Earthlink Wins Another Spam Award: $16 million 265
linuxwrangler writes "U.S. District Judge Thomas W. Thrash Jr. awarded Earthlink $16 million and an injunction against Howard Carmack for Carmack's use of Earthlink to deliver spam. Given that Earthlink is still awaiting payment of the $25 million it won against Kahn C. Smith last year, it views the injunction as the bigger of the two wins." A few more of these, and maybe the tide of spam will eb. Maybe. Nah.
I wish I could get in on this (Score:2, Interesting)
Re:I wish I could get in on this (Score:5, Informative)
In Washington state we are allowed to sue for up to $500.00 per spam. However, the spammer must do something like give a false return address or misleading subject line.
You should check your state laws.
Re:I wish I could get in on this (Score:4, Informative)
In Washington state we are allowed to sue for up to $500.00 per spam. However, the spammer must do something like give a false return address or misleading subject line.
Considering the amount of spam I get (sometimes hundreds per day, and I'm sure that's not an unusual amount), and the fact that 90%+ of them have fake return addresses, at $500 per spam I probably could sue for millions.
Re:I wish I could get in on this (Score:4, Informative)
In Washington state we are allowed to sue for up to $500.00 per spam.
Actually, it's not up to $500, but exactly $500, or actual damages - whichever is greater.
See here [aboutspam.com].
-- Jeff
Re:I wish I could get in on this (Score:2)
Re:I wish I could get in on this (Score:3, Informative)
Re:I wish I could get in on this (Score:2)
His grandmother thinks he's a nice guy:
Re:I wish I could get in on this (Score:2)
Just below that on the annoyance scale is any subject line that refers to me as "Friend" -- that ought to be "misleading" regardless of content because if they're spamming me, then I am certainly not their friend!
Re:I wish I could get in on this (Score:2, Funny)
Don't you know, when Earthlink collects money, all of its customers save money!
(Oh c'mon, it's no more ridiculous than saying that spam costs the recipient money)
Re:I wish I could get in on this (Score:4, Interesting)
So, spam does cost the recipient money, not only in terms of bandwidth, CPU time, storage, download time, frustration, irritation, etc., but also in all the unrecovered costs of prosecuting, persuing, and attempting to collect on the judgement. Customers may not directly pay for all of that, but their monthly rates reflect all those costs.
Re:I wish I could get in on this (Score:5, Insightful)
If they don't, then they shouldn't have sued in the first place.
Monetary awards are not the only reason for suing somebody (although going into court without a monetary interest can confuse the best of judges..). Here in BC there are many cases of companies going to court go get injunctions against protestors, etc. Although the injunctions are nominally interlocutory (until the case properly goes to court), they often stop prosecuting the case after the injunction is granted (i.e. the injunction is the only reason why they filed the injunction. I was actually surprised to find that they actually proceeded with one of these cases and got a ($6000) award.
Although they seem to have little hope of collecting on the $16M award, the fact that they can have these people arrested for violating the injunction can probably save them thousands of dollars in human an hardware costs.
Speaking from personal experience (Score:4, Insightful)
I'd say besides connection issues...
Spam and pop ups tend to be the most irritating thing about the internet to those unfamiliar with it in general... I'm quite sure it's caused plenty of customers to cancel regardless of quality of service of the connection or the quality of customer service of any company...
Not only the cancelation but the support of the end user with these issues also costs money. Running 24/7 tech support with MSN, Earthlink, AOL or any major ISP...
1800 systems don't come cheap. Money is measured in minutes.
When 50% of your calls are due to spam and pop ups... With the rest as connection issues... If somehow you can kill the reason that the end user has to call in you already saved yourself a ton of money.
Of course I've talked with people who wanted to cancel their internet because they saw a banner ad saying "You are broad casting you IP!!"
Explaining the nature of pop up ads to the user is one thing, but when they are highjacked by Xupiter, Newdotnet, or "insert your spyware of the week" it's hard to understand from their end... Not to mention those same programs will cause IE to DIE! on say Windows computer if the program itself dies. (I'd say Newdotnet is horrible for that if it eats your wsock32.dll in win98... and embedds itself all over the registry... no web pages for you...)
Heck if I know how it gets on their computers.
"Do you have Kazaa on your computer?"
Usually the answer is "yes"
Personally, I'd like to see a few ISP companies go after these Spyware companies... Sure the end user can't sue because they agreed to a EULA but it often costs their ISP large sums money in terms of support costs...
spammers? (Score:2, Insightful)
Re:spammers? (Score:2)
Re:spammers? (Score:2)
Re:spammers? (Score:2)
On a $25M award, I'd be happy to go after these bastards for a simple 5% collector's fee.
((-: Would it be OK if I destroyed their business in the process?? :-)) [big evil grin]
Legal vs technical vs payperemail (Score:5, Insightful)
The very fact that spam is only a problem when it's on a large scale (don't think about recieving on a large scale, think that the list has to be large...) means, I think, that legal solutions can prevail.
arete
Re:Legal vs technical vs payperemail (Score:2)
Re:Legal vs technical vs payperemail (Score:2)
The jurisdiction of the computer won't be an issue. The jurisdiction of the spammer is what will count. And being a non-US company is not necessarily much of a defense either: if you do business in the US, then you're potentially at-risk (see, e.g. US v. Elcomsoft), and can have your assets seized or possibly worse; contrariwise, if you don't do business in the US, then there's little point in spamming people in the US.
A
Re:Legal vs technical vs payperemail (Score:2)
Unless they're giving away their porn, they want to you to pay for it. So they must have a merchant account with an American credit card company (unless they ask you to put dollar bills into an envelope and mail them). At a minimum, that account could be closed, probably any balance in it confiscated.
If you want to get money out of a country
Payment in Goods? (Score:5, Funny)
Re:Payment in Goods? (Score:2)
Any relation? (Score:3, Funny)
Wonder if this spammer has any relation to good 'ol John. ;)
Re:Any relation? (Score:2)
About as much chance as... (Score:2, Funny)
Re:About as much chance as... (Score:2, Insightful)
A real jerk (Score:5, Informative)
Re:A real jerk (Score:2)
Awards vs. Injunction (Score:4, Interesting)
Last year the company was awarded $25 million in damages in a suit against another big junk e-mailer, Kahn C. Smith of Tennessee. Youngblood said the company hasn't collected that award. But the monetary award, Wellborn said, is less of a victory than the injunction.
Nobody will ever collect civil damages from a spammer, because the vast majority of spam does not come from legitimate companies with assets. Most spammers tend to be individuals: low-rent sleazebags with bad credit and a history of illegal or borderline illegal activities. If they actually had millions of dollars they wouldn't stoop to spamming.
The injunction is a good thing because if one of these lowlifes tries spamming again, they can throw him in jail.
Re:Awards vs. Injunction (Score:5, Insightful)
This reminds me of the thousands of posts over the years on Slashdot asking "Why does anyone spam? Noone buys that stuff." Then about a year ago a story gets posted showing someone who made *millions* spamming, and everyone stopped discussing it as if it had never happened.
Randomly assigning adjectives to someone you view as an opponent will not help your position. All it will do is make you look like someone who blindly slings insults, without giving any thought to the situation.
Re:Awards vs. Injunction (Score:4, Insightful)
Re:Awards vs. Injunction (Score:5, Interesting)
Even if somebody lives in a high-rent place, they can be a low-rent sleazebag. Hollywood is full of them, for example. And that the gain is possible doesn't mean that all spammers get it; the spammers I've taken the time to track down and talk to have often made very little from it.
Generalizations like this do *not* further the anti-spam cause.
Well, actually, they do, especially when they're true. It makes it much easier from a PR and lobbying perspective to be able to say paint spammers as beyond the pale.
I recently chatted with a fellow who's in the on-line porn industry. Although he doesn't spam, he knows a number of spammers. He seemed quite convinced that they were sleazebags. I've met a few myself, and all of them, excepting the once who were just plain clueless, were all sleazebags.
And all the ones I've seen profiled in the press were pathetic excuses for human beings, too. Like the guy in Minnesota, who previously was a cop. Until he got busted for selling drugs to children, that is.
So if you know some spammers who are smart, upstanding, concerned citizens, hey, share the details with us. I'd be fascinated to find once who is a vegan pacifist buddhist. No, scratch that, I'd be fucking floored.
Re:Awards vs. Injunction (Score:2)
Re:Awards vs. Injunction (Score:3, Insightful)
The injunction is a good thing because if one of these lowlifes tries spamming again, they can throw him in jail.
You mean this guy was using stolen credit card numbers and identities and he's not in jail already?
Re:Awards vs. Injunction (Score:2)
Perhaps, but they do make a good deal of money (not enough to pay $16 mil.), but there would be no point in spam if it wasn't done on behalf of a company...
Of course, if the spammer/company is outside US jurisdiction, you may have a hard time collecting, but you'd certainly seriously cut down on the volume of spam if you put an end to all of it in the US.
the problem (Score:2, Insightful)
Re:the problem (Score:2)
If you mean that they will use overseas servers, that won't help the spammers. If they are in the USA, you can get them in the USA. You can actually sue an overseas spammer here, but it may be hard to collect.
If you are talking of spammers overseas. You can go after a spammer overseas, but it is harder to do and to collect from.
We can also go after the people that hire them.
Re:the problem (Score:2)
For large ISPs, (Earthlink, AOL, etc.), detecting spam isn't that hard using blaclists, forbidding address spoofing, etc. They even have
Huh? (Score:3, Funny)
I say injection.
Re:"Huh?" is right (Score:2)
This is what is needed... (Score:2)
Earthlink should not allow these spammers not to pay either. They need to take everything the spammer owns. Don't even leave them a bucket to piss into.
Re:This is what is needed... (Score:2, Funny)
(that's meant as a joke, folks, go ahead and take those two or three big points of karma away for trolling anyway though, I'm sure it'll really hurt me)
I like the idea of financialy annihilating them though. I like that alot. facial tatooes of "I'm a spamming piece of shit. I wasted your money and the money of your children. Please punch me in the face until I pass out and spit teeth into the gutter" would be acceptable as well.
Re:This is what is needed... (Score:2)
I honestly don't know why this hasn't happened. When you routinely piss off millions of people, you're bound to catch a few cases of six-sigma-below-mu on the anger management scale.
Re:This is what is needed... (Score:2)
stolen identies/cc #'s (Score:3, Interesting)
Considering this and the fact that he didn't even show up to defend himself in court, why bother obeying the injuction? They don't arrest people for this stuff anymore?
Obviously Earthlink isn't going to get $16 mil out of this. I take it verizon didn't collect on their $6.9 million judgement either.
Re:stolen identies/cc #'s (Score:3, Funny)
The spammer can just put the $16 million charge on the stolen credit cards he used. Problem solved!
Solution or a bigger problem (Score:2, Insightful)
Re:Solution or a bigger problem (Score:2)
erm... (Score:3, Funny)
I don't understand (Score:2, Interesting)
Death of a spammer (Score:5, Informative)
Originally, he was buying hosting from several US ISPs, including Rackspace. We asked the ISPs to identify the site owner, as required by law (because he accepts credit cards) and when they found they didn't have good info on him, they killed his accounts. He was using about five ISPs at a time, and had his own DNS server so that he could quickly switch from one ISP to another as he was kicked off. The spam itself went out via open Telnet proxies. Whois info is plausible, but fake.
This seemed like a big-time operator, but over time, a different picture emerged. It became clear that this guy's business isn't porno. It's collecting credit card numbers. The porno sites were very shallow. ISP operators told us they were typically $5/month hosting sites with maybe 1MB of content. Some of the web sites were purchased with bad credit card numbers.
This guy kept coming back, typically buying bottom-level hosting through resellers. He tried a hosting service in Mayalasia and got kicked off. He tried one in Brazil and got kicked off. He tried a "bulk friendly" ISP in the US and got kicked off. Finally, he ended up with everything on a server in St. Petersburg, Russia. It took a few days, but he's been kicked off there, too.
We have some hints of who he is. We've spoken to some people he's dealt with. When we get a solid ID, we'll go after him for trademark infringement.
It's possible to win these things. It's time consuming, but persist. Trace where the money goes, not where the spam comes from. Follow up daily. Half an hour a day keeps the spammers away.
