribers collectively receive more than 1 billion
pieces of junk e-mail. Such spam accounts for 80 percent of messages received
-- not including mail blocked by Hotmail's first line of filters.
Though Hotmail develops various tools for evading spam, unwanted messages
keep slipping through.
"And it's increasing every day," said Parul Shah, a product manager
with Microsoft Corp., which runs Hotmail. "Every time Hotmail or another
e-mail service provider finds a way to detect spam, the spammer immediately
has a way to get around that."
Call it an arms race: At best, the spam fighters are battling to a stalemate.
For many, spam has soured the Internet experience.
"It becomes more of a chore than a convenience," said Sarah Sourial,
a student at Washington University in St. Louis.
Mostly legal unless it makes fraudulent claims, spam kills legitimate messages,
wastes our valuable time and compels service providers to buy excess equipment
to cope with spam-driven mail surges.
At AT&T WorldNet a year ago, about a dozen out of every 100 messages were
spam. Today, it's closer to 20 or 25 -- on top of another 200 or 300 e-mails
sent to invalid accounts by spammers trying to guess addresses.
In June, anti-spam filtering company Brightmail recorded 4.8 million spam
attacks -- each consisting of thousands or even millions of e-mail containing
the same pitch. That's a more than fivefold increase from a year earlier.
Creative content
Why the increase?
For one, spammers are sending out higher volumes because filters are better
at blocking messages. Spammers have also gotten smarter about harvesting e-mail
addresses and evading filters.
E-mail marketing is also cheap -- spammers pay less than a penny per pitch,
compared with $1 for telemarketing and 75 cents for direct mail, according
to the SpamCon Foundation, an anti-spam group.
Spam -- named after a famous Monty Python skit on the canned meat product
-- has come a long way since two immigration lawyers pitched their legal services
on Usenet newsgroups in 1994 in one of the Internet's first commercial bulk
mailings.
After e-mail users learned to avoid using real e-mail addresses in newsgroup
postings, spammers developed dictionary attacks: Send messages to "nick31,"
"nick32," "nick33" and so on at common domains like earthlink.net
in hopes of hitting a few real accounts.
Two virgin accounts set up by The Associated Press for a test got spam within
hours even though the address was never given out.
If spammers are anything, they are creative.
After service providers learned to block mail based on phrases like "Viagra"
and "$$$$$," they used programming tricks so "Viagra"
would appear as that to the naked eye but as random code to a computer. Some
spam is even sent as images so filters can't analyze their content.
Taken its toll
Messages may also include fake removal request links to make marketers appear
upstanding, and some appear to come from a friend -- "John thought you
might be interested in this," they'll typically begin.
Software and services widely available on the Internet make spam easier to
send, and the arsenal is ever more finely tuned.
Software robots continually scour Web pages, newsgroup postings and other
sources for e-mail addresses. One site sells 1 million addresses for $59.95,
major credit cards accepted. Another offers a CD with 15 million addresses
for $120.
Other products automate spamming, altering e-mail message headers to hide
spammers' origin and sometimes modifying the contents of each message slightly
to evade filters.
Spammers say they are simply tilting the Internet's sales power away from
big corporations that can afford fancy campaigns. They blame anti-spam vigilantes
for forcing them to increasingly use underhanded techniques.
"I put them in the same category as people who scream when someone wears
a fur coat or eats veal," said spammer Michael Jay, who pitches $99 background
checks.
For most everyone else, spam has taken its toll.
Some parents are banning their younger kids from e-mail. Other people change
e-mail accounts so often that even friends can't reach them. Some Internet
newcomers are closing accounts after a few months.
Stifling technologies?
While the first half-billion Internet users have become dependent on e-mail,
"many of the next two billion may decide the Internet is not worth the
trouble," John Patrick, chairman of the industry-supported Global Internet
Project, said at a recent conference on spam.
Spam could also stifle emerging technologies. Already, marketers and scammers
have flooded European cell phones with text messages because addresses are
tied to easily guessed phone numbers.
"A lot of people will be hesitant to use non-voice applications if they
are threatened by the same kind of spam they now face in desktops," said
Raimund Trierscheid of Deutsche Telekom's mobile unit.
Companies complain they have trouble sending bills, newsletters and other
legitimate messages misclassified as spam. And marketers say pitches that
their customers expressly requested get lost in the shuffle.
Jim Conway of the Direct Marketing Association said e-mail users lose the
ability to distinguish a fraudulent weight loss offer from a legitimate discount
for concert tickets.
Even personal mail gets caught now and then.
Sourial, the college student, recently missed a message about a family gathering
because it went to an old account, one she checks only once a month because
it gets too much spam. Now, she may have to miss the gathering.
Legal approach
Others find mail to friends bouncing back because their mailboxes had reached
capacity, overflowing with spam.
Technological tools are available to block spam, but the more aggressive they
are, the more legitimate mail gets discarded in the process.
Earlier this year, the Web site MacSlash.com temporarily lost its domain name
when a renewal notice got rejected as spam, while filters at AT&T Broadband
inadvertently blocked its own notice of a rate increase.
In the absence of federal regulation, America Online, EarthLink and other
Internet service providers have tried suing the most active spammers, winning
cases but doing little to deter others. (AOL Time Warner is the parent company
of CNN.com.)
About half the states do have laws meant to deter unsolicited mass mailings.
But they have proven weak or difficult to enforce.
And even a federal law could not prevent determined spammers from finding
a foreign haven.
Sued by Verizon Communications for millions of dollars, spammer Alan Ralsky
said he may simply move beyond the reach of U.S. courts to where service providers
value cash more than complaints.
"I think China is good place to be," Ralsky said. "You don't
get the same kind of grief."
|