Re: who is verify@0spam.com?

[Justin Mason <jm...@jmason.org>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


Matt Kettler writes:
> Gene Heskett wrote:
> > Greetings all;
> > 
> > I'm suddently being flooded with messages from the sender in the
> > subject line, containing absolutely no indication of what message
> > generated that response.
> > 
> > I don't do SPI, and never will as it just sems to confirm I'm a valid
> > email address.
> > 
> > What should I do, just sort it to the junquemail folder?
> 
> Yes. From the looks of it 0spam is YABCRS (Yet another broken challenge-response
> system). You're probably getting them due to forged sober viruses being sent in
> your name to people who are 0spam customers.

Yep.  I recently added 0spam challenges to the CRBOUNCE rule in the
anti-bounce ruleset -- they are extremely annoying.  It's in my sandbox,
in rulesrc/sandbox/jm/ in SVN trunk.

What I do is confirm those spams.  If they're going to shift the
work of spam-filtering onto innocent third parties, a "protest vote"
is appropriate in my opinion.

- --j.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)
Comment: Exmh CVS

iD8DBQFDjzwwMJF5cimLx9ARAhZGAKC8ZYBM12Wi7uGywNH6WKhSJLGdQgCbB0qi
qOAmJG3C2QKABeRiFbv9nqQ=
=poWF
-----END PGP SIGNATURE-----

Re: who is verify@0spam.com?

[Matt Kettler <mk...@evi-inc.com>]

Justin Mason wrote:
 > What I do is confirm those spams.  If they're going to shift the
> work of spam-filtering onto innocent third parties, a "protest vote"
> is appropriate in my opinion.
> 
> --j.

Very well said Justin. My own views are a little more harsh, but the principles
are quite similar.

Quoting myself in an off-list message (and correcting a typo):

I view mis-directed CRs, virus notices, and post-delivery spam notices as
indirect spamming through deliberate, and willfully malicious, misconfiguration.
Such admins are trying to solve their spam problems by foisting the problem into
the mailboxes others. I get enough spam without getting notices for all of
theirs too.