Re:Death of a spammer (Score:2)
Re:Death of a spammer (Score:2)
Re:Death of a spammer (Score:5, Informative)
(d) A vendor conducting business through the Internet or any other electronic means of communication shall do all of the following when the transaction involves a buyer located in this state:
(g) Any violation of the provisions of this section is a misdemeanor punishable by imprisonment in the county jail not exceeding six months, by a fine not exceeding one thousand dollars ($1,000), or by both that imprisonment and fine.
This is very straightforward. No ambiguity here. Accept a credit card number on the Internet from someone in California without first providing real contact info, go to jail.
This is enough to get you talking to an ISP's management levels or their legal department, rather than the abuse department. From there, progress is usually rapid.
This is way too hard (Score:5, Insightful)
The WSJ article today goes into some detail about the arduous chase with little pay-off. Earthlink must have some really dedicated anti-spam activists to even try this. Think they are getting big bucks? Hardly. From the WSJ:
And it involves a lot of grunt work per spammer. How much is your time worth? It's like "The Cuckoo's Egg" story again. For just this one guy, for example:
Unless we start seeing some high-profile jail time, there won't be much of a victory.
Re:This is way too hard (Score:5, Informative)
Who are the spammers in the Tulsa, OK area? I've got some pretty good evidence against someone there. Wasn't much work at all. I received a relay test message from him, I delivered it, now spam is arriving that (so sorry, Mr. Spammer) isn't getting delivered. Over 5000 recipients so far. The spam comes to my fake open realy through open proxy systems.
He's sending the relay tests from:
adsl-65-70-89-125.dsl.tulsok.swbell.net
He spams:
Subject: FWD: ASSET - BACKGROUND - MISSING PERSON SEARCHES..
Subject: FWD: BACKGROUND & ASSET SEARCHES - SAME DAY!
Subject: Fwd: background & asset reports - same day..
Subject: WE FIND MISSING PERSONS FOR YOU...OR NO CHARGE..
Subject: Re: WE FIND MISSING PERSONS FOR YOU...OR NO CHARGE!
Subject: Re: BACKGROUND & ASSET REPORTS - SAME DAY"
Subject: Re: background checks - same day service!
Subject: ASSET SEARCHES - SAME DAY SERVICE.
Subject: Re: BACKGROUND & ASSET SEARCHES - NATIONWIDE SEARCHES'
with this phone number for the marks to call: 1-877-269-3892
His relay test message went to timsmith777@connectfree.co.UK
He's been sending tests from that same IP for quite some time so I think it's the spammers IP, not an open proxy.
Subpoena SWBell to get his address (Score:3, Interesting)
It shouldn't be too hard to get his address - doing a lawsuit in small claims is probably enough to get SWBell to cough up the address of that DSL line. And you should be able to come up with an excuse to sue him. You might be able to get the SWBell security folks after him, but more likely they'd just cancel the account and it'd be protected by their privacy policies.
Re:Subpoena SWBell to get his address (Score:2)
SW Bell has been singularly unresponsive with respect to another relay tester - this after a SW Bell abuse person said she was determined to do something about the guy. That was months ago. The real question in my mind is whether the spammed (and otherwise abused) large ISPs this guy is targeting will wish to/be able to use the information I suppl
go to NANAE/NANAS if really interested (Score:2)
Please read the FAQ before you post - http://www.spamfaq.net/
BTW, your sighting has been reported already, see Google groups [google.com]
Re:go to NANAE/NANAS if really interested (Score:2)
I also knew, from NANAS, that the spam his been sighted - I looked for the phone number and saw a disgusting number of hits going fairly far back in time (disgusting because that means he's gotten away with it for so long.)
Looking in ROKSO I see a Howard Minsky has sometimes claimed a Tulsa location - maybe it's him. I figure that it's more important to someone who does some form of enforcement to know the name - I can just know him by his rel
Let's have the DEATH PENALTY for spamming (Score:3, Funny)
Other crimes that definitely merit death include:
-- Serving popup ads
-- Peeing in the alley behind my apartment building (dogs get clemency)
-- Sending emails without subject lines
Why isn't he in jail? (Score:5, Interesting)
Re:Why isn't he in jail? (Score:4, Interesting)
Besides, for criminal cases, you need a prosecutor to file a case. Unless the amount is above a certain number, they'll typically just ignore you.
At ~.02 per spam, that's still a bargain (Score:3, Interesting)
I think it's about time ISP's started charging for each e-mail both sent and received, somewhat like stamps. Something tells me the elasticity looks very vertical in this market and a small cost will do wonders for reducing spam.
Re:At ~.02 per spam, that's still a bargain (Score:2)
I don't think that's the best approach. It's artificially raising the price of a very basic service. While individual users might not mind paying 100 cents more a month, Amazon sure would be upset if it had to stop its confirmation emails, or pass that cost on to the consumer. All these companies operating slightly less efficiently ends up being a small drag on our economy.
And what's to stop us at charging extra fo
Re:At ~.02 per spam, that's still a bargain (Score:2)
True, but the side-effect would also be the death of legitimate mailing lists. I like to read Politech and I like it that /. can notify about replies and mods. I'm more willing to suffer with spam for those benefits than I would be to pay for every email I send while losing al
Re:At ~.02 per spam, that's still a bargain (Score:2)
Re:At ~.02 per spam, that's still a bargain (Score:2)
Charge for each email received? Doesn't that hurt the wrong people? I understand how charging a tiny amount for each email sent would alleviate the spam problem, but wouldn't charging the receiver just make matters worse?
I don't know whether to be happy or sad. (Score:2)
Ahhh! Don't know how to feel! Especially if Earthlink gets to collect on a sizable portion of that money... oooh like those guys need to skim any more off the top.
It's a good thing I don't use earthlink. I have a huge, behemoth, souless corporate provider, and I likes it that way.
Re:I don't know whether to be happy or sad. (Score:2)
Of course, if Sky Dayton is still in charge and paying his dues, it ends up in their pocket anyway, eventually.
Anyone got any definitive answers about CoS and Earthlink they'd like to share?
SPAM? What's that? (Score:3, Interesting)
Re:SPAM? What's that? (Score:4, Insightful)
It's both a matter of principle and spam does have a financial and quality of service impact on companies and consumers.
In order to dodge spam, companies/consumers have to either spend the time manually deleting spam or put out the money to buy software to filter spam. In both these cases, spam still eats bandwidth.
Companies also have to be careful (i.e., spend time/money) that software filters do not delete legitimate email, as this could potentially have a severe imapact on their business dealings, service record, etc.
Finally, the burden of spam should fall on those responsible for it, not those that are "victimized" by it. So let's still nail the spammers.
Re:SPAM? What's that? (Score:3, Interesting)
Re:SPAM? What's that? (Score:2)
I call bullshit. I would venture that the bandwidth used by downloading movies and music (oops, sorry, I meant "previewing"), combined with surfing and gaming bandwith FAR, FAR outweighs a few hundred kilobytes of unwanted spam.
Spam sucks, but let's not make things up here, guys. Keep things in perspective. No need to lie.
Re:SPAM? What's that? (Score:5, Insightful)
Re:SPAM? What's that? (Score:2)
There's some merit in what you say - it's better to try to educate inept sysadmins than to just sit back and complain about them. But there's an entirely different path available to attack the open rely problem and that path doesn't depend on educati
Checking my Wall Street Journal (Score:2)
IN SOVIET RUSSIA (Score:2)
Hosting my own server (Score:4, Informative)
Maybe when hell freezes over SPAMers will finally catch a clue...nahhh, I doubt it..
Avoid court fines now ! (Score:4, Funny)
Re: "Patriot" Legislation... (Score:4, Funny)
I know the idea of a site that sells penis enlarging devices and offers college degrees for $19.95, terrorizes me.
how big is the fish ? (Score:2, Interesting)
I didn't pay for noise (Score:2)
If you get a telephone line and when you answer the phone all you get is static, so that maybe 70% of the phone conversation can be heard, should you be paying for this extra noise that is inhibiting your ability to get appropriate utilization based on what you're paying for?
They say that 40% or more of data travelling across the Internet nowadays is rogue data, neither solicited, nor welc
Treat Spammers like hackers!!! (Score:5, Insightful)
Why not go after these people for real crimes and send them to the slammer, confiscate their equipment, and all that other stuff the FBI loves to do? Also gotta figure if these guys are making any money, their probably violating some IRS law, so send more feds after them.
Bah... until judges and politicans actually grow up around this stuff, or have to answer their own emails, they'll never pursue it.
I bet when Bill Gates kids start getting spam, we'll see some radical solutions.
Why not stick to games? (Score:2)
You'd think with all the great games he's made, he wouldn't have to resort to this.
OK, I have a friend who is a sleazebag^W spammer (Score:5, Interesting)
A couple of months ago she came and talked to me about how to set up a bulk email thing and I thought I'd succeeded in persuading her that it was a seriously bad idea and she shouldn't do it. Apparently I hadn't; last night she told me she'd started sending bulk UCE.
This isn't someone whom I'd describe as sleazy, and it isn't someone who's stupid. It's someone who is desperate. I think you will find a lot of spammers are.
The problem can be tackled, it seems to me, at two levels. Yes, if there's legislation (particularly if it has real teeth) then peopel will get a good clue that this is not a good thing to do. But it also needs there to be a professional ethic among systems and network administrators that we will not allow the infrastructure we control to be used for this sort of thing, and that we will kick offenders off and cancel accounts; and that if our management say different we will refuse to work for them - a sort of hypocratic oath for geeks.
How I stopped a spamming before it started (Score:2)
I had been doing the mailings for our legitimate (customers/registrants with opt-in/opt-out ability) bulk emailings, and so I was the natural go-to guy when someone fairly high up in the company was going to buy a bunch of addresses. I said something like "Isn't that against the law?". They responded that we would be using a re
Re:OK, I have a friend who is a sleazebag^W spamme (Score:2)
And yet, boo-freakin'-hoo (Score:2)
I've been on the skids too. Putting that kind of time and effort into FINDING A JOB was much more satisfying than hitting up my tech-buds as accomplices to degrading the Internet yet another notch. Well done, Obi-Wan, your failed teachings have brought another soul to the Dark Side.
Thanks for putting a human face
Earthlink sues spammers. I LOVE EARTHLINK!! (Score:2)
Seeing articles about these people actively combatting the very sources of SPAM just warms my heart. Hell, I'd pay double for that kind of service.
I've been on Earthlink since sometime in August or September and have had no problems at all. (I must say that the TimeWarner installer-guy was way cool, too. He didn't much favor TimeWarner but he knew what he was doing, for sure. He had even heard
Re:What about spammers with foreign servers? (Score:2, Insightful)
Seth
Re:That's "ebb" (Score:3, Interesting)
Yes, "grammar nazis" can be annoying, but they do serve a purpose.
Re:That's "ebb" (Score:2)
Re:That's "ebb" (Score:2)
Re:That's "ebb" (Score:2)
Re:Authentication (Score:2)
Digital signatures prove that the code that produced them had access to your private key. Nothing more.
There are already viruses that try to spam from you machine (I think I got one a while ago - the e-mail it was attached to had one of those 1x1 images embedded in it. I went and grabbed it, just for the hell of it, and the next day I started getting connection attempts from a known spammer on my firewall's port 25, where I have a Perl scrip
Re:Authentication (Score:3, Interesting)
Considering signing emails can be done programatically, with no user intervention, and email certs are easy to get hold of (Verisign do a 3 month trial, my SSL provider gives 1 year ones free and all of these have no checks on who you are, beyond checking the email address exsists) the curren
Re:Authentication (Score:4, Interesting)
If the virus is already running on your machine, it can intercept your passphrase.
I agree that digital signatures would make spamming more difficult. If nothing else, they'll force spammers to perform quite a few obviously illegal and incriminating steps, which should make it easier to stop them.
Re:Is it just me or.... (Score:5, Interesting)
Moral is: do not buy their wares, and scrutinize all websites that ask for you e-mail address, read the privacy policies, and make sure you do not inadvertantly sign up for mail from "affiliates".
Re:idea for blocking spam (Score:2)
In fact, the activation code mechanism needs to be standardized. Then a bot on the sending end can recognize the activation code and automatically send a reply, thus enabling it to continue spamming you.