ietf-asrg
[Top] [All Lists]

Re: [Asrg] A CAPTCHA that automatically detects and neutralizes attacks.

2005-05-31 14:20:47
Robert Raisch <info(_at_)raisch(_dot_)com> wrote:
Michael Kaplan wrote:

There is no way for a spammer to determine who is on your whitelist.  

Other than say, loading your computer with malware and firing off your 
whitelist to other, malware infected SPAM-spewing zombies?

If your computer is infected, wouldn't it be easier to have the
malware drop the spam (not SPAM, that's Hormel's product) directly
into your inbox without worrying about any filters (such as your
ISP's)?  For that matter, why bother with mail at all; why not just
show it to you via popups?

Oh, some malware does that already.

Admittedly, your address book is a list of victims who likely have
_you_ whitelisted; but again, having the malware send directly from
your computer works even better, because then the spam's headers all
match the real mail you send.

Seth

_______________________________________________
Asrg mailing list
Asrg(_at_)ietf(_dot_)org
https://www1.ietf.org/mailman/listinfo/asrg