At 02:48 PM 4/15/2003 -0600, John Fenley wrote:
From: Brad Spencer <brad(_dot_)madison(_at_)mail(_dot_)tds(_dot_)net>
Subject: [asrg] 6. proposal of solution: Using Relay Honeypots to Reduce
Spam
[I cut tons of stuff out of this whole thing]
ASRG can anticipate that some spammers, at least for a while, will resist
the effort to end spam and will attempt to overcome the ASRG methods.
While the ASRG proposal should be comprehensive enough to anticipate such
moves the details of such moves cannot be anticipated.
There are current ways to defeat honeypots.
1. using a test address to detect honeypots.(there are an infinite number
of addresses available, they will not run out.)
Prove that.
You cannot.
If you do the simplest analysis you will see the flaw in what you say.
You make an assumption that isn't true or should not be true. Your
objection depends on that assumption.
If freemail providers filter against spam then there is a second mechanism
by which the spammers will not see the tests they send to their plethora of
dropbox addresses. How does the spammer distinguish between not receiving
the spam because it was trapped by a honeypot and because it was blocked by
the freemail provider?
Only if the freemail provider tells the spammer the spam was blocked does
the spammer know. Even if the freemail provider does that a collaboration
between the honeypot operator and the freemail provider leaves the spammer
uninformed.
_______________________________________________
Asrg mailing list
Asrg(_at_)ietf(_dot_)org
https://www1.ietf.org/mailman/listinfo/asrg