Simson Garfinkel

How to avoid the evil eye

There are a few ways to evade spammers, but most will limit your reception of other mail too.

Topics:

I doubt anyone would sign up for dozens
of daily e-mail messages promoting
strange herbal remedies and CD-ROMs that
contain 55 million e-mail addresses. But
when it comes to avoiding spam, your
options are, unfortunately, limited.
Many of the most effective techniques
for protecting your mailbox from spam
have the side effect of limiting the
ways that you can use the Internet.

There are two fundamental ways to keep
spam out of your in box. The first is to
prevent spammers from getting your
e-mail address in the first place. The
second is to filter out the incoming
spam from the e-mail that you actually
want to see.

Go stealth

If you are going to try to keep your
e-mail address from the spammers, you’ll
need to apply constant vigilance.
Spammers have written programs that
harvest e-mail addresses from
practically every location you can
imagine: Web pages, Internet provider
directories, chat rooms and mailing list
archives. These robots are silent and
extremely effective: A friend of mine
who is a school teacher in Los Angeles
visited the “Parent Soup” chat room on
America Online; two days later, her
mailbox was filled with messages pushing
pornographic Web sites.

The easiest way to hide your e-mail
address is to withdraw from Internet
communications: Don’t visit chat rooms,
don’t post, don’t participate on mailing
lists and don’t put your e-mail address
on your Web page. Follow these
techniques and you’ll get little spam;
unfortunately, you probably won’t get
much other mail, either.

A simple variant of the stealth
technique is to cycle your e-mail
addresses — get a new one every two or
three months. Naturally, this is easier
to do if you own your own domain. Alas,
a constantly changing e-mail address
will be difficult on your
correspondents.

A less anti-social technique is called
“address munging.” With this technique,
instead of participating in online
discussions using your real e-mail
address, you use an e-mail address
that’s not valid, but from which your
correct e-mail address is easily
discerned. For example, if you were
President Clinton, instead of using
president@whitehouse.gov, you might use
president@remove-me.whitehouse.gov, or
president@whitehouse.nospam.gov. Address
munging throws off the current
generation of address-scraping robots,
although it’s only a matter of time
before spammers have their robots
automatically prune out the most common
munging names.

If you do choose to go stealth, make
sure that your e-mail address doesn’t
appear in online directories, like target="new"
href="http://www.bigfoot.com">Bigfoot
> or the America Online membership
pages. Many of the early spammers built
their vast collection of e-mail
addresses by milking UNIX servers at
universities and businesses.

Unfortunately, stealth techniques won’t
help you if you have a common e-mail
address. That’s because spammers are
increasingly resorting to what’s called
“dictionary attacks.” Instead of trying
to find a valid e-mail address, the
spammers simply guess which e-mail
addresses might work. For example, the
spammer might send e-mail to
tom@hotmail.com, dick@hotmail.com and
harry@hotmail.com, without knowing that
those addresses actually exist. A more
creative spammer might try
toma@hotmail.com through
tomz@hotmail.com, and so on throughout
the dictionary of first and last names.

Try filtering

Since ultimately there is no way to
prevent the spammers from sending
messages to your mailboxes, many people
have turned to filtering — automated
techniques for identifying spam and
sending it to the trash can without
human intervention.

Filtering is somewhat error prone.
Filter the words “business opportunity”
in the subject line and you’ll can a lot
of spam messages, but you’re likely to
also throw away the e-mail about that
new job offer. Throw away e-mail that’s
in ALL CAPS and you’re likely to miss
the HAPPY BIRTHDAY e-mail from your
grandmother, who still doesn’t really
understand the Caps Lock key.

Some filters work on domain names in the
“From:” address. You can’t go wrong
blocking e-mail from href="http://www.annoy.com/
">annoy.com,
a Web site which was
created to send out annoying e-mail. On
the other hand, a lot of spam that gets
sent shows a return addresses from
popular services like AOL.com, Yahoo.com
and Hotmail.com; block those and you’ll
be blocking a lot of legitimate e-mail
as well.

