<HTML dir=ltr><HEAD><TITLE>[Asrg] Email Postage (was Re: FeedBack loops)</TITLE>
<META http-equiv=Content-Type content="text/html; charset=unicode">
<STYLE type=text/css>p { margin: 0; }</STYLE>
<META content="MSHTML 6.00.6001.18148" name=GENERATOR></HEAD>
<BODY>
<DIV id=idOWAReplyText76931 dir=ltr>
<DIV dir=ltr><FONT face=Arial color=#000000 size=2>All parts of the system must be accountable, but that need not be government and the penalties need not be financial.</FONT></DIV>
<DIV dir=ltr><FONT face=Arial size=2></FONT> </DIV>
<DIV dir=ltr><FONT face=Arial size=2>Consider what happens in a medium sized organization when a mid level manager hits the end of the quarter, is behind on quota and sends out a spamming run that nets $500K in additional earnings. Let us consider the following two penalities:</FONT></DIV>
<DIV dir=ltr><FONT face=Arial size=2></FONT> </DIV>
<DIV dir=ltr><FONT face=Arial size=2>A) Company is fined $50K through immediate forfeiture of a performance bond that was posted.</FONT></DIV>
<DIV dir=ltr><FONT face=Arial size=2>B) Other companies stop accepting email from the company</FONT></DIV>
<DIV dir=ltr><FONT face=Arial size=2></FONT> </DIV>
<DIV dir=ltr><FONT face=Arial size=2>Penalty A is not likely to be effective. The manager might get a slap on the wrist but they brought in $450K net. Its not a close call to turn a blind eye. Senior management is not going to ever know it happened.</FONT></DIV>
<DIV dir=ltr><FONT face=Arial size=2></FONT> </DIV>
<DIV dir=ltr><FONT face=Arial size=2>Penalty B has immediate effect and visibility right the way up the management chain. I would say that it was likely to be rather more effective.</FONT></DIV>
<DIV dir=ltr><FONT face=Arial size=2></FONT> </DIV>
<DIV dir=ltr><FONT face=Arial size=2></FONT> </DIV>
<DIV dir=ltr><FONT face=Arial size=2>Accountability = Authentication + Accreditation + Consequences</FONT></DIV>
<DIV dir=ltr><FONT face=Arial size=2></FONT> </DIV>
<DIV dir=ltr><FONT face=Arial size=2>I make this case in my book on stopping Internet crime, the dotCrime Manifesto. I also compare the development of solutions to the spam problem to the problem of 'finding the longitude'</FONT></DIV></DIV>
<DIV dir=ltr><BR>
<HR tabIndex=-1>
<FONT face=Tahoma size=2><B>From:</B> asrg-bounces@irtf.org on behalf of Franck Martin<BR><B>Sent:</B> Thu 11/13/2008 3:31 PM<BR><B>To:</B> Anti-Spam Research Group - IRTF<BR><B>Subject:</B> Re: [Asrg] Email Postage (was Re: FeedBack loops)<BR></FONT><BR></DIV>
<DIV>
<DIV style="FONT-SIZE: 10pt; COLOR: #000000; FONT-FAMILY: Arial">And penalize inappropriate use, is generally a government function. If there is success in shutting down botnets, is because gov resources are affected to the problem.<BR><BR>I think feedback loops are for the good guys. The bad guys will not play by any rule.<BR><BR>----- Original Message -----<BR>From: "Phillip Hallam-Baker" <pbaker@verisign.com><BR>To: "Anti-Spam Research Group - IRTF" <asrg@irtf.org>, "Anti-Spam Research Group - IRTF" <asrg@irtf.org><BR>Sent: Friday, 14 November, 2008 8:16:49 AM (GMT+1200) Auto-Detected<BR>Subject: Re: [Asrg] Email Postage (was Re: FeedBack loops)<BR><BR>
<DIV id=idOWAReplyText41804 dir=ltr>
<DIV dir=ltr><FONT face=Arial color=#000000 size=2>Actually the underlying intellectual conceit of market fundamentalism is that the market is a perfectly tuned feedback loop.</FONT></DIV></DIV>
<DIV dir=ltr> </DIV>
<DIV dir=ltr>We do not need to charge for inappropriate use of email, we only need to penalize inappropriate use.<BR></DIV><BR></DIV></DIV></BODY></HTML>