China and its Relation With Spam 373
smooth wombat writes "Asia Times has a nice article about why China is becoming the spam capital of the world. Steve Linford, of Spamhaus fame, is quoted several times in the article and offers some insight into how the Chinese ISPs operate.
Steves quote at the end of the article pretty much sums up why China isn't doing anything to curb the hosting of spam website servers in the country:
"They simply don't want to know - China Telecom doesn't care because they're government-owned and there is no pressure coming from the government. Meanwhile, our statistics on spam volumes and the number of spammers setting up in China are going up and up and up.""
Well, okay... (Score:5, Funny)
SPAM(TM) Hot & Spicy Stir-Fry
Makes 6 servings
Ingredients
1/3 cup reduced-sodium teriyaki sauce
1/3 cup water
2 to 3 teaspoons HOUSE OF TSANG® MONGOLIAN FIRE® Oil
1/2 teaspoon ground ginger
1 (12-ounce) can SPAM® Lite, cubed
1 cup broccoli florets
1 cup chopped onion
1 cup pea pods
1 red bell pepper, cut into strips
1 tablespoon plus 1-1/2 teaspoons vegetable oil
1 (14-ounce) can whole baby corn, drained and cut in half
1 (7-ounce) jar mushrooms, drained
6 cups hot cooked white rice
In small bowl, combine teriyaki sauce, water, Chinese hot oil and ginger; set aside. In wok or large skillet, stir-fry SPAM®, broccoli, onion, pea pods and bell pepper in vegetable oil 2 minutes. Add teriyaki sauce mixture; cook until bubbly. Add baby corn and mushrooms; heat thoroughly. Serve over rice.
Re:Well, okay... (Score:3, Interesting)
Spam from Confusious (Score:5, Funny)
From: Confusious
To: teiresias
Subject: Ancient Chinese Proverb
Body: "Increase your penis size with ginger root and secret ingredient. Act now and get a free webcam. Did I mention it make your wang huge!"
Re:Spam from Confusious (Score:2)
How to get it (Score:3, Funny)
You're on slashdot. Why don't you already know this?
The source? (Score:5, Insightful)
No, I think the source has remained unchanged - the pocketbooks of those willing to actually pay for the schwag sold via SPAM email. As long as people are willing to pay for herbal Viagra, cheap mortgages, etc. based on spam, so too will spam annoy the rest of us.
Re:The source? (Score:2, Funny)
You mean herbal Viagra is made from Spam??! Does the FDA know about this? Why hasn't Spam started an ad campaign about this? "Eat Spam and grow large in TWO places!"
Re:The source? (Score:5, Insightful)
not quite. spam will exist as long there are advertisers who believe there are people who are willing to pay for junk stuff based on spam. advertizing - all it takes is the belief that it's doing something, at least until the money runs dry.
Re:The source? (Score:2)
Slashbot math lesson (Score:5, Funny)
I salute you, sir.
Re:The source? (Score:2)
Not according to Forrester Research [theregister.co.uk] it's not. At first glance, Forrester's figures seem impossibly high, but it did make me think about what the figures we hear about spam actually mean. Basically, that "0.001%" figure is the number of spams that generate a response, but if each respondant to one spam in a thousand, then 1% of spam recipients are buying from spam. Think about how many spams are being sent, and all of a sudden Forrester's
Governments (Score:2, Funny)
Re:Governments (Score:2)
On an sidenote, we may now ponder about whether introduction of Capitalism m
Re:Governments (Score:2)
Re:Governments (Score:2)
While it might not be long-term stable, I don't quite see why one couldn't implement a communism headed by a democratic body.
I'm guessing that's what the parent poster might have been referring to.
Apostrophe? (nit-pick warning) (Score:2)
Or lack thereof...
no mail of value (Score:5, Insightful)
If everybody did this, it could become a real problem for the Chinese. (duh)
Re:no mail of value (Score:3, Insightful)
What if you had a friend traveling over there, that had to get in touch with you? Or someones company switches hosting to a .cn company. Or a mail gets relayed through a .cn mail server as the regular one is down for maintainence?
I guess you'll never know. Oh, your mom called; you didn't reply to her mail about the free first-class tickets sh
Re:no mail of value (Score:2)
Your logic makes no sense. Your racism (your concern about racism barely masks it) is showing.
