Stories
Slash Boxes
Comments

News for nerds, stuff that matters

Slashdot Log In

Log In

Create Account  |  Retrieve Password

France Launches Anti-Spam Platform

Posted by ScuttleMonkey on Sun May 13, 2007 09:19 AM
from the more-blacklists dept.
njondet writes "French-law.net reports that the French government has just launched 'Signal Spam', an anti-spam platform created in association with public entities and private companies, such as Microsoft. Internet users will be able to report spam messages by mailing them to this platform which will act as a centralised monitor of spamming activities. The platform will generate a blacklist and help initiate prosecutions against spammers."
+ -
story
This discussion has been archived. No new comments can be posted.
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
 Full
 Abbreviated
 Hidden
More
Loading... please wait.
  • and smoke a noxious cigarette to celebrate.
  • by MankyD (567984) on Sunday May 13 2007, @09:24AM (#19103843) Homepage
    This is where the libertarian in me comes out and wonders if these things aren't better left to the private sector. On the other hand, perhaps having this information sent directly to authorities will result in more prosecutions (or more successful prosecutions) under laws similar to CAN-SPAM, (or maybe that's just wishful thinking.)
    • Re: (Score:3, Interesting)

      Given that SPAM is outlawed most places, and even if not then most of the offerings are illegal to import drugs, stock frauds, nigeria frauds, products with claimed medical effect without documentation, identity fraud, virus and trojans and so on then I see no problem with suspected illegal activity being reported to the authorities for investigation and possible prosecution. It's technically what I could do if I printed out my SPAMs and went to the local police station, except they'd never do anything abou
      • It's technically what I could do if I printed out my SPAMs and went to the local police station, except they'd never do anything about it.
        I guess this is my question. I have no problems with sending my spam to a government run central location (as long as its actually spam that I reviewed and sent by hand.) I'm more wondering if sending it to the authorities in this manner will give them motivation or ease in prosecuting.
    • Re: (Score:2, Interesting)

      The way i read it this is the government providing private interests with a service that would take a serious amount of cooperation to succeed and so they are speeding up the process. Cooperation in favor of competition
    • by rs232 (849320) on Sunday May 13 2007, @09:43AM (#19103955)
      'having this information sent directly to authorities will result in more prosecutions .. under laws similar to CAN-SPAM'

      CAN-SPAM doesn't ban SPAM, what it does do is legitimise the sending of unsolicited commercial e-mail and specifically forbids e-mail recipients from suing the spammers. It's one of those Acts that do the exact opposite of what the name means. As such it should really be called the ENABLE-SPAM Act of 2003.

      was Re:Better as a Private Service?
      • As such it should really be called the ENABLE-SPAM Act of 2003.
        It is already pretty well known as the YOU CAN-SPAM Act. [google.com]
      • Re: (Score:3, Interesting)

        It's one of those Acts that do the exact opposite of what the name means.

        Or it does exactly what it says, if you read it like a verb. Hopefully a few spammers died of laughter thinking about it, how they got Congress to pass a "We CAN SPAM" act.
      • I always assume that any piece of legislation does the opposite of what its title says. The "Clear Skies Act" greatly increased the amount of pollution allowed. The "Freedom to Farm Act" was all about making it harder to be an individual farmer and easy to be a food-factory megacorporation. And let's not even get into the PATRIOT Act.

        The same goes for lobbying groups. Any advertisement paid for by "The Group To Preserve Habitat For Cute Little Critters" has oil fingerprints all over the check.
      • CAN-SPAM doesn't ban SPAM, what it does do is legitimise the sending of unsolicited commercial e-mail and specifically forbids e-mail recipients from suing the spammers. It's one of those Acts that do the exact opposite of what the name means. As such it should really be called the ENABLE-SPAM Act of 2003.
        Not quite. CAN-SPAM does legitimize the sending of unsolicited commercial e-mail with certain restrictions, but it also clearly defines e-mail that doesn't meet those requirements as being illegal. Virtually every single piece of spam I get violates the requirements of CAN-SPAM and is therefore illegal under US law. If CAN-SPAM were aggressively enforced, it would have a huge impact in reducing the amount of spam that gets sent. Any spam that is legal under CAN-SPAM is trivially easy to filter out through technical means, and if we did start to see legal spam, Congress could simply amend the law to address the problem.

        To reiterate: while CAN-SPAM does define certain types of spam as legitimate, that's OK because none of the spam being sent is that kind of spam. If this changes, the law can be fixed later.

        However, you are correct that CAN-SPAM also prohibits individuals from suing spammers. If the government were doing its job and aggressively prosecuting them, then private lawsuits would be redundant and unnecessary, and I'm sure that was the original thinking. However, that's not happening. That's a problem.
        • yeah, that's why I get spam for viagra or porn that says at the bottom some disclaimer that it's ok under US spam laws because this particular piece of spam has fulfills some loophole-style requirement.

    • Left to the private sector? ROFLMAO!

      The private sector are the spammers, why would you give them control? Stupid libertots.
      • Yes, there are certainly private sector spammers, but there are also plenty of private sector spam detectors. The reason that I would suggest leaving it to the private sector is that they have strong motivation to improve and evolve their detection methods.

        On a side note, you need to spare the ad-hominem attacks. I never said I was libertarian (I am not). I simply stated that my belief in this area might be comparable with a libertarians beliefs. Insults do no one any good.

        • Re: (Score:3, Insightful)

          The private sector has a strong motivation to simultaneously make money out of sending spam, and make even more money detecting it.

          It is not in the interests of the malware detection companies to eliminate the problem, because then they would eliminate their own business.
  • by Anonymous Coward on Sunday May 13 2007, @09:28AM (#19103865)
    I wonder how long before we see a massive DDOS attack against the infrastructure used to run this.
  • by Arkaic (784460) on Sunday May 13 2007, @09:33AM (#19103885)
    This seems like an unnecessary duplication of effort. There are already established providers of blacklists, such as spamcop. Why not work with them and help develop easier ways for users to report spam via their email client?
    • Re: (Score:2, Informative)

      The goal is not to build another blacklist database, but to take legal actions against (french) spammers.
            • And what about people who work in Walmart because it's the only job that they can get? They can't stop working there....

              In France their wages, hours, holiday, etc would be protected. So for them, perhaps, the state provides a friendly, helpful barrier against the raw unfettered capitalism that you think is something you can just opt out of when you want.

                • Studies have actually shown that, counterintuitively, when a Wal-Mart opens somewhere the average income in the area decreases, probably because it drives other, higher paying retailers out of business.

                  So the answer to b is bad, c is no and d is yes.
                • Questions from you.

                  * Why is it the only job they can get?

                  Who knows, who cares (they don't, neither does Walmart)

                  * So then is it good or bad that they can work at WalMart?

                  Neither. It's many things, none of which are simple enough to reduce to a good/ bad or moral argument

                  * If WalMart disappeared these people would never work again?

                  What, disappeared like something from a child's story book? Please explain how Walmart could 'disappear'

                  * Would people be better off if WalMart had,
                    • Re: (Score:3, Interesting)

                      Walmart fucked up. "Like, did you know that American pillowcases are a different size than German ones are?" he asked. Wal-Mart Germany ended up with a huge pile of pillowcases they couldn't sell to German customers."

                      I know that and I'm neither American nor German.

                      That said, this hasn't disappeared - the stores have been bought, and Walmart won't be doing some of this again:

                      '....management had threatened to close certain stores if staff did not agree to work to working longer hours than their contracts fore
                • Why is it the only job they can get?

                  - because their town is too small to sustain a globally competitive cost-cutting store & the collection of mom and pot stores (which tend to keep money in the area btw).

                  So then is it good or bad that they can work at WalMart?

                  Bad - Noone who works at Wal-mart should be trying to live off their income. Wal-mart, goodwill and lower positions at fast-food franchises are only good for sustaining kids who live at home and are trying to save up for the next step (more educat
  • Yes this'll work (Score:5, Interesting)

    by Colin Smith (2679) on Sunday May 13 2007, @09:33AM (#19103891)
    Because.

    1: We all know how quickly the law works... Talk about a bottleneck.
    2: Most spammers operate outwith the control of any single government.
    3: Many spammers operate through compromised proxy systems.

    Still, at least they're being seen to be doing something and this is the important bit for the politicians.
     
    • It may help. (Score:4, Interesting)

      by khasim (1285) <brandioch.conner@gmail.com> on Sunday May 13 2007, @09:55AM (#19104033)
      Depending upon how it is implemented and how they evolve it.

      1: We all know how quickly the law works... Talk about a bottleneck.

      But it seems to be the only way to actually get the spammers. Filtering doesn't affect them. Their bandwidth is essentially free.

      2: Most spammers operate outwith the control of any single government.

      Not really. Each individual spammer lives in a country and is governed by the laws of that country. No single set of laws govern ALL spammers, but you can target some of them.

      3: Many spammers operate through compromised proxy systems.

      The technology should just be one aspect of this.

      The spammers usually don't send out crap on their own (unless it is to advertise their services). This is one of the classic "follow the money" issues.

      The Register ran an article that I cannot find right now. It was about how Company A hired Company B to send out ads to certain addresses. Company B hired Company C to send the ads. Company C needed more names so it bought a list of email addresses off of eBay from Person D.

      It's easy for a government to handle research like that. Companies respond a LOT quicker when the request for information comes from their government.

      And companies don't like having the government digging through their paperwork.

      Sure, you risk "Joe Jobs", but overall, it should get the legitimate companies to be a LOT more careful before they outsource their next "email advertising campaign".

      And that means that some of the money in spamming will dry up.

      • But it seems to be the only way to actually get the spammers.
        The only way to get spammers is to lynch them.
      • Each individual spammer lives in a country and is governed by the laws of that country.

        And since I've read several stories on /. so far about some or other citizen of another country being extradited to the USA after breaking an American law in his own country, maybe the US could start prosecuting spammers all over the world and finally do something useful with their "Global Policeman" policy.

    • 2: Most spammers operate outwith the control of any single government.

      Yes, but if countries actually prosecuted spammers to any real extent we could blacklist the rest. France has just taken the first step towards getting on a whitelist.

      If the proposal for tax-free overtime goes through I expect France to become something of an IT powerhouse.

    • 1: We all know how quickly the law works... Talk about a bottleneck.
      2: Most spammers operate outwith the control of any single government.
      3: Many spammers operate through compromised proxy systems.
      You forgot:
      4: ???
      5: Profit!
  • Any organization that uses the word "internaut" to refer to people who use the Internet is doomed to failure, regardless of its intentions. Combined with the fact that it's a French, governmental organization working with MicroSoft, how could it possibly succeed?

    Seriously, how long until the zombie networks retaliate? I'd like to have some marshmallows ready for the server fire that follows.
  • I'm thinking this is a good idea, get a serious organization behind fighting spam, not just one with serious goals and effort but one with serious authority. I wonder if the citizens (who are ultimately paying for it of course) have much control over how it is set up? I can envision a conflict between our marketing department and the government going something like this:
    Marketing: "No, it's not spam, we put in opt out links and only send it to people we have a relationship with."
    Gov: "But 200 people called it spam, you're now listed as a spammer. Sorry."
    Marketing: "That's no fair! How do we change our status?"
    Gov: "The will of the people has spoken, but I don't have lunch plans, maybe the people could buy....?"
    Marketing: "Do you like steak?"
    ....Fast forward two years...
    Gov: "I realize our office receives a lot of criticism for not allowing the public to mark mail as spam, but in reality many of the emails we receive are legitimate businesses using legal means to advertise. We will not allow the public to slur the good name of reputable companies."

  • Your post advocates a

    (x) technical (x) legislative ( ) market-based (x) vigilante

    approach to fighting spam. Your idea will not work. Here is why it won't work. (One or more of the following may apply to your particular idea, and it may have other flaws which used to vary from state to state before a bad federal law was passed.)

    ( ) Spammers can easily use it to harvest email addresses
    (x) Mailing lists and other legitimate email uses would be affected
    (x) No one will be able to find the guy or collect the money
    ( ) It is defenseless against brute force attacks
    ( ) It will stop spam for two weeks and then we'll be stuck with it
    ( ) Users of email will not put up with it
    ( ) Microsoft will not put up with it
    ( ) The police will not put up with it
    ( ) Requires too much cooperation from spammers
    ( ) Requires immediate total cooperation from everybody at once
    ( ) Many email users cannot afford to lose business or alienate potential employers
    ( ) Spammers don't care about invalid addresses in their lists
    (x) Anyone could anonymously destroy anyone else's career or business

    Specifically, your plan fails to account for

    ( ) Laws expressly prohibiting it
    (x) Lack of centrally controlling authority for email
    (x) Open relays in foreign countries
    ( ) Ease of searching tiny alphanumeric address space of all email addresses
    ( ) Asshats
    (x) Jurisdictional problems
    ( ) Unpopularity of weird new taxes
    ( ) Public reluctance to accept weird new forms of money
    ( ) Huge existing software investment in SMTP
    ( ) Susceptibility of protocols other than SMTP to attack
    ( ) Willingness of users to install OS patches received by email
    (x) Armies of worm riddled broadband-connected Windows boxes
    (x) Eternal arms race involved in all filtering approaches
    ( ) Extreme profitability of spam
    ( ) Joe jobs and/or identity theft
    (x) Technically illiterate politicians
    (x) Extreme stupidity on the part of people who do business with spammers
    ( ) Dishonesty on the part of spammers themselves
    (x) Bandwidth costs that are unaffected by client filtering
    (x) Outlook

    and the following philosophical objections may also apply:

    (x) Ideas similar to yours are easy to come up with, yet none have ever
    been shown practical
    ( ) Any scheme based on opt-out is unacceptable
    ( ) SMTP headers should not be the subject of legislation
    (x) Blacklists suck
    ( ) Whitelists suck
    ( ) We should be able to talk about Viagra without being censored
    ( ) Countermeasures should not involve wire fraud or credit card fraud
    (x) Countermeasures should not involve sabotage of public networks
    ( ) Countermeasures must work if phased in gradually
    ( ) Sending email should be free
    (x) Why should we have to trust you and your servers?
    ( ) Incompatiblity with open source or open source licenses
    ( ) Feel-good measures do nothing to solve the problem
    ( ) Temporary/one-time email addresses are cumbersome
    ( ) I don't want the government reading my email
    ( ) Killing them that way is not slow and painful enough

    Furthermore, this is what I think about you:

    (x) Sorry dude, but I don't think it would work.
    (x) This is a stupid idea, and you're a stupid person for suggesting it.
    ( ) Nice try, assh0le! I'm going to find out where you live and burn your
    house down!
  • by matt me (850665) on Sunday May 13 2007, @09:53AM (#19104027)
    Spam has no borders. We need a *worldwide* effort.
  • Better idea (Score:4, Funny)

    by OldManAndTheC++ (723450) on Sunday May 13 2007, @10:00AM (#19104071)

    Duplicate the platform onto a series of servers and put them into reinforced bunkers strung along the border [wikipedia.org]. That ought to stop spam from entering the country.

    Oh, and be sure not to leave a gap in the Ardennes...

  • Unfortunately quite a bit of the site is waiting to be translated but it's a decent initiative. I like the following advice.

    "Every time you send a message, check that the email addresses contained in the recipient's field and cc can be clearly transmitted. If you want to send a copy to certain recipients, choose the field bcc or cci . Ensure you do not use the tool "forward to a friend" presented in some sites allowing giving an email to a third party without his consent."

    http://www.signal-spam.fr/en/index. [signal-spam.fr]
  • Personally I think that rather the source of these spam should be dealt with. Since about 1,5 week, I'm receiving a lot of German spam for companies on the Frankfurt stock exchange. Authorities should rather investigate these companies. This is not some innocent spam anymore, but financial fraud on a very large scale. Companies have gone broke already for other kinds of fraud...

