|
||
|
| Defending The ’Net |
Email This
View My Personal Library |
|
Computing Basics August 1999 Vol.10 Issue 8 |
Defending The ’Net Keep Spam Out Of Your Inbox | ||
|
In the early days, online users communicated via bulletin board systems (BBSes) and their early in-house electronic mail (E-mail). Most of the traffic was from special interest groups posting messages, but when disagreements got out of hand, people started posting "flames" (or argumentative messages). Eventually, the flame wars spilled over into the personal E-mail. Because these early in-house mailboxes had limits of 10-30 messages, malicious users would repeatedly send an electronic message to a victim's mailbox until there was no more "room" to receive them. Many online users were familiar with a skit by the British comedy troupe Monty Python, in which a group of vikings chanting "spam, spam, spam, spam, (lovely spam!)" in a restaurant eventually drown out everyone else's conversations. Thus, clogging someone's mailbox became known as "spamming." Today's spam usually isn't an attempt to max out anyone's inbox. At its worst, it's messages trumpeting stocks, pornography ads, solicitous chain letters, or get-rich-quick schemes. Spammers often use provocative subjects to get you to read their message, such as "Hot Stock Tip!," and some even fraudulently alter their message's header (listing of where it's been) to pretend it came from somewhere else. Sometimes their tactics are patently illegal but difficult to prosecute. "It's clear they're moving toward a new level of sophistication," says Ray Everett-Church, co-founder and counsel for Citizens Against Unsolicited Commercial E-mail (CAUCE; http://www.cauce.org). With all of this in mind, we'll tell you how to reduce the spam you get in your inbox, and why the problems with spam are more than the inconvenience of deleting a few worthless messages. It is easy to delete spam, so you may be wondering why it infuriates some people while it merely annoys others. For one thing, spam is a 'Netiquette no-no; for another, some of the messages invading your inbox may be offensive or disturbing, especially for young users. Finally, you probably didn't spend hundreds or thousands of dollars on a PC, modem, and Internet connection just to receive a deluge of junk mail. These are compelling arguments, but the greatest harm from spamming is economic. The sheer volume of bulk E-mail slows down every Internet service provider's (ISP) servers. With a click of a button, a spammer can send a message to hundreds or thousands of addresses. But each message must be routed through the spammer's ISP, your ISP, and any proxy servers in between (not to mention the fileserver in your workplace.) While it is possible to block E-mail messages at any of these points, most ISPs normally don't screen for spam. This is because filtering would not only slow down its system's overall performance but also may let in either too much spam or exclude too many "real" messages. Rich D'Amato, a spokesperson for America Online (AOL), estimates 5%-30% of AOL's E-mail traffic may be spam. This means its subscribers (and those of virtually every other ISP) could be enjoying much faster service if it weren't for spam. "Be aware of how spammers get a hold of [your] E-mail addresses," Everett-Church cautions. Spammers either buy mailing lists or use automated programs (called robots or harvesters) to comb the Internet for E-mail addresses. They then send their sales pitch to their entire list in the hope of making money from a very few. Some of the favorite hunting grounds for address-gathering robots are chat rooms, forums, and Usenet groups in which people divulge their E-mail addresses. If your loathing of junk E-mail outweighs the benefits of publicizing your address, don't do it. Still, don't confuse spam with legitimate E-mail you've "asked" for. If you've ever entered an online contest, filled out a survey, or bought an item online, expect some E-mail from that company. The reputable ones let you "opt-out," or specify you don't want any mail from them; the nicest companies only contact you if you opt-in.
A byproduct of our interconnected information age is that it takes a lot of effort just to be left alone. This is because there is a fine line between avoiding spam and missing legitimate messages. Still, there are several decisive steps you can take. Protest it. Contact your state and federal legislators and make your feelings known. This is the only tactic that seeks to stop spam before it reaches your ISP. Filter it. See "Trashing Spam" for some tips on filtering spam from various browsers. Just be sure to adjust the software's settings and test it for a few weeks to ensure it doesn't exclude messages you really want to receive. Trace it. Look at the message's header (in Microsoft Outlook, click Help, Contents And Index, type headers, downloading, and then press ENTER. Next, follow the directions for downloading headers). You'll see a list of the servers the message traveled through to reach you. Generally, the last "from" in the list is the sender's ISP, but many spammers are knowledgeable enough to forge their "signatures." If you have no luck with the last ISP listed, try contacting the next one up, and ask for its help (see the next tip). If you use Windows 95, Windows 98, or Windows NT 4.0, and you want to find the spammer, there is a free, powerful program with many spam-hunting features called Sam Spade. You can download it from http://www.blighty.com/products/spade. Type the spammer's address in Sam Spade's top entry blank, and then click the Whois icon. This feature may give you the name and contact information of the sender's domain. Other features, such as Finger and Traceroute, may help you pinpoint a trickier spammer. Contact the ISPs. Ask your ISP if it uses spam-filtering software, such as MindSpring's Spaminator (http://www.mindspring.net) or other services. Many unsolicited E-mails suggest you reply to their message with the word "unsubscribe" in your text if you're not interested. The suggestion may be legitimate and your name might be removed from a bona fide marketing list. However, it's more likely that by replying, you may encourage an unethical sender; after all, you've confirmed your E-mail address is current and valid. Unfortunately, there is no easy way to tell which is which. If the spam continues from that source, your best bet is to politely complain to the ISP listed in the sender's address or uncovered by your tracing. If the spammer's address is fraudulent, legal penalties are much more severe, and your own ISP (and maybe even the Federal Communications Commission or Federal Trade Commission) should be motivated to track down the offender. They may ask you to forward the spam to them with instructions on preserving the spam's header. Some activities may not be illegal, but may violate an ISP's terms of service. For example, EarthLink (http://www.earthlink.net) prohibits not only illegal activities such as hacking but also sending the same message to the same address more than 10 times. Your own ISP's regulations should be easily accessed from its home page. Mung it. If you give your E-mail address when you post a message to a newsgroup or sign up for something online, you are exposing it to the address-gathering robots mentioned above. Because they usually grab any word with an @ sign in it, put an obvious typo in your address whenever you're asked to enter it at one of these sites. (You're not reconfiguring your E-mail account, you're just putting errors into the address you give in public.) This is called "munging" (Mash Until No Good). For example, if Paco@someISP.net wants to post an opinion somewhere, he could mung his address to read Paco@someISP_NO_JUNK.net when a site asks him to enter it. For personal responders, he could say "take _NO _JUNK out of my address to reply." Of course, a spammer could take the time to do this but most won't. Be aware that when you register for access to certain sites, they will send a confirmation message to the E-mail address you give. If you don't reply to this (or don't receive it because you provided a munged address), your registration won't go through. Unfortunately, some of these sites sell their lists of confirmed addresses to spammers and can promise there won't be any munged or false accounts. You'll have to rely on other methods of avoiding this spam.
However indirectly, the E-mail you receive, including spam, costs you money. Don't resign yourself to paying for someone else's sales pitch. by Marty Sems
|
|
Home Copyright & Legal Information Privacy Policy Site Map Contact Us