Re:no mail of value (Score:2)
I was (trying to) be funny. Funny comments don't always make logical sense.
Your logic makes no sense. Your racism (your concern about racism barely masks it) is showing.
Because I dislike the way that the vast majority of Americans treat China, that makes me racist? How'dya figure? I don't like the way you treat Arabs either, does that make me Hitler?
If you are in any doubt of the usual anti-Chinese sentiment wit
Re:no mail of value (Score:5, Insightful)
Likely, that friend would use an internet cafe to connect to his/her hotmail or whatever account, and shoot of the email. The email would originate from the hotmail (or whoever) mail server, not from a chinese netblock. Not a problem.
The result is no different than if a company switches to an ISP that is known to be spam-friendly... they will usually get bounces stating "Your mail was refused because your subnet is blocked for spamming," or something similar. In which case, the company had best rethink its choice of ISP.
How often is mail rerouted these days? Especially to a server in a different country, likely on a different continent? I can't recall ever seeing this. Usually mail is held until the mail server comes back up. The mailserver going down is one of those things guaranteed to get the IT people awoken in the middle of the night, so its downtime isn't going to be long anyhow.
Any idiot who relies entirely on email for transmission of important information pretty much gets what he/she deserves when there's a snafu and the email is lost. That's why really important things, such as the "DMCA take down notices" sent out by lawyers are always sent both via email and snail mail.
Re:no mail of value (Score:3, Interesting)
I'm not willing to go that far, but I do assign a 1.5 point penalty (out of 5) to all Chinese and Korean IP space. It has made a substantial difference as spammers get smarter about skirting Bayesian filters.
You misunderstand. (Score:5, Informative)
American spammers pay Russian crackers to write viruses. These viruses infect Windows machines across the world. The spammers use the zombie machines to send spam which link to websites hosted in China. This has been the prototypical arrangement for many years.
Re:no mail of value (Score:4, Funny)
That makes it easy on me... (Score:2)
Actually, after reviewing logs on my firewall I found a lot of brute force attacks coming from Korea, and only a few from China, so most subnets blocked are Korean owned. But, needless to say, I'm spam free.
Re:That makes it easy on me... (Score:2)
What goes around, comes around... (Score:5, Interesting)
Of course, that's when the payback happens, because it's going to take more than a promise to be good to convince many admins to remove a blacklist entry, null route, or whatever. It basically boils down to a choice between quick money from dodgy spammers now, or long-term money from serious business investments further down the road. At the moment, it sure looks like the Japanese are the only ones that have really grasped the concept of long term business plans being better than cash now; tomorrow's problems belong to someone else.
Is there any reason accept mail from China? (Score:3, Insightful)
If you were willing to put some effort into it, you could combine it with a whitelist, which would allow your Chinese customers to get email from the old country.
Wait a minute ... effort, ISP ... those two don't go together. Ok, never mind about the whitelist.
Re:Is there any reason accept mail from China? (Score:2)
The problem is that the spam email usually isn't sent from China. It originates from Brazil, or Argentina, or one of the many, many zombie PCs out there. China is just willing to host the spammer's website.
This is why I've be
Re:Is there any reason accept mail from China? (Score:2)
Well, an ISP which allowed you to choose to ban email from China, Brazil, Argentina and anyplace else you don't have friends or family, would probably find that it could make a few extra bucks from the service. Or, it could be a setting in the extra-cost spam filter that most ISPs already seem to offer.
Re:Is there any reason accept mail from China? (Score:2)
There are places I don't want to be connected to, at least not by default, at
This is a good thing (Score:2)
Keeping all the criminals in one place (China) is great. I blocklist all of China, Taiwan and Korea and don't have to worry about these trespassers. I do feel sorry for those folks that have to communicate with them, but just consider it the price of doing business.
Re:This is a good thing (Score:2)
Re:Racist kneejerk:This is a good thing (Score:2)
Accomplices ARE criminals. How is calling them such "rediculous"?
Re:Racist kneejerk:This is a good thing (Score:2)
Certainly, I won't change your views and you won't change mine.
Re:Racist kneejerk:This is a good thing (Score:2)
Re:Racist kneejerk:This is a good thing (Score:2)
howto (Score:2)
Here you go (Score:3, Informative)
The only way to go after spam (Score:3, Insightful)
I've been saying that for years. (Score:2)
People are looking after their own pockets. As long as there are fools to fill them, not ever the threat of a bullet to the head is going to deter them if its in some other jurisdiction.
Blocking Chinese IPs not always the solution (Score:4, Insightful)
Any solution that involves blocking everything from China won't work for everyone, and every solution that tries to selectively opt in or selectively block from China is a greater expense to set up.
Considering most of the spam originating from China is poured into the US, and the money's paid to the ISPs are money flowing from out of the US economy and into China's, I hardly think they will care any time soon.
Re:Blocking Chinese IPs not always the solution (Score:2)
Re:Blocking Chinese IPs not always the solution (Score:2)
I'm all for it as a temporary "show of force" solution.
Re: (Score:2)
Re:Blocking Chinese IPs not always the solution (Score:2)
Most people responsible for sending spam are based in the US... According to network management firm Sandvine, about 80% of spam is now sent via legions of PCs owned by ordinary - and usually oblivious - computer users around the world.
From the article.
It's the ONLY solution for now. (Score:4, Insightful)
Right now, chinese ISPs simply don't give a shit. Because spam isn't "their" problem. You're the victim, not them. So why should they give a shit?
The only way to make them give a shit, is to make it their problem. By blocking all email from china, you force them to come to terms with the problem.
If their customers can't email anyone outside of china, and their customers start raising hell about it, maybe then they will finally start dumping the criminals from their networks.
Wasn't all that long ago that chinanet ran a lying autoresponder for abuse@chinanet that responded to every complaint with:
"In your SPAM eMail,I can't find the IP or the IP is not by my control.Please give me the correct IP.Thank you." [google.com]
No wonder china gets blocked?
Until china's abusive attitude changes, they will become more and more widely blocked. They are hellbent on turning their entire country into a LAN, who are we to argue with them?
Solution? Bounce with the 550 power. (Score:5, Interesting)
550 - Thank you for your support of the steganographic communications payment protocol.
550 - Your continued support of Falun Dafa [Falun Gong] in the face of continued oppression from the butchers of Beijing is appreciated.
550 - The following token shall constitute both a receipt for your payment and a public key with which you may send your next message to your allies in the resistance.
550 - KEYBLOCK 6x5 F81IZ FOLG3 VOLSX CIOP3 F7JJ2 EYMNX
Now, is it my fault if my crontab edits the last line of that message to a different series of random characters every 30 seconds? Is it my fault if the owner of the spam-relaying machine is... dealt with... in the name of protecting his fellow citizens from mysticism and supersition?
Hmm, I suppose it is.
But hey, there's a critical shortage of corneal and kidney transplants. And a critical oversupply of server administrators who support spammers. I'm just the invisible hand of the market, smoothing out the discrepancies.
Re:Solution? Bounce with the 550 power. (Score:3, Informative)
554 5.7.1 thank you for your support of falun gong/free tibet now/free and democratic china.
I find the three pronged approach more satisfying. I might go for the four pronged approach and throw in taiwan eventually
Re:Solution? Bounce with the 550 power. (Score:5, Informative)
Re:Solution? Bounce with the 550 power. (Score:3, Informative)
My standard response (Score:5, Funny)
So much for the Great Firewall of China.. (Score:2)
Multilingual spam (Score:2)
So far I have receieved spam in:
Chinese
Russian
German
Urdu(Maybe, I'm not sure what it was, something that looked south Asian)
French
and Japanese(which recently has been almost every day all about the same thing, some girl meeting club or something, probably run by the Yakuza)
I have only been to a country that speaks one of those languages, and yet I get spam in all of them, fascinating.....m
Re:Multilingual spam (Score:2)
Re:Multilingual spam (Score:2)
What I do... (Score:2)
It therefore does me no harm whatsoever to blacklist the entire country. Using blackholes.us as a foundation, I built procmail rules to accomplish this. Whenever the occasional spam message of Chinese origin reaches me, I make another change to the rules. As it is, my procmail.log shows fifteen to forty-
Re:What I do... (Score:2)
Blocking China and other rogue IP space (Score:2, Interesting)
ALL:61.0.0.0/255.0.0.0:deny
ALL:62.0.0.0/255.0
ALL:80.0.0.0/255.0.0.0:deny
ALL:81.0.0
ALL:82.0.0.0/255.0.0.0:deny
It's better to block, then individually authorize. Most of the Chinese IPs are not only spamming, but constantly probing for vulnerabilities in SSL, SSH, FTP and other services.
Oups... (Score:2)
But maybe you don't want it either.
It's WAR! (Score:2)
Now, if someone can translate the "Arts of War" into for Internet uses, we'd win.
Do you see the irony? (Score:2)
Quite soon the chineese government won't have to try to censor the net. The western world will just filter off all the traffic coming from China, doing the job much more efficiently.
My recent spam anecdote (Score:5, Interesting)
This is all very interesting, and I was even thinking to just block the asian nations would solve a lot of spam. But then I realized that I don't get much spam from there.
Most of my spam, greater than 90%, comes from the zombied US DSL machines as proof of their addresses when trying to connect I believe a large portion of the spam that exists also links back to chinese websites, not delivered from chinese mail servers.
I recently turned on greylisting and all the viagra/herbal/biggus diccus stuff is 100% gone. Not one in a week, normally there are >30 per day. Now all my spam is from France and somewhere in Asia. But that's like 2 a day.
Link for China net blocks (and Korea, too) (Score:2, Informative)
I thought someone might find the link useful.
China isn't doing anything? (Score:2)
but China is far away isn't it? the US passing the CAN-SPAM act was just a random fluke, China isn't stomping out spam because THEY ARE EEEEEVVVVVIIILLLL!!!!1*
*if they do do something, they are anti-free speech, anti-business EEEEEEVVVVVVIIIILLLL!!!!!!111 commie scum.
Lily Tomlin said it best... (Score:3, Funny)
"We don't care. We don't have to. We're the phone company."
Filterning from china but in the body (Score:2)
chinese spam? what chinese spam? (Score:3, Informative)
http://mail.btfh.net/asia-spam.txt/ [btfh.net]
Suggested reply to chinese spammer.... (Score:3, Funny)
--
Received your coded message. Operation "Rx Meds" is on track. Further supplies for Tibet liberation front will be delivered via usual contacts when in cases marked "Herbal Viagra" when payment in full received via cook island account.
Long live free Tibet!!
Long live Falun Gong!!
--
Rest assured, with all the net monitoring that goes on, their government WILL put him out of business, or at least you will keep him up at night waiting for a knock on the door.
blocks to boycotts (Score:3, Funny)
Should take about a week or two, by my reckoning.
Fight back with sendmail (Score:4, Funny)
# Really give the Chinese Spammers a mouthful...
changequote([[,]])dnl
define([[confSMTP_LOGIN_MSG]], [[EFGIC: U.S. Congress Condemns China's Oppression of Falun Gong on\nU.S. Soil and in China\n\nHouse Concurrent Resolution 304 calls on China's agents in\n the United States to halt all operations being carried out against\n practitioners of Falun Gong on United States' soil, as well as the brutal\n persecution of millions inside China.\n\nLONDON (EFGIC) - Last week, the US Congress introduced a concurrent\n resolution calling on the Chinese government to end its brutal\n persecution of Falun Gong in China and stop all activities against Falun\n Gong practitioners inside the United States.\n House Concurrent Resolution 304 (full text), introduced by Congresswoman\n Ros-Lehtinen of Florida, references China's own constitution and\n international human rights accords in calling for China to uphold\n freedom of belief, assembly, and speech for the millions of Falun Gong\n practitioners in Mainland China.\n Resolution 304 also specifically mentioned section 401(a)(1)(B) of the\n International Religious Freedom Act of 1998 (22 U.S.C. 6401(a)(1)(B)):\n \"Whereas the Constitution of the United States guarantees freedom of\n religion, the right to assemble, and the right to speak freely, and the\n people of the United States strongly value protecting the ability of all\n people to live without fear and in accordance with their personal\n beliefs...\"\n Harassment, libel, and imprisonment have been widespread in\n Jiang Zemin's four-year campaign to eradicate Falun Gong. Torture and\n abuse in custody have led to thousands of wrongful deaths.\n]])dnl
changequote(`,')dnl
Re:Why is this still an issue? (Score:3, Interesting)
In case you haven't noticed, most of our high-tech toys have at least a few taiwanese or chinese components in there; Most "modded" PC cases nowadays come from China; Many American and European manufacturers sub-contract asian assembly-lines.
And, obviously, they use e-mail to communicate with us Westerners.
Re:Why is this still an issue? (Score:2)
And obviously you can whitelist those specific IP Addresses for those specific mail servers that you need to do business with.
If they have a problem with it, tell them to call their local sheriff, not you.
Re:Why is this still an issue? (Score:4, Insightful)
--
Ignorance is not bliss, it's annoying.
So, what's up with your sig then? Change your mind?
Honestly, I can't believe people even consider this approach. There are over 200 countries in the world, and I only know folk about 15-20 of them. Should I block the rest? Might suit for a home network, but I can't think of a multinational company that would block one of the largest population masses in the world.
Besides, most span I get is from the US, in English, selling US products, in US currency, to US people. I'd say the problem was at your end.
Re:Why is this still an issue? (Score:3, Insightful)
How many multinational companies are there in the world versus the number of small businesses or national companies? I'd guess the number was quite small. If I sell left-handed widgets to the greater Topeka, KS area, why on earth would I ever want people from China, Brazil, or even Canada to send me e-mail?
Personally, I know people in exactly four countries, a
Re:Why is this still an issue? (Score:3, Insightful)
So, what's up with your sig then? Change your mind?
I don't think this ignorant at all. It is capitalism and the "Invisible Hand" at its best. I do not want to lump slashdot into a single minded entity, but I am amazed at the GENERAL feeling on Slashdot that Evil Corporations who choose to be bad citizens and pollute and act unethically should be boycotted and should not recieve patronage, but when someone proposes doing the same to a government which is being
Re:Why is this still an issue? (Score:3, Informative)
But you're NOT doing it to the Chinese government, but to ordinary people like me, who live in Hong Kong, thousands of miles away from the ISPs in Beijing and Henan, to which I have no relation or control. Go picket the Chinese embassy if you want them to pay a
Re:Why is this still an issue? (Score:2, Insightful)
Your block will only prevent you from visiting the spammers' websites hosted by Chinese ISPs.
Re:Why is this still an issue? (Score:5, Insightful)
While that will prevent SPAM that originates in China, you may want to re-think your strategy.
According to this [sophos.com] report, most of the spam comes from North America, with thanks to Zombie PCs.
Re:Why is this still an issue? (Score:3, Informative)
China may be the biggest in terms of the market for zombie-pc network lists and does have a huge growing market for hosting spammers sites, but whose paying for these services? Most of the spam is still from a few westerners (url:http://www.spamhaus.org/rokso/) most of whom are American's.
There was an article a little while ago. (Score:3, Insightful)
Win2K was cracked almost instantly.
Win2K + sp2 was not.
The Linux box was attacked about twice an hour.
Un-advertised boxes, located by simple scans.
Yes, I see your point. That is why every bank is robbed eve
Re:Why is this still an issue? (Score:2)
Plus, I'm sure that there would be some type of 'Free Speech' issue brought up if a ISP did indeed block email from an entire country, calls claiming censorship, and certainly a mention on Slashdot as well.
Isn't this a wonderful circular problem, children?
Re:Why is this still an issue? (Score:3, Informative)
I take you don't contribute to any large open source project then. For example, FreeBSD has several committers from Taiwan, China and other asian countries. It has developers from all over the world. By banning netblocks you're reducing the chance of ever getting in contact with people from those countries. Why?
Just today I've tried to answer a question on the freebsd-questions mailing list and the recipient's SMTP server has rejected my message because they use a stupid non-working dnsbl system [sorbs.net] that th
Re:RBL (Score:5, Insightful)
Funny, I thought almost all spam originated in the US (even though it is sent via Chinese webservers.) This is confirmed in the article, btw.
Re:RBL (Score:3, Interesting)
I run spamassassin, and I have a rule to score URLs that reverse back to Chinese or Korean netblocks.
Over 50% of the tagged spams hit this rule. Now if these mails were actually sent from China or Korea, that is a different story (and a different rule
Re:RBL (Score:4, Informative)
Re:RBL (Score:2)
Re:RBL (Score:4, Insightful)
How does that make anybody racist?
I never said it was, just not a good solution. I did say there will be predicable racist anti-everyone-who-is-not-white anglo-saxon-prodestant ramblings on this thread because it's about China.
And sadly, I'm proven right. Take a look around...
Re:RBL (Score:2)
I see no connection between whatsoever between race and IP firewalling. Most people you talk to would agree.
Re:RBL (Score:2)
Did you READ my post. I said it was the US attitude to China that was racist, and that you can't get away from it in any thread mentioning China. Don't add "blind" or "dyslexic" to that list of popular American failings as well please... ;-)
Re:I once saw. (Score:2)
Re:The solution is simple... (Score:2)
Given the PRC government's (not to be confused with the legitimate government of the Republic of China in exile in Taipei) methods [christusrex.org] for dealing the the people demanding anything, I don't think that's too likely.
Re: (Score:2)
Re: (Score:2)
Re:Reverse the SPAM: use Chinese addresses ... (Score:2)
Re:Simple... (Score:2)
they have nukes toooooooo
Re:Put the money where they belong! (Score:5, Funny)
( ) technical ( ) legislative (x) market-based ( ) vigilante
approach to fighting spam. Your idea will not work. Here is why it won't work. (One or more of the following may apply to your particular idea, and it may have other flaws which used to vary from state to state before a bad federal law was passed.)
( ) Spammers can easily use it to harvest email addresses
(x) Mailing lists and other legitimate email uses would be affected
(x) No one will be able to find the guy or collect the money
( ) It is defenseless against brute force attacks
(x) It will stop spam for two weeks and then we'll be stuck with it
(x) Users of email will not put up with it
(x) Microsoft will not put up with it
( ) The police will not put up with it
(x) Requires too much cooperation from spammers
(x) Requires immediate total cooperation from everybody at once
(x) Many email users cannot afford to lose business or alienate potential employers
( ) Spammers don't care about invalid addresses in their lists
(x) Anyone could anonymously destroy anyone else's career or business
Specifically, your plan fails to account for
( ) Laws expressly prohibiting it
(x) Lack of centrally controlling authority for email
( ) Open relays in foreign countries
( ) Ease of searching tiny alphanumeric address space of all email addresses
(x) Asshats
(x) Jurisdictional problems
(x) Unpopularity of weird new taxes
(x) Public reluctance to accept weird new forms of money
(x) Huge existing software investment in SMTP
( ) Susceptibility of protocols other than SMTP to attack
( ) Willingness of users to install OS patches received by email
(x) Armies of worm riddled broadband-connected Windows boxes
( ) Eternal arms race involved in all filtering approaches
(x) Extreme profitability of spam
(x) Joe jobs and/or identity theft
( ) Technically illiterate politicians
(x) Extreme stupidity on the part of people who do business with spammers
(x) Dishonesty on the part of spammers themselves
( ) Bandwidth costs that are unaffected by client filtering
(x) Outlook
and the following philosophical objections may also apply:
(x) Ideas similar to yours are easy to come up with, yet none have ever
been shown practical
( ) Any scheme based on opt-out is unacceptable
( ) SMTP headers should not be the subject of legislation
( ) Blacklists suck
( ) Whitelists suck
( ) We should be able to talk about Viagra without being censored
( ) Countermeasures should not involve wire fraud or credit card fraud
( ) Countermeasures should not involve sabotage of public networks
(x) Countermeasures must work if phased in gradually
(x) Sending email should be free
( ) Why should we have to trust you and your servers?
(x) Incompatiblity with open source or open source licenses
(x) Feel-good measures do nothing to solve the problem
( ) Temporary/one-time email addresses are cumbersome
( ) I don't want the government reading my email
( ) Killing them that way is not slow and painful enough
Furthermore, this is what I think about you:
(x) Sorry dude, but I don't think it would work.
(x) This is a stupid idea, and you're a stupid person for suggesting it.
( ) Nice try, assh0le! I'm going to find out where you live and burn your house down!
Re:Put the money where they belong! (Score:3, Funny)
[x] You are an idiot. Report for sterlization immediately. Bring any living children with you.
Use The System Against Itselt ;-) (Score:3, Interesting)
May the ISPs live in interesting times...
Re:Spam Originating In Asia (Score:3, Interesting)
Quite right, which is one great reason not to use wholesale blocks without understanding them. I'm more of a fan of using some of the blackholes.us [blackholes.us] country-based lists to block China, etc than full IP blocks is someone wants to block certain countries.