- few users would be able to reliably and accurately determine _who_ was
infected, and there'd be far more false positives than true positives.
And even blocking only the true positive addresses, i.e. only the ones that
have really sent spam, is likely to cause a lot of false positive emails.
I do agree that spam sent from friends' compromised accounts is a serious
problem (and not just for email: also on Facebook, Twitter etc.). Not because
of their quantity but because they are less likely to be blocked by spam
filters and more likely to be believed to be genuine.
However, effectively blocking someone from sending email sounds like a cure
worse than the disease.
Also, I know of cases where people who seemed to adhere to all the good
practises had their accounts compromised. I don't see much educational value in
telling people that they did something wrong, we're not sure what but we hope
the punishment will stop them from doing it again.
Martijn.
Virus Bulletin Ltd, The Pentagon, Abingdon, OX14 3YP, England.
Company Reg No: 2388295. VAT Reg No: GB 532 5598 33.
_______________________________________________
Asrg mailing list
Asrg(_at_)irtf(_dot_)org
http://www.irtf.org/mailman/listinfo/asrg