funsec mailing list archives

Re: AOL Charged With Blocking Opponents' e-Mail


From: "Andre Ludwig" <andre.ludwig () gmail com>
Date: Fri, 14 Apr 2006 17:35:37 -0400

I think you are taking this a bit to seriously man.. your blog rant is
rather amusing...

Just curious but why so much emotion invested in goodmail and what
people say or think about it?


And i found this interesting

***snip from goodmail site***
At this time, Goodmail only accredits the company that is responsible
for the content of the message. Email Service Providers interested in
working with Goodmail Systems should visit Partners and inquire about
becoming a partner.
****/snip***

Sweet so i can still use my bitchin ass botnet to spam! (just kidding of course)

Here are the req's to be able to pay someone else to send your
spa..err electronic marketing messages to people.

***snip from site***
    *  have at least one year of business history, as verified by a
commercial identity verification service
    * have business headquarters located in the United States or Canada
    * if a non-profit organization, verify non-profit status as a
501(c)(3), government agency, or educational institution
    * have a six-month sending history using a dedicated IP addresses
to transmit messages, even if sending email through an email service
provider (ESP), and must have at least a 6 month mailing history from
that IP
    * apply for the AOL whitelist program--this is highly
recommended--any organziation can apply so that AOL will have a
history of your organization's sending behavior
    * have a prior complaint threshold within bounds established by
Goodmail with partner ISPs
    * be able to comply with Goodmail's Acceptable Use and Security
Policy including that CertifiedEmail will be used only for
permission-based messages to existing members or customers; no
prospecting or member acquisition campaign
    * Agree to and sign the Token Purchase Agreement
***/snip***

I can think of ways of subverting each and every requirement.  Can you?

Again just looking into it with the least amount of effort that i can,
the whole system seems like a brilliant business plan that was fueled
by a half competent sales team who talked AOL into a new revenue
stream.   Its sort of like the QoS debate going on in the data/telecom
sector right now (in a way).

Dre


On 4/14/06, Larry Seltzer <larry () larryseltzer com> wrote:
Of course they'll make mistakes, so what? AOL makes mistakes with their spam
filtering, does that mean they should do spam filtering? It's precisely
*because* mistakes with spam filtering are inevitable that accreditation
services are useful.

An accreditation service lives entirely on their reputation and AOL sinks or
swims on that reputation too, because the certified messages clearly have a
special status. If they're inappropriate message AOL will be barraged by
complaints and that costs them money and customers. The amount of money they
get from Goodmail customers will never overcome the support costs if it's
implemented badly.

I don't know what Choicepoint's validation practices were and perhaps they
weren't public. Goodmail's are and you can judge them for yourself:
http://www.goodmailsystems.com/senders/qualifications.php

What really burns me up about this is that there's no rational reading of
the situation in which the amount of spam getting to AOL users increases or
decreases (unless Goodmail is wildly incompetent or corrupt, neither of
which I'm going to assume). Goodmail is not supposed to decrease spam, it's
supposed to decrease false positives. That's all.

Larry Seltzer
eWEEK.com Security Center Editor
http://security.eweek.com/
http://blog.eweek.com/blogs/larry%5Fseltzer/
Contributing Editor, PC Magazine
larryseltzer () ziffdavis com


_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.


_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.


Current thread: