full-disclosure - Spam Solution

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <40D2C605.9070509@egotistical.reprehensible.net>
From: ge at egotistical.reprehensible.net (Gadi Evron)
Subject: Spam Solution

 > Also, if spammers can't forge, so what? They'll just grab the domain
 > name from the PC they've hijacked and send away or go back to using the
 > e-mail client on the machine. Once the spammers change their methodology
 > (which they do all the time to counter anti-spam efforts), these
 > measures will have little to no effect.

I believe this is the main issue here.

Spammers already have and use the technology to circumvent all this, so
they don't even need to invent new tricks.

As long as there are drone armies and unsuspecting "stupid" users, these
kind of solutions, although interesting and helpful, are useless to stop
actual spam.

Another issue is that non of the people I talked this over with see how
this can work unless globally adopted by everyone. An adoption of this
system over a few years simply won't work. It needs to be over-night and
that's not going to happen.

	Gadi Evron.