Famous Hacker Uses ChallengeResponses 4249

DOT net , and To: alanconnor AT earthlink DOT net , how does your C-R system hold up?

If you're using Earthlink's "Spam Blocker", then it's not much good, is it? In fact, set to its highest level, any domain listed in your address book will be allowed through ... even messages sent from compromised systems that happen to send mail via one of the domains in your address book by chance. Perhaps you don't allow addresses to accumulate in your address book? Convenient. Now everyone needs to send you two messages for one every time. That's a great solution! Double the traffic for none of the benefit!

A better (and currently supported) technique to stop spam would be for more servers to insist their users use a stronger AUTH method for SENDING mail. Just as with the USPS, if it doesn't get into the system, it can't be delivered.

The biggest issue here is education, and not setting some kind of faulty trap on the receiving end. Besides, I've never had a ('Nix) program so easy to crash as Spambuttbuttin. Just hit it with a few hundred messages in a couple of seconds, and BAM ... no more mail until it's restarted.

(You should be peppering your comments with "IMHO" or something equally cute so we know when you're offering an opinion.) IMHO.