Re: skilled crooks, Water tight opt-in (yet another FUSSP)

On 01/11/2014 09:05 PM, John Levine wrote:
>> forged subscription information doesn�t scale and wouldn�t deflect an investigation by sa, the CRTC
>> who will be relying upon ISP complaint data as well as a purpose-built spamtrap network, and data
>>from a variety of major sources.

> I dunno.  I recall Laura reporting on a bunch of forged subscriptions
> done so well that the only reason she was sure it was dirty is that
> one of the subscription addresses they forged was hers.

The reality is that it's trivially forgeable.  So are signatures, credit
cards and driver's licenses.

But we muddle along anyway.

In other words, it doesn't have to be/shouldn't be the only evidence
you're relying on.  On a case-by-case basis, there will usually be other
information that will help you prove that a batch of subscriptions are
good or bad.

I caught Richter touting subscription addresses of 192.168.0.0/16.
Others touting IP addresses in the wrong continent.  Others touting COI
registrations from 15 years after the domain went defunct. Or just the
one time where the person involved said "no I didn't".

Throw doubt on a handful and they all become suspect.

Large scale spammers will garner a lot of complaints.  Some of them will
almost certainly destroy the credibility of supposed registration data
for the rest.

I'm with Neil, I don't think forged subscriptions scale very well.

-
This is the asrg mailing list.  To change your subscription settings, see
http://lists.services.net/cgi-bin/mj_wwwusr/domain=lists.gurus.org