You could filter messages based on the
IP address of the computer from which
they originate. The href="http://www.mail-abuse.org">Mail
Abuse Prevention System
maintains
three Internet blacklists. The most
widely used is the Realtime Blackhole
List (RBL), which lists known
“spamhausen” — computers with
high-speed
Internet connections that have been
known to originate millions of messages
at a time. Many ISPs subscribe to the
RBL and automatically block any e-mail
originating from one of the blacklisted
computers. Other ISPs simply add a mail
header to e-mail that is received from
blacklisted sites, so that customers can
filter on these as well.

One of the most technically
sophisticated filtering systems is
maintained by a company called
Brightmail. href="/tech/view/1999/11/01/sunil_paul/i
ndex.html">Brightmail has set up
e-mail boxes all over the world that
exist solely to receive spam. When these
mailboxes get a message, the message is
sent back to Brightmail’s 24-hour
operations center. A person looks at the
message, identifies it as spam and
constructs a special-purpose filter for
that message. This filter is then
distributed to all of the businesses and
ISPs that subscribe to the Brightmail
service. The theory behind Brightmail is
that spammers tend to send the same
message to millions of different
mailboxes; once a message is identified
as spam, that message won’t bother any
Brightmail customers.

Next Article

Related Stories

Featured Slide Shows

The week in 10 pics

close X
  • Share on Twitter
  • Share on Facebook
  • Thumbnails
  • Fullscreen
  • 1 of 11
  • Lisa Montgomery embraces her nephew Thursday after a tornado tore apart her home in Cleburne, Texas. The twister killed six people and destroyed entire swaths of the North Texas town.
    Credit: AP/LM Otero

  • Jack McMahon, the defense attorney for abortion doctor Kermit Gosnell, speaks outside the Criminal Justice Center in Philadelphia Tuesday. His client was convicted of killing three babies in his clinic, and will serve multiple life sentences.
    Credit: AP/Matt Rourke

  • A photo taken Monday captures Vice President Joe Biden's response to a Milwaukee second-grader's innovative proposal to end America's epidemic of gun violence. This guy!
    Credit: AP/Jenny Aicher

  • Sen. Rand Paul, R-Ky., flanked by a grouper-eyed Michele Bachmann, addresses the IRS' admission that it targeted Tea Party groups in advance of the 2012 election. In an op-ed for CNN Thursday, the Kentucky senator slammed the president for his faux outrage.
    Credit: AP/Molly Riley

  • Ousted IRS chief Steven Miller is sworn in on Capitol Hill Friday. Miller testified before the House Ways and Means Committee on the extra scrutiny the agency gave conservative groups applying for tax-exempt status.
    Credit: AP/J. Scott Applewhite

  • Attorney General Eric Holder pauses as he testifies on Capitol Hill before the House Judiciary Committee Wednesday. Holder is under fire, among other things, for the Justice Department's gathering of phone records at the Associated Press.
    Credit: AP/Carolyn Kaster

  • O.J. Simpson sits during an evidentiary hearing at Clark County District Court in Las Vegas, Nev., Thursday. Simpson, who is currently serving a nine-to-33-year sentence in state prison for armed robbery and kidnapping, is using a writ of habeas corpus to seek a new trial.
    Credit: AP/Las Vegas Review-Journal/Jeff Scheid

  • Major Tom to ground control: On Sunday astronaut Chris Hadfield recorded the first music video from space, a cover of David Bowie's "Space Oddity."
    Credit: AP/NASA/Chris Hadfield

  • When it rains it pours. President Barack Obama speaks during a news conference Thursday with Turkish Prime Minister Recep Tayyip Erdogan, inexplicably inspiring an #umbrellagate Twitter meme.
    Credit: AP/Jacquelyn Martin

  • A smoke plume rises high above a road block at the intersection of County A and Ross Road east of Solon Springs, Wis., Tuesday. No injuries were reported, but the the wildfire caused evacuations across northwestern Wisconsin.
    Credit: AP/The Duluth News-Tribune/Clint Austin

  • Recent Slide Shows

  • Share on Twitter
  • Share on Facebook
  • Thumbnails
  • Fullscreen
  • 1 of 11

Comments

0 Comments

Comment Preview

Your name will appear as username

You may use these HTML tags and attributes: <a href=""> <b> <em> <strong> <i> <blockquote>