Soapy Sam said:
You clearly know a great deal about this. Why not start here by giving us at JREF a symposium on the facts of the matter and what we can do to protect ourselves? Education has to start somewhere.
Symposia are bit beyond my time constraints, at the moment --- perhaps a digest instead?
As evildave noted, there are tools that block/filter spam, but they can throw the baby out with the bathwater every now and then, and are not possible to use in every case. Filters have gotten markedly better in the last couple of years, but they are nowhere near perfect. When you are dealing with large organizations, even a few lost "important" emaills can cause major headaches -- particularly when dealing with business clients who now rely on email with all the confidence (perhaps misplaced) of snail mail.
In small business settings where I provide email server implementation, I steer clients toward a solution that works at the server. My favorite is SpamAssassin, which uses a clever ranking system to "sniff out" spam. It reads all mail as it enters the server, and can be configured to park the mail in designated area, send it on to the recipient with the title modified to include a {SPAM} tag, or simply deleted. On my own business server, I have come to trust it so much, I simply have it delete what it thinks is spam --- it hasn't failed me yet.
You seem to be doing all you can already as a conscientious user -- I tip my hat. The measures you take are top notch -- particularly the "junk account".
You would be amazed at the paranoia some people experience when you suggest intercepting their email --- they'd rather get 200 Viagra come-ons per day than risk missing one important email. Also, believe it or not, many people actually enjoy getting some advertising sent to them, and spam filters can't do much to discriminate between the come-ons you
want to view and those you don't. For these people, filtering becomes an unworkable affair. I'd love to think that spam could be solved by simply filtering it at the endpoints, but I don't believe that covers the entire range of problems it causes.
Since spammers are now a sophisticated criminal enterprise, they need more aggressive countermeasures. The fact is, spamming reaches a lot of people, and allows them to make a lot of money -- they won't sit still while people try to thwart them. Email addresses are gold to these people, and they go great lengths to procure new ones -- even breaking into databases and stealing them. If you have an email accout that doesn't get much spam, they would absolutely salivate over getting your address. Eventually, they very well might. The real key to ultimately stopping the criminal practice is enforcement.
I really applaud the State of Virgina for implementing tough and sensible laws, and backing them up with a stiff sentence. No doubt it will make the underground more clever in the short run, but hopefully we can make the business unprofitable in time. At the very least, they can no longer operate in a realm of ambiguous law and ultimate impunity.
Geez, I can geek-chat about this crap all day...but duty calls
