Re: Challenge-response mail filters considered harmful (was Re: Look at these update from M$ Corporation.)

2003-08-14 Thread David Fokkema
On Tue, Aug 05, 2003 at 10:57:21PM -0700, Paul Johnson wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Tue, Aug 05, 2003 at 09:55:11AM +0200, David Fokkema wrote: Agreed. Although the 'very high' depends on the willingness of people to answer challenges. I won't respond to TMDA

Re: Challenge-response mail filters considered harmful (was Re: Look at these update from M$ Corporation.)

2003-08-14 Thread David Fokkema
On Mon, Aug 04, 2003 at 12:00:11AM +0100, Karsten M. Self wrote: on Sun, Aug 03, 2003 at 08:37:49PM +0200, David Fokkema ([EMAIL PROTECTED]) wrote: On Sun, Aug 03, 2003 at 05:13:26AM +0100, Karsten M. Self wrote: Spam is a growing, heck, exploding problem. No doubt.

Re: Challenge-response mail filters considered harmful (was Re: Look at these update from M$ Corporation.)

2003-08-07 Thread Paul Johnson
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Tue, Aug 05, 2003 at 09:55:11AM +0200, David Fokkema wrote: Agreed. Although the 'very high' depends on the willingness of people to answer challenges. I won't respond to TMDA challenges anymore. Some spammers actually send out TMDA-like

Re: Look at these update from M$ Corporation.

2003-08-03 Thread Steve Lamb
On Sun, 3 Aug 2003 04:47:23 +0100 Karsten M. Self [EMAIL PROTECTED] wrote: And this is more legitimate than you scanning the messages yourself, and adding the addresses to your whitelist or spamlist, appropriately, how? The fact that it would be on the order of .01% or lower of all messages

Re: Look at these update from M$ Corporation.

2003-08-03 Thread David Fokkema
On Sun, Aug 03, 2003 at 04:31:10AM +0100, Karsten M. Self wrote: on Sat, Aug 02, 2003 at 01:00:53PM -0400, Travis Crump ([EMAIL PROTECTED]) wrote: Steve Lamb wrote: What's worse is that so far noone's told me how two people using C-R ever *start* communicating. Person 1 mails

Re: Look at these update from M$ Corporation.

2003-08-03 Thread David Fokkema
On Sat, Aug 02, 2003 at 05:25:05PM -0500, John Hasler wrote: David writes: Well, I am led to believe that most spam doesn't have a valid reply address. You are misled. Much of it has a very valid reply address: mine. That really sucks. Sorry to hear that, :-( David -- To UNSUBSCRIBE,

Re: Look at these update from M$ Corporation.

2003-08-03 Thread David Fokkema
On Sat, Aug 02, 2003 at 03:53:39PM -0700, Steve Lamb wrote: On Sat, 2 Aug 2003 21:17:05 +0200 David Fokkema [EMAIL PROTECTED] wrote: Friendly configured, in my point of view, means that mailing lists are whitelisted. Or do you mean that you really send mail to 3 'new' persons a day? Or do

Re: Look at these update from M$ Corporation.

2003-08-03 Thread David Fokkema
On Sat, Aug 02, 2003 at 10:18:27PM -0700, Steve Lamb wrote: On Sat, 2 Aug 2003 16:32:50 -0500 Jesse Meyer [EMAIL PROTECTED] wrote: Of course, either way, once your fingered as a kiddie porn distributer, I'm assuming that your reputation is ruined. Its the Western's world equivalent of

Re: Look at these update from M$ Corporation.

2003-08-03 Thread Michael D. Schleif
Also sprach David Fokkema (Sun 03 Aug 02003 at 08:26:11AM +0200): On Sun, Aug 03, 2003 at 04:31:10AM +0100, Karsten M. Self wrote: on Sat, Aug 02, 2003 at 01:00:53PM -0400, Travis Crump ([EMAIL PROTECTED]) wrote: Steve Lamb wrote: What's worse is that so far noone's told me how two

Re: Look at these update from M$ Corporation.

2003-08-03 Thread Alan Connor
I'm bailing out of this thread. It is REALLY OT and has gone on long enough. I received a flurry of mails this evening. They went directly to my quarantine mailbox which was then re-gzipped. If those who sent the mails don't return the auto-responses, they will be dumped without me ever

Re: Look at these update from M$ Corporation.

2003-08-03 Thread Steve Lamb
On Sun, 3 Aug 2003 08:33:01 +0200 David Fokkema [EMAIL PROTECTED] wrote: Then you send a _lot_ of e-mails. I can see C-R to be annoying for you. Several hundred a month. As I pointed out there are static, well known spammers. I listed two that have been hitting my machine

Re: Look at these update from M$ Corporation.

2003-08-03 Thread David Fokkema
On Sun, Aug 03, 2003 at 01:45:54AM -0500, Michael D. Schleif wrote: Also sprach David Fokkema (Sun 03 Aug 02003 at 08:26:11AM +0200): A receives challenge from B's C-R system which originates (of course) from B's e-mail address. Isn't that a shaky assumption? I use eight (8) different

Re: Look at these update from M$ Corporation.

2003-08-03 Thread David Fokkema
On Sun, Aug 03, 2003 at 12:35:25AM -0700, Steve Lamb wrote: On Sun, 3 Aug 2003 08:33:01 +0200 David Fokkema [EMAIL PROTECTED] wrote: Then you send a _lot_ of e-mails. I can see C-R to be annoying for you. Several hundred a month. As I pointed out there are static, well known

Re: Look at these update from M$ Corporation.

2003-08-03 Thread David Fokkema
On Sat, Aug 02, 2003 at 03:47:54PM -0700, Steve Lamb wrote: On Sat, 2 Aug 2003 21:06:22 +0200 David Fokkema [EMAIL PROTECTED] wrote: I know that, :-) However, Steve was telling how much time he invested in manually downloading and checking keys because of problems. I was responding to

Re: Challenge-response mail filters considered harmful (was Re: Look at these update from M$ Corporation.)

2003-08-03 Thread David Fokkema
On Sun, Aug 03, 2003 at 05:13:26AM +0100, Karsten M. Self wrote: As some here are aware, I maintain a rant-o-matic with some standard screeds on frequently iterated issues. The C-R issue is one that's been nagging at me for a while, here's the draft of why C-R is considered harmful.

Re: Look at these update from M$ Corporation.

2003-08-03 Thread David Fokkema
On Sat, Aug 02, 2003 at 11:49:03PM -0700, Alan Connor wrote: Yes, thanks to a lot of great feedback off the list, I have modified the program significantly. Thanks for the feedback, If you are _really_ sincere about the feedback part, why not read tmda.sourceforge.net? See what parts and

[OT] Please STOP it! -- Was: Look at these update from M$ Corporation.

2003-08-03 Thread Pim Bliek | PingWings.nl
Can we PLEASE cut this thread? It is way off topic and it starts to get really annoying. This list is already high-volume, and I don't mind a good discussion, but this is a bit too much don't you think? Thanx! Regards, Pim -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of

Re: [OT] Please STOP it! -- Was: Look at these update from M$ Corporation.

2003-08-03 Thread David Fokkema
On Sun, Aug 03, 2003 at 08:41:19PM +0200, Pim Bliek | PingWings.nl wrote: Can we PLEASE cut this thread? It is way off topic and it starts to get really annoying. This list is already high-volume, and I don't mind a good discussion, but this is a bit too much don't you think? Oh my god,

Re: [OT] Please STOP it! -- Was: Look at these update from M$ Corporation.

2003-08-03 Thread Jesse Meyer
On Sun, 03 Aug 2003, Pim Bliek | PingWings.nl wrote: Can we PLEASE cut this thread? It is way off topic and it starts to get really annoying. This list is already high-volume, and I don't mind a good discussion, but this is a bit too much don't you think? I tend to be laid back in asking

Re: Challenge-response mail filters considered harmful (was Re: Look at these update from M$ Corporation.)

2003-08-03 Thread Karsten M. Self
on Sun, Aug 03, 2003 at 08:37:49PM +0200, David Fokkema ([EMAIL PROTECTED]) wrote: On Sun, Aug 03, 2003 at 05:13:26AM +0100, Karsten M. Self wrote: As some here are aware, I maintain a rant-o-matic with some standard screeds on frequently iterated issues. The C-R issue is one that's been

Re: [OT] Please STOP it! -- Was: Look at these update from M$ Corporation.

2003-08-03 Thread Pigeon
On Sun, Aug 03, 2003 at 08:41:19PM +0200, Pim Bliek | PingWings.nl wrote: Can we PLEASE cut this thread? It is way off topic and it starts to get really annoying. This list is already high-volume, and I don't mind a good discussion, but this is a bit too much don't you think? Sorry. This

Re: Look at these update from M$ Corporation.

2003-08-02 Thread Steve Lamb
n Fri, 1 Aug 2003 11:08:39 -0700 Alan Connor [EMAIL PROTECTED] wrote: I get none, and I'd be willing to bet that you save that spam and have to examine at least the headers to make sure the program didn't make any mistakes. And that you have to spend time updating the filter expressions.

Re: Look at these update from M$ Corporation.

2003-08-02 Thread David Fokkema
On Fri, Aug 01, 2003 at 04:11:28PM -0500, Manoj Srivastava wrote: On Fri, 1 Aug 2003 19:55:54 +0200, David Fokkema [EMAIL PROTECTED] said: On Fri, Aug 01, 2003 at 07:48:36AM -0500, John Hasler wrote: Colin Watson writes: Yup. For example, I can guarantee you that the people operating

Re: Look at these update from M$ Corporation.

2003-08-02 Thread Steve Lamb
On Sat, 2 Aug 2003 11:14:27 +0200 David Fokkema [EMAIL PROTECTED] wrote: On Fri, Aug 01, 2003 at 04:11:28PM -0500, Manoj Srivastava wrote: Because we chose not to? Because we have objections in principle to people offloading their spam fighting effort to innocent correspondents?

Re: Look at these update from M$ Corporation.

2003-08-02 Thread Alan Connor
From [EMAIL PROTECTED] Sat Aug 2 06:52:59 2003 On Fri, 1 Aug 2003 21:17:28 +0100, Colin Watson [EMAIL PROTECTED] said: I do not dispute that they eliminate spam, at least with the current generation of spamming technology. I merely claim that they are far from invulnerable, in

Re: Look at these update from M$ Corporation.

2003-08-02 Thread David Fokkema
On Sat, Aug 02, 2003 at 04:10:00AM -0700, Steve Lamb wrote: On Sat, 2 Aug 2003 11:14:27 +0200 David Fokkema [EMAIL PROTECTED] wrote: On Fri, Aug 01, 2003 at 04:11:28PM -0500, Manoj Srivastava wrote: Because we chose not to? Because we have objections in principle to people offloading

Re: Look at these update from M$ Corporation.

2003-08-02 Thread David Fokkema
On Fri, Aug 01, 2003 at 02:35:48PM -0700, Steve Lamb wrote: On Fri, 1 Aug 2003 19:55:54 +0200 David Fokkema [EMAIL PROTECTED] wrote: If you send mail directly to a person, off-list, in private, why not respond to his challenge? In any decent MUA, you just have to hit 'r'. Why should

Re: Look at these update from M$ Corporation.

2003-08-02 Thread David Fokkema
On Fri, Aug 01, 2003 at 03:52:36PM -0500, Michael D. Schleif wrote: How dare you ***ASSUME*** that I am spamming you! Who are you that I ought to feel compelled to jump through your hoops, simply to say -- in an email -- hello ?!?! I'm very sorry you feel that way. I gather from the replies

Re: Look at these update from M$ Corporation.

2003-08-02 Thread Steve Lamb
On Sat, 2 Aug 2003 07:36:35 -0700 Alan Connor [EMAIL PROTECTED] wrote: Depends on what you call false positives. False positive - Treating a message as spam when it is, in fact, not spam. I don't accept anonymous email. Period. Funny. You seem to want a buttload of it since you

Re: Look at these update from M$ Corporation.

2003-08-02 Thread Manoj Srivastava
On Sat, 2 Aug 2003 11:14:27 +0200, David Fokkema [EMAIL PROTECTED] said: On Fri, Aug 01, 2003 at 04:11:28PM -0500, Manoj Srivastava wrote: On Fri, 1 Aug 2003 19:55:54 +0200, David Fokkema [EMAIL PROTECTED] said: On Fri, Aug 01, 2003 at 07:48:36AM -0500, John Hasler wrote: Colin Watson

Re: Look at these update from M$ Corporation.

2003-08-02 Thread Steve Lamb
On Sat, 2 Aug 2003 17:07:44 +0200 David Fokkema [EMAIL PROTECTED] wrote: The only requirement (and drawback) is that other people reply to a C-R from time to time. If configured friendly, only one time for each new person you start mailing. But that is a big requirement. Look at my recent

Re: Look at these update from M$ Corporation.

2003-08-02 Thread Steve Lamb
On Sat, 2 Aug 2003 17:09:20 +0200 David Fokkema [EMAIL PROTECTED] wrote: Actually, they make it clear that they _do_ want to hear from you. Yes, that requires more time on your part and nothing on the part of the receiver. No, they haven't. The person hasn't seen my message. His machine

Re: Look at these update from M$ Corporation.

2003-08-02 Thread Manoj Srivastava
On Sat, 2 Aug 2003 07:36:35 -0700, Alan Connor [EMAIL PROTECTED] said: From [EMAIL PROTECTED] Sat Aug 2 06:52:59 2003 On Fri, 1 Aug 2003 21:17:28 +0100, Colin Watson [EMAIL PROTECTED] said: I do not dispute that they eliminate spam, at least with the current generation of spamming

Re: Look at these update from M$ Corporation.

2003-08-02 Thread Richard Lyons
On Saturday 02 August 2003 16:20, David Fokkema wrote: On Fri, Aug 01, 2003 at 03:52:36PM -0500, Michael D. Schleif wrote: How dare you ***ASSUME*** that I am spamming you! Who are you that I ought to feel compelled to jump through your hoops, simply to say -- in an email -- hello ?!?!

Re: Look at these update from M$ Corporation.

2003-08-02 Thread Manoj Srivastava
On Sat, 2 Aug 2003 17:07:44 +0200, David Fokkema [EMAIL PROTECTED] said: Got your point. However, it is still a matter of principle. I suspect that if people didn't _really_ mind C-R, they would consider simply replying to be a lot less effort than retrieving the keys, checking them, writing

Re: Look at these update from M$ Corporation.

2003-08-02 Thread Manoj Srivastava
On Sat, 2 Aug 2003 17:20:34 +0200, David Fokkema [EMAIL PROTECTED] said: What did people think about the debian mailing lists subscription mechanism? The difference is that _I_ wanted to be on the mailing list, and I was willing to jump through the hoops. Most of the times when I

Re: Look at these update from M$ Corporation.

2003-08-02 Thread Michael D. Schleif
Also sprach David Fokkema (Sat 02 Aug 02003 at 05:20:34PM +0200): snip / What did people think about the debian mailing lists subscription mechanism? Mailing list subscription is an entirely different animal. It is in my best interest that the mailing list confirms that I truly do want to

Re: Look at these update from M$ Corporation.

2003-08-02 Thread Travis Crump
Steve Lamb wrote: What's worse is that so far noone's told me how two people using C-R ever *start* communicating. Person 1 mails person 2. Person 2's C-R sends off a challenge to Person 1. Person 1's C-R sends off a challenge to Person 2. Repeat. I think the theory is that Person 1

Re: Look at these update from M$ Corporation.

2003-08-02 Thread Alan Connor
From [EMAIL PROTECTED] Sat Aug 2 09:52:03 2003 --=.4Icb)PSAb3o(C_ Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit On Sat, 02 Aug 2003 17:00:14 +0200 Alan Connor [EMAIL PROTECTED] wrote: I have just persuaded a large non-profit organization to install the

Re: Look at these update from M$ Corporation.

2003-08-02 Thread Michael D. Schleif
Also sprach Travis Crump (Sat 02 Aug 02003 at 01:00:53PM -0400): snip / And if it was Alan's challenge-response system which caused his mail to not thread properly, I'd either laugh or cry, probably both. O, I thought that I was the only one subject to this rude snub ; -- Best Regards,

Re: Look at these update from M$ Corporation.

2003-08-02 Thread Wayne Topa
Alan Connor([EMAIL PROTECTED]) is reported to have said: Depends on what you call false positives. I don't accept anonymous email. Period. If anyone wants me to read their mail, then they are going to have to prove to me that the address they are using is their actual machine. (Or *I*

Re: Look at these update from M$ Corporation.

2003-08-02 Thread David Fokkema
On Sat, Aug 02, 2003 at 11:18:01AM -0500, Manoj Srivastava wrote: On Sat, 2 Aug 2003 17:07:44 +0200, David Fokkema [EMAIL PROTECTED] said: Got your point. However, it is still a matter of principle. I suspect that if people didn't _really_ mind C-R, they would consider simply replying to

Re: Look at these update from M$ Corporation.

2003-08-02 Thread David Fokkema
On Sat, Aug 02, 2003 at 08:43:46AM -0700, Steve Lamb wrote: On Sat, 2 Aug 2003 17:07:44 +0200 David Fokkema [EMAIL PROTECTED] wrote: The only requirement (and drawback) is that other people reply to a C-R from time to time. If configured friendly, only one time for each new person you

Re: Look at these update from M$ Corporation.

2003-08-02 Thread David Fokkema
On Sat, Aug 02, 2003 at 10:13:37AM -0500, Manoj Srivastava wrote: On Sat, 2 Aug 2003 11:14:27 +0200, David Fokkema [EMAIL PROTECTED] said: Then send your answer to the list. Had it been appropriate to send it to the list, I would have done so. I am not going to do things I consider

Re: Look at these update from M$ Corporation.

2003-08-02 Thread Jesse Meyer
On Sat, 02 Aug 2003, Alan Connor wrote: It seems to me, if you can automate C-R, then spammers can too. Or do you have to verify that your a 'legitimate organization' to some sort of certificate authority to get the software? That is the last thing anyone wants. The argument to the

Re: Look at these update from M$ Corporation.

2003-08-02 Thread David Fokkema
On Sat, Aug 02, 2003 at 11:52:30AM -0500, Michael D. Schleif wrote: Also sprach David Fokkema (Sat 02 Aug 02003 at 05:20:34PM +0200): snip / What did people think about the debian mailing lists subscription mechanism? Mailing list subscription is an entirely different animal. It is

Re: Look at these update from M$ Corporation.

2003-08-02 Thread David Fokkema
On Fri, Aug 01, 2003 at 03:01:10PM -0700, Steve Lamb wrote: On Thu, 31 Jul 2003 16:57:30 -0700 If any mail comes to me from an email address or domain that isn't on my pass list, it goes to /dev/null and an auto-response is sent to whatever return address the sender supplied. Neat!

Re: Look at these update from M$ Corporation.

2003-08-02 Thread David Fokkema
On Sat, Aug 02, 2003 at 10:24:46AM -0500, Manoj Srivastava wrote: On Sat, 2 Aug 2003 07:36:35 -0700, Alan Connor [EMAIL PROTECTED] said: Depends on what you call false positives. I don't accept anonymous email. Period. Through the last couple of decades, both in my business life,

Re: Look at these update from M$ Corporation.

2003-08-02 Thread David Fokkema
On Sat, Aug 02, 2003 at 10:06:25AM -0700, Alan Connor wrote: I am REALLY sick of ignorant (or disinformational ) posts like this one. I am REALLY sick of posts like your one. The argument to the X-CR header is a password. A unique password to the transaction. And then the address is

Re: Look at these update from M$ Corporation.

2003-08-02 Thread ScruLoose
On Sat, Aug 02, 2003 at 09:23:59PM +0200, David Fokkema wrote: On Sat, Aug 02, 2003 at 10:13:37AM -0500, Manoj Srivastava wrote: On Sat, 2 Aug 2003 11:14:27 +0200, David Fokkema [EMAIL PROTECTED] said: I'm sorry you have objections to C-R systems. But hey, it's your right to have them.

Re: Look at these update from M$ Corporation.

2003-08-02 Thread Richard Lyons
On Saturday 02 August 2003 21:23, ScruLoose wrote: [...] (anyone knows of a trick to automatically whitelist all correspondents on debian-user? ;-) Yes: those nice spammers have just the tools you want... -- richard -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of

Re: Look at these update from M$ Corporation.

2003-08-02 Thread David Fokkema
On Sat, Aug 02, 2003 at 09:36:57PM +0100, Richard Lyons wrote: On Saturday 02 August 2003 21:23, ScruLoose wrote: [...] (anyone knows of a trick to automatically whitelist all correspondents on debian-user? ;-) Yes: those nice spammers have just the tools you want... Maybe I should

Re: Look at these update from M$ Corporation.

2003-08-02 Thread Richard Lyons
On Saturday 02 August 2003 21:34, David Fokkema wrote: On Sat, Aug 02, 2003 at 09:36:57PM +0100, Richard Lyons wrote: On Saturday 02 August 2003 21:23, ScruLoose wrote: [...] (anyone knows of a trick to automatically whitelist all correspondents on debian-user? ;-) Yes: those

Re: Look at these update from M$ Corporation.

2003-08-02 Thread Alan Connor
From [EMAIL PROTECTED] Sat Aug 2 13:17:11 2003 On Sat, 02 Aug 2003, Alan Connor wrote: It seems to me, if you can automate C-R, then spammers can too. Or do y= ou have to verify that your a 'legitimate organization' to some sort of cer= tificate authority to get the software? That

Re: Look at these update from M$ Corporation.

2003-08-02 Thread Johann Koenig
On Fri, 01 Aug 2003 20:40:07 +0200 Alan Connor [EMAIL PROTECTED] wrote: Which is why, if you're careful, you'll want to doublecheck the messages marked as spam. There are no messages marked as spam. Please do your homework. You obviously do not understand C-R systems at all. Your

Re: Look at these update from M$ Corporation.

2003-08-02 Thread Jesse Meyer
On Sat, 02 Aug 2003, Alan Connor wrote: What a lot of people don't understand, is that CR programs protect THEM. With a regular spamblocking program, anyone can use YOUR address and cause How wwould you like it if someone sent kiddie porn to a thousand people and used your address in the

Re: Look at these update from M$ Corporation.

2003-08-02 Thread John Hasler
David writes: Well, I am led to believe that most spam doesn't have a valid reply address. You are misled. Much of it has a very valid reply address: mine. -- John Hasler [EMAIL PROTECTED] (John Hasler) Dancing Horse Hill Elmwood, WI -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a

Re: Look at these update from M$ Corporation.

2003-08-02 Thread Steve Lamb
On Sat, 2 Aug 2003 21:06:22 +0200 David Fokkema [EMAIL PROTECTED] wrote: I know that, :-) However, Steve was telling how much time he invested in manually downloading and checking keys because of problems. I was responding to that. Of course I am going to take a few steps. I have a vested

Re: Look at these update from M$ Corporation.

2003-08-02 Thread Steve Lamb
On Sat, 2 Aug 2003 21:17:05 +0200 David Fokkema [EMAIL PROTECTED] wrote: Friendly configured, in my point of view, means that mailing lists are whitelisted. Or do you mean that you really send mail to 3 'new' persons a day? Or do you send bulk email? I guess I misunderstand you... 3 new

Re: Look at these update from M$ Corporation.

2003-08-02 Thread Steve Lamb
On Sat, 2 Aug 2003 21:23:59 +0200 David Fokkema [EMAIL PROTECTED] wrote: I'm using SA. It's just that I don't mind C-R and like the general concept, but I see many people who's opinions I value and who's mails I'd rather not send to /dev/null would not respond to a challenge, either out of

Re: Look at these update from M$ Corporation.

2003-08-02 Thread Alan Connor
From [EMAIL PROTECTED] Sat Aug 2 19:40:42 2003 Which is why, if you're careful, you'll want to doublecheck the messages marked as spam. There are no messages marked as spam. Please do your homework. You obviously do not understand C-R systems at all. Your C-R system is

Re: Look at these update from M$ Corporation.

2003-08-02 Thread Karsten M. Self
on Sat, Aug 02, 2003 at 01:00:53PM -0400, Travis Crump ([EMAIL PROTECTED]) wrote: Steve Lamb wrote: What's worse is that so far noone's told me how two people using C-R ever *start* communicating. Person 1 mails person 2. Person 2's C-R sends off a challenge to Person 1. Person

Re: Look at these update from M$ Corporation.

2003-08-02 Thread Karsten M. Self
on Sat, Aug 02, 2003 at 07:59:57PM -0700, Steve Lamb ([EMAIL PROTECTED]) wrote: On Sat, 2 Aug 2003 21:23:59 +0200 David Fokkema [EMAIL PROTECTED] wrote: I'm using SA. It's just that I don't mind C-R and like the general concept, but I see many people who's opinions I value and who's mails

RE: Look at these update from M$ Corporation.

2003-08-02 Thread Francisco Castellon
M. Self Sent: Saturday, August 02, 2003 9:47 PM To: [EMAIL PROTECTED] Subject: Re: Look at these update from M$ Corporation. on Sat, Aug 02, 2003 at 07:59:57PM -0700, Steve Lamb ([EMAIL PROTECTED]) wrote: On Sat, 2 Aug 2003 21:23:59 +0200 David Fokkema [EMAIL PROTECTED] wrote: I'm using SA

Challenge-response mail filters considered harmful (was Re: Look at these update from M$ Corporation.)

2003-08-02 Thread Karsten M. Self
on Thu, Jul 31, 2003 at 04:57:30PM -0700, Alan Connor ([EMAIL PROTECTED]) wrote: From [EMAIL PROTECTED] Thu Jul 31 16:34:18 2003 Spam is UCE (unsolicited commercial email) and stopping it can only be done with a Challenge-Response mail program, such as the one I put together. There isn't ANY

Re: Look at these update from M$ Corporation.

2003-08-02 Thread Steve Lamb
On Sat, 2 Aug 2003 21:38:58 +0200 David Fokkema [EMAIL PROTECTED] wrote: Of course, tmda works around this. If you send a mail, the receiver is whitelisted because you kindof expect a reply. Which is done how? See the problem here? Now tell me how much legitimate mail you've lost.

Re: Look at these update from M$ Corporation.

2003-08-02 Thread Steve Lamb
On Sat, 2 Aug 2003 16:32:50 -0500 Jesse Meyer [EMAIL PROTECTED] wrote: Of course, either way, once your fingered as a kiddie porn distributer, I'm assuming that your reputation is ruined. Its the Western's world equivalent of leprosy. Innocent until proven guilty is a legal concept, not a

Re: Look at these update from M$ Corporation.

2003-08-02 Thread Steve Lamb
On Sat, 2 Aug 2003 19:45:43 -0700 Alan Connor [EMAIL PROTECTED] wrote: Do you know what they call people who pass judgement on things that they are ignorant of? Alan Yup, that's about the gist of it. -- Steve C. Lamb | I'm your priest, I'm your shrink, I'm your

Re: Challenge-response mail filters considered harmful (was Re: Look at these update from M$ Corporation.)

2003-08-02 Thread Paul Johnson
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Sun, Aug 03, 2003 at 05:13:26AM +0100, Karsten M. Self wrote: on Thu, Jul 31, 2003 at 04:57:30PM -0700, Alan Connor ([EMAIL PROTECTED]) wrote: From [EMAIL PROTECTED] Thu Jul 31 16:34:18 2003 Spam is UCE (unsolicited commercial email) and

Re: Look at these update from M$ Corporation.

2003-08-01 Thread Jesse Meyer
On Thu, 31 Jul 2003, Alan Connor wrote: Spam is UCE (unsolicited commercial email) and stopping it can only be done with a Challenge-Response mail program, such as the one I put together. There isn't ANY other approach that works. Spam tends to be an automated, bulk emailing of addresses,

Re: Look at these update from M$ Corporation.

2003-08-01 Thread Colin Watson
On Fri, Aug 01, 2003 at 01:36:14AM -0500, Jesse Meyer wrote: On Thu, 31 Jul 2003, Alan Connor wrote: Spam is UCE (unsolicited commercial email) and stopping it can only be done with a Challenge-Response mail program, such as the one I put together. There isn't ANY other approach that works.

Re: Look at these update from M$ Corporation.

2003-08-01 Thread Alan Connor
From [EMAIL PROTECTED] Fri Aug 1 02:00:32 2003 On Fri, Aug 01, 2003 at 01:36:14AM -0500, Jesse Meyer wrote: On Thu, 31 Jul 2003, Alan Connor wrote: Spam is UCE (unsolicited commercial email) and stopping it can only be done with a Challenge-Response mail program, such as the one I

Re: Look at these update from M$ Corporation.

2003-08-01 Thread Alan Connor
From [EMAIL PROTECTED] Fri Aug 1 02:29:38 2003 On Fri, Aug 01, 2003 at 01:36:14AM -0500, Jesse Meyer wrote: On Thu, 31 Jul 2003, Alan Connor wrote: Spam is UCE (unsolicited commercial email) and stopping it can only be done with a Challenge-Response mail program, such as the one I

Re: Look at these update from M$ Corporation.

2003-08-01 Thread Colin Watson
On Fri, Aug 01, 2003 at 02:04:28AM -0700, Alan Connor wrote: Colin Watson wrote: On Fri, Aug 01, 2003 at 01:36:14AM -0500, Jesse Meyer wrote: Spam tends to be an automated, bulk emailing of addresses, but not all Yup. For example, I can guarantee you that the people operating the

Re: Look at these update from M$ Corporation.

2003-08-01 Thread Colin Watson
On Fri, Aug 01, 2003 at 02:38:10AM -0700, Alan Connor wrote: I should have added that debian.org is on my pass list. The domain name. Anyone mailing me from any address there wouldn't even know I was running a C-R system. A fair proportion of my spam comes from debian.org addresses;

Re: Look at these update from M$ Corporation.

2003-08-01 Thread TR
On Fri, 01 Aug 2003 11:17:56 +0100 Colin Watson [EMAIL PROTECTED] wrote: Anyone with a C-R program would just put the bug-tracking addresses on their pass list. What does C-R stand for? catch and remove? -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe.

Re: Look at these update from M$ Corporation.

2003-08-01 Thread Colin Watson
On Fri, Aug 01, 2003 at 06:43:55AM -0400, TR wrote: On Fri, 01 Aug 2003 11:17:56 +0100 Colin Watson [EMAIL PROTECTED] wrote: [I didn't write this; Alan Connor did.] Anyone with a C-R program would just put the bug-tracking addresses on their pass list. What does C-R stand for? catch and

Re: Look at these update from M$ Corporation.

2003-08-01 Thread John Hasler
Colin Watson writes: Yup. For example, I can guarantee you that the people operating the Debian bug tracking system don't always bother to respond to challenges. And I can guarantee you that I will never respond to challenges. -- John Hasler [EMAIL PROTECTED] (John Hasler) Dancing Horse Hill

Re: Look at these update from M$ Corporation.

2003-08-01 Thread Aaron
On -6007-Thu, Jul 31, 2003 at 04:57:30PM -0700, Alan Connor [EMAIL PROTECTED] spake thus, What people mean when they say they are fed up with spam, is that they are fed up with SOME spam, but want to get the others. There simply is no way that a negative approach will work. The don't pass

Re: Look at these update from M$ Corporation.

2003-08-01 Thread David Fokkema
On Fri, Aug 01, 2003 at 07:48:36AM -0500, John Hasler wrote: Colin Watson writes: Yup. For example, I can guarantee you that the people operating the Debian bug tracking system don't always bother to respond to challenges. And I can guarantee you that I will never respond to challenges.

Re: Look at these update from M$ Corporation.

2003-08-01 Thread Alan Connor
From [EMAIL PROTECTED] Fri Aug 1 10:39:44 2003 On Fri, Aug 01, 2003 at 02:04:28AM -0700, Alan Connor wrote: Colin Watson wrote: On Fri, Aug 01, 2003 at 01:36:14AM -0500, Jesse Meyer wrote: Spam tends to be an automated, bulk emailing of addresses, but not all Yup. For

Re: Look at these update from M$ Corporation.

2003-08-01 Thread Alan Connor
From [EMAIL PROTECTED] Fri Aug 1 10:49:26 2003 Colin Watson writes: Yup. For example, I can guarantee you that the people operating the Debian bug tracking system don't always bother to respond to challenges. And I can guarantee you that I will never respond to challenges.

Re: Look at these update from M$ Corporation.

2003-08-01 Thread Alan Connor
From [EMAIL PROTECTED] Fri Aug 1 10:55:48 2003 On -6007-Thu, Jul 31, 2003 at 04:57:30PM -0700, Alan Connor [EMAIL PROTECTED] spake thus, What people mean when they say they are fed up with spam, is that they are fed up with SOME spam, but want to get the others. There simply is

Re: Look at these update from M$ Corporation.

2003-08-01 Thread Alan Connor
From [EMAIL PROTECTED] Fri Aug 1 11:10:43 2003 On Thu, 31 Jul 2003, Alan Connor wrote: =20 Spam is UCE (unsolicited commercial email) and stopping it can only be do= ne with a Challenge-Response mail program, such as the one I put together. There isn't ANY other approach that works.

Re: Look at these update from M$ Corporation.

2003-08-01 Thread Alan Connor
From [EMAIL PROTECTED] Fri Aug 1 11:15:16 2003 On Fri, Aug 01, 2003 at 02:38:10AM -0700, Alan Connor wrote: I should have added that debian.org is on my pass list. The domain name. Anyone mailing me from any address there wouldn't even know I was running a C-R system. A fair

Re: Look at these update from M$ Corporation.

2003-08-01 Thread David Fokkema
On Fri, Aug 01, 2003 at 10:46:28AM -0700, Alan Connor wrote: Anyone with a C-R program would just put the bug-tracking addresses on their pass list. That's how C-R programs work. The bug-track folks wouldn't even know it was operating. Speaking as one of the bug tracking

Re: Look at these update from M$ Corporation.

2003-08-01 Thread David Fokkema
On Fri, Aug 01, 2003 at 11:18:23AM -0700, Alan Connor wrote: From [EMAIL PROTECTED] Fri Aug 1 11:15:16 2003 On Fri, Aug 01, 2003 at 02:38:10AM -0700, Alan Connor wrote: I should have added that debian.org is on my pass list. The domain name. Anyone mailing me from any address

Re: Look at these update from M$ Corporation.

2003-08-01 Thread Richard Lyons
On Friday 01 August 2003 18:55, David Fokkema wrote: On Fri, Aug 01, 2003 at 07:48:36AM -0500, John Hasler wrote: [...] And I can guarantee you that I will never respond to challenges. Why? If you send mail to a list and you get a challenge, sure, ignore it. If a user of the

Re: Look at these update from M$ Corporation.

2003-08-01 Thread Alan Shutko
Alan Connor [EMAIL PROTECTED] writes: It is the user of the C-R program that enters the bug-tracking addresses (in this case) in their passlist. The C-R program is transparent to the bug-track folks, in this case. Colin's point was that in his experience, users of C-R programs don't always do

Re: Look at these update from M$ Corporation.

2003-08-01 Thread Alan Shutko
Alan Connor [EMAIL PROTECTED] writes: My version of C-R is not a spam-reduction system it is an spam-elimination system. Incidentally, what do you do about spam sent to mailing lists you are on? -- Alan Shutko [EMAIL PROTECTED] - I am the rocks. What good is make-believe if you don't share

Re: Look at these update from M$ Corporation.

2003-08-01 Thread Manoj Srivastava
On Thu, 31 Jul 2003 16:57:30 -0700, Alan Connor [EMAIL PROTECTED] said: If any mail comes to me from an email address or domain that isn't on my pass list, it goes to /dev/null and an auto-response is sent to whatever return address the sender supplied. It asks them to re-send the mail

Re: Look at these update from M$ Corporation.

2003-08-01 Thread Manoj Srivastava
On Fri, 1 Aug 2003 11:20:01 +0100, Colin Watson [EMAIL PROTECTED] said: On Fri, Aug 01, 2003 at 02:38:10AM -0700, Alan Connor wrote: I should have added that debian.org is on my pass list. The domain name. Anyone mailing me from any address there wouldn't even know I was running a C-R

Re: Look at these update from M$ Corporation.

2003-08-01 Thread David Fokkema
On Fri, Aug 01, 2003 at 02:30:58PM -0500, Manoj Srivastava wrote: On Thu, 31 Jul 2003 16:57:30 -0700, Alan Connor [EMAIL PROTECTED] said: If any mail comes to me from an email address or domain that isn't on my pass list, it goes to /dev/null and an auto-response is sent to whatever

Re: Look at these update from M$ Corporation.

2003-08-01 Thread David Fokkema
On Fri, Aug 01, 2003 at 08:13:25PM +0100, Richard Lyons wrote: On Friday 01 August 2003 18:55, David Fokkema wrote: On Fri, Aug 01, 2003 at 07:48:36AM -0500, John Hasler wrote: [...] And I can guarantee you that I will never respond to challenges. Why? If you send mail to a list

Re: Look at these update from M$ Corporation.

2003-08-01 Thread Andrew McGuinness
Alan Connor wrote: From [EMAIL PROTECTED] Fri Aug 1 02:00:32 2003 Yup. For example, I can guarantee you that the people operating the Debian bug tracking system don't always bother to respond to challenges. If people don't want BTS mail, that's their problem; we don't have time to babysit that

Re: Look at these update from M$ Corporation.

2003-08-01 Thread Colin Watson
On Fri, Aug 01, 2003 at 11:18:23AM -0700, Alan Connor wrote: Colin Watson wrote: On Fri, Aug 01, 2003 at 02:38:10AM -0700, Alan Connor wrote: I should have added that debian.org is on my pass list. The domain name. Anyone mailing me from any address there wouldn't even know I was

Re: Look at these update from M$ Corporation.

2003-08-01 Thread Michael D. Schleif
Also sprach David Fokkema (Fri 01 Aug 02003 at 10:06:42PM +0200): On Fri, Aug 01, 2003 at 02:30:58PM -0500, Manoj Srivastava wrote: On Thu, 31 Jul 2003 16:57:30 -0700, Alan Connor [EMAIL PROTECTED] said: If any mail comes to me from an email address or domain that isn't on my pass

Re: Look at these update from M$ Corporation.

2003-08-01 Thread Colin Watson
On Fri, Aug 01, 2003 at 10:46:28AM -0700, Alan Connor wrote: Colin Watson wrote: On Fri, Aug 01, 2003 at 02:04:28AM -0700, Alan Connor wrote: Anyone with a C-R program would just put the bug-tracking addresses on their pass list. That's how C-R programs work. The bug-track folks

Re: Look at these update from M$ Corporation.

2003-08-01 Thread Manoj Srivastava
On Fri, 1 Aug 2003 22:06:42 +0200, David Fokkema [EMAIL PROTECTED] said: If you decide to go off channel and send a mail in private, why not just reply to a resent request? As a matter of principle, I refuse to jump through these ridiculous hoops. At least with tmda (and I gather,

Re: Look at these update from M$ Corporation.

2003-08-01 Thread Manoj Srivastava
On Fri, 1 Aug 2003 19:55:54 +0200, David Fokkema [EMAIL PROTECTED] said: On Fri, Aug 01, 2003 at 07:48:36AM -0500, John Hasler wrote: Colin Watson writes: Yup. For example, I can guarantee you that the people operating the Debian bug tracking system don't always bother to respond to

  1   2   >