From mboxrd@z Thu Jan 1 00:00:00 1970 X-Msuck: nntp://news.gmane.io/gmane.emacs.gnus.general/46159 Path: main.gmane.org!not-for-mail From: clemens fischer Newsgroups: gmane.emacs.gnus.general Subject: Re: new spam functionality added Date: Fri, 16 Aug 2002 14:23:45 +0000 (UTC) Sender: owner-ding@hpc.uh.edu Message-ID: References: NNTP-Posting-Host: localhost.gmane.org X-Trace: main.gmane.org 1029674480 31169 127.0.0.1 (18 Aug 2002 12:41:20 GMT) X-Complaints-To: usenet@main.gmane.org NNTP-Posting-Date: Sun, 18 Aug 2002 12:41:20 +0000 (UTC) Return-path: Original-Received: from malifon.math.uh.edu ([129.7.128.13]) by main.gmane.org with esmtp (Exim 3.35 #1 (Debian)) id 17gPMs-000866-00 for ; Sun, 18 Aug 2002 14:41:18 +0200 Original-Received: from sina.hpc.uh.edu ([129.7.128.10] ident=lists) by malifon.math.uh.edu with esmtp (Exim 3.20 #1) id 17gPNG-0004Vy-00; Sun, 18 Aug 2002 07:41:42 -0500 Original-Received: by sina.hpc.uh.edu (TLB v0.09a (1.20 tibbs 1996/10/09 22:03:07)); Sun, 18 Aug 2002 07:42:13 -0500 (CDT) Original-Received: from sclp3.sclp.com (qmailr@sclp3.sclp.com [209.196.61.66]) by sina.hpc.uh.edu (8.9.3/8.9.3) with SMTP id HAA20922 for ; Sun, 18 Aug 2002 07:42:01 -0500 (CDT) Original-Received: (qmail 24078 invoked by alias); 18 Aug 2002 12:41:21 -0000 Original-Received: (qmail 24073 invoked from network); 18 Aug 2002 12:41:21 -0000 Original-Received: from main.gmane.org (80.91.224.249) by gnus.org with SMTP; 18 Aug 2002 12:41:21 -0000 Original-Received: from root by main.gmane.org with local (Exim 3.35 #1 (Debian)) id 17gPLn-0007mE-00 for ; Sun, 18 Aug 2002 14:40:11 +0200 Original-To: ding@gnus.org X-Injected-Via-Gmane: http://gmane.org/ Original-Received: from news by main.gmane.org with local (Exim 3.35 #1 (Debian)) id 17fi0v-0007lf-00 for ; Fri, 16 Aug 2002 16:23:45 +0200 Original-Path: not-for-mail Original-Newsgroups: gmane.emacs.ding Original-Lines: 29 Original-NNTP-Posting-Host: p3ee27db2.dip.t-dialin.net Original-X-Trace: main.gmane.org 1029507825 29862 62.226.125.178 (16 Aug 2002 14:23:45 GMT) Original-X-Complaints-To: usenet@main.gmane.org Original-NNTP-Posting-Date: Fri, 16 Aug 2002 14:23:45 +0000 (UTC) Precedence: list X-Majordomo: 1.94.jlt7 X-Spam-Report: 5.1 hits, 5 required; * -0.1 -- Found a References header * 2.6 -- From: contains numbers mixed in with letters * 0.0 -- Possibly-forged 'Received:' header found * 2.6 -- Date: is 24 to 48 hours before Received: date Xref: main.gmane.org gmane.emacs.gnus.general:461591163 X-Report-Spam: http://spam.gmane.org/gmane.emacs.gnus.general:46159 Re: new spam functionality added > From: Scott A Crosby > Date: 31 Jul 2002 16:07:23 -0500 > Now, imagine there's a daemon that autoreplies to such 'please > reply to me' messages.. Well, just forge the spam to appear to come > from a legitimate user, and guess what, the bounces go to them, and > their client helpfully 'authenticates' the spam.. (The daemon can't > be configured to record every email sent and only autoreply to > autoreplies to emails the user actually sent. Many times people well, i use a system where each of my (normal) emails is signed using a cryptographic hash. the resulting number is placed into a header of my emails (don't look for it in this posting, it is processed by lynx). then, when i get back the message for authentication, i recompute the value and compare it to the value in the headers. we use this system on the "bernstein" lists at cr.yp.to, where a program called "qsecretary" verifies every posting as an anti-spam measure. the program for these automatic verifications is called "pymsgauth" (a python script). but what we're really looking for is a better internet-mail infrastructure, right? one where the sender is responsible for storing the messages, not the receiver as it is with todays SMTP. this infrastructure could be like discussed in the IM2000 working group. it would make spamming in general next to impossible, at least too expensive to be even considered. clemens