    And of course, (l)users and mail server sysadmins should start to secure there machines, so there would not be those huge botnets
    • Re: (Score:3, Insightful)

      Authorities should rather investigate these companies.
      Maybe. Do you have any evidence that the company itself sent out the spam? "Joe jobs" happen, and in the case of a publicly traded company, it could just as easily be someone who has a stake and is trying to influence the price.
  • The lobster thermidor aux crevettes with a Mornay sauce garnished with truffle paté, brandy and with a fried egg on top... is no longer available with spam.
  • Maybe it's just me, or maybe it's because there was another space-related story nearby, but when I saw "France Launches Anti-Spam Platform", the first image that came to mind was an orbital bombardment platform for eliminating spammers from orbit. Now that's the kind of technology taxpayer money should be spent on!
  • I wrote Signal Spam (Score:5, Interesting)

    by JohnGrahamCumming (684871) * <slashdot&jgc,org> on Sunday May 13 2007, @12:34PM (#19104961) Homepage Journal
    I wrote the code that is behind this web site. I'll try to answer questions without giving up confidential information if people are interested.

    John.
    • If they have half a brain, they'd put a physical shunt between the server containing the blacklist and the server which hosts the inbox. Since they'd obviously have to have a person sitting somewhere and clicking "is spam"/"not spam", they could just have their interface copy all the "is spam" to say, a flash key, and at the end of the day they unplug it and input it into the blacklist server. It would only be marginally more inefficient, and it would mean the worst case scenario is no new spam can be repor
    • by Kjella (173770) on Sunday May 13 2007, @10:02AM (#19104089) Homepage
      Haven't we learned by now that centralized services don't exactly function as advertised?

      Yes, it's terrible how the DNS root server farm is constantly hacked. Or how the google server farm gets hacked every day to redirect to the goatse guy. What? That doesn't happen? What's happnened in the past with a few is that they've managed to DDoS them out of business, or sue them out of business. The government can throw hardware and bandwidth at it. If people come to rely on it, call it "critical infrastructure". Prosecute anyone trying to hack it as cyberterrorists (sic). Let the spammers threaten to sue it, and laugh at them. And if they do it, pass special laws to protect it from liability. Link it up so whenever there's a penny stock scam, start a SEC (or whatever the French version is) investigation. If there's a drug scam, start a FDA (or similar) investigation.

      I'm sure this scares the hell out of spammers - someone with more power than to simply blacklist the servers after the fact, which honestly is running around putting out fires instead of catching those starting them. And even if they turn out to be completely incompetent, nothing stops the current blacklists from running...
    • They are at it again. Snob, uppish, wants whole world do things in their own way, learn french and whatnot. They isolate themselves, dont join in the international community, and they want whole 250+ countries in the world to listen to what they say.

      I'm sorry, were we talking about France or the US?

      Now they found a "anti spam" organization as if anti spam organizations do not exist. In at most 2 years i assure you they will be proposing laws to eu that every eu member should mandatorily use their anti spam
    • by Ckwop (707653) * <Simon.Johnson@gmail.com> on Sunday May 13 2007, @10:25AM (#19104217) Homepage

      They are at it again. Snob, uppish, wants whole world do things in their own way, learn french and whatnot. They isolate themselves, dont join in the international community, and they want whole 250+ countries in the world to listen to what they say.

      That sounds an awful lot like the US to me. The US/France relationship reminds me of two brothers who "hate" each other for no other reason that they are so similar. The French are a proud, strong and patriotic nation and so are the citizens of the United States.

      On top of this, the French are also more internationally minded than the US. They did start the European Union after all and relinquished control of interest rates to Brussels to adopt the single currency.

      Simon.

      • no they are not.

        french did not start eu. thats so 'french' again. more than one country started eu as an economic society for coal trade, after ww2. French has been trying to monopolize everything about eu since.

        its not united states either. united states does not try to impose its standards on every nation in the world. french, do. start from metric system and go up to trying to make their language official language of eu despite there are hordes of people in eu that have no idea what french sounds l