Wednesday 1 August 2007

Botnet spam

Economically speaking, I don't believe the fight against spam is going to be won at the source. The cost of sending spam via a compromised computer is zero, and the cost of compromising more computers into the botnet is zero after the first one (since compromised machines also seek others to compromise). So as long as there's just one sucker in the world who is desperate enough to buy from a spammer, the spammer's investment has paid off.

I thought about proposing some kind of "honeypot" scheme where millions of fake or virtual computers are compromised and discarded instead of real machines. That might reduce the number of real bot computers slightly, but if real machines are still getting cracked, the problem remains.

Mokalus of Borg

PS - I don't have any answers, I guess.
PPS - Except that everyone needs to stop responding to spam.

No comments: