Re: C/R (was: Re: *** bluber *** Re: Male xxxxxx enhancement formula^)
"Karsten M. Self" <kmself@ix.netcom.com> writes:
> on Mon, May 30, 2005 at 01:34:22AM -0700, Ian Greenhoe (ihgreenman@gmail.com) wrote:
>> On Mon, 2005-05-30 at 16:34 +1200, Chris Bannister wrote:
>> > "Challenge-Response system is based on false assumption that sender's
>> > address can be used for authentication. It cannot and thus any C-R
>> > system will contribute nothing else by amplifying the spam problem."
>>
>> And the hidden (and unproven) assumption in this statement is that
>> spammers use real email addresses that have been validated. I have seen
>> worms do this. I have never seen spammers do this.
>
> Well, given that I wrote the false assumption observation, *and* I've
> received challenges based on spoofed spam and viral mail, I'd say the
> assumption is neither hidden nor unproven.
I even recieve spam mails with myself as sender (and no, I'm not
infected or sending that spam at all) directed to myself or to
mailinglists. Happens all the time.
MfG
Goswin
Reply to: