Protect your privacy:
Get NordVPN
[73% off 2-year plans, 3 extra months]
- Meshnet Feature for Personal Encrypted Networks: NordVPN offers a unique feature called Meshnet, which allows users to connect their devices directly and securely over the internet. This means you can create your own private, encrypted network for activities like gaming, file sharing, or remote access to your home devices from anywhere in the world.
- RAM-Only Servers for Enhanced Security: Unlike many VPN providers, NordVPN uses RAM-only (diskless) servers. Since these servers run entirely on volatile memory, all data is wiped with every reboot. This ensures that no user data is stored long-term, significantly reducing the risk of data breaches and enhancing overall security.
- Servers in a Former Military Bunker: Some of NordVPN's servers are housed in a former military bunker located deep underground. This unique location provides an extra layer of physical security against natural disasters and unauthorized access, ensuring that the servers are protected in all circumstances.
- NordLynx Protocol with Double NAT Technology: NordVPN developed its own VPN protocol called NordLynx, built around the ultra-fast WireGuard protocol. What sets NordLynx apart is its implementation of a double Network Address Translation (NAT) system, which enhances user privacy without sacrificing speed. This innovative approach solves the potential privacy issues inherent in the standard WireGuard protocol.
- Dark Web Monitor Feature: NordVPN includes a feature known as Dark Web Monitor. This tool actively scans dark web sites and forums for credentials associated with your email address. If it detects that your information has been compromised or appears in any data breaches, it promptly alerts you so you can take necessary actions to protect your accounts.
Last December I wrote about Mark Mumma, who runs a small web hosting company in Oklahoma City and his battle with Omega World Travel a/k/a cruise.com. Mumma lost his CAN SPAM suit agains them in December, but Omega’s countersuit for defamation went to trial last week, and I hear that the jury awarded Omega $2.5 million in damages, which Mumma is not likely to be able to pay.
This may be painted in some circles as a huge defeat for anti-spam activists, but it’s not. Mumma has been what one might call an intemperate litigant, as most impressively documented in an interview with Ken Magill. Press reports say that Omega would have settled with Mumma for an apology and no money, which considering Mumma’s string of losses was a pretty good offer. But he didn’t.
There are plenty of real anti-spam lawsuits going on, with real charges of behavior that is actually prohibited by law. A good example is the case that Project Honeypot filed last week against spammers who’d scraped addresses off their honeypot web pages. I look forward to following its progress.
Sure, Mark Mumma was intemperate, but, well, in terms of right and wrong, I see things pretty clearly: Cruise.com sent Mumma UBE (i.e. spam). Mumma unsubscribed. Cruise.com refused to heed his unsubscribe request, and instead spammed him. They did this because they didn’t like his optoutbydomain.com - based method of unsubscribing, because heeding it would make their ‘marketing’ difficult. It seems to me that Magill writes for the mainsleaze market - the folks that buy off officials to keep their ‘marketing’ from being blanket illegal.
Oh, and John - Time Magazine says the UBE contained bogus header information. CAN SPAM bans false/deceptive headers, so it seems like Cruise.com’s behaviour quite clearly WAS prohibited by law. I guess we’ll have a better idea of the judges’ rationale when their decisions get posted.
Except that’s not what happened. Mumma didn’t unsubscribe, he called them up and ranted at them, refusing to tell them what address he wanted them to stop mailing. CAN SPAM is quite clear that a mailer can provide any reasonable opt-out procedure, and as far as anyone can tell, Cruise.com’s worst sin is that they don’t confirm signups. They don’t have the most fabulous list management practices in the world, but it’s pretty clear that someone, perhaps Mumma himself, specifically forged a subscription in order to stir up trouble. They don’t buy lists, they don’t try to hide.
Re the forged headers, the court dealt with that argument last December. Read my previous message which has a link to the decision. Again, their practices aren’t the absolute best, but if they were the worst we had to deal with, there wouldn’t be a spam problem.
Except that he did file and unsubscribe request. He pointed them to optoutbydomain.com. Seems pretty obvious to me.
From a technical standpoint, unsubscribing by doing this is an unsubscribe request for his email address that wouldn’t be a problem for Cruise.com to heed. Surely you don’t dispute that.
BTW, is it established IF (and if they did, when) cruise.com went through the process described at optoutbydomain.com or not?
When you say “except that’s not what happened,” are you saying he didn’t do that, or that in terms of Right and Wrong, that method of unsubscription is Wrong, or that in terms of the law, it’s not required that cruise.com accept that form of unsubscription? My point was explicitly about the ethics.
As for the headers: I re-read the decision.
A header indicated the mail was from fl-broadcast.net, when that domain had no relationship to the senders. In terms of avoiding spam filters, lying about where the mail from is a common trick. So the judge was wrong to rule that this deception did not meet the “header information that is materially false or materially misleading” standard. I dont’ know if Mumma attempted to make the judge aware that it was material because mail from known bad actors is routinely blocked (which reminds me of the DDoS uribl.com is currently undergoing.)
If every biz in the US did what Cruise.com did, we’d all die of a thousand^4 cuts.
Sorry, I misspoke when I said “If every biz in the US did what Cruise.com did, we’d all die of a thousand^4 cuts”; please strike that.
I’d search my logs for spam from cruise.com, but I’m not sure what to look for (Cruise.com? cruise? omega?) or how to identify what I found as coming from them.
Aw, come on. Imagine for a moment that you are an ESP. Some guy calls you on the phone and rants at you in loonytoon fashion, calling you a spammer, demanding you stop sending him mail, but he won’t tell you his address. On the umpteenth phone call, he points at some web site that has a list of domains and demands that you remove every address in all of those domains. You have no idea where the list came from, and no reason to believe that he speaks for the domains’ owners or users. What would you do? I wouldn’t use Mumma’s list, either.
As the decision said, cruise.com’s name and contact info are all over the mail they send. If you can’t figure out what’s from them, you need better logs.
As I have said many times before, they’re not perfect, but if they were the worst we had to deal with, there wouldn’t be a spam problem.
The best way I can answer that is to mention the mortgage spammer who insisted I’d opted into their spew and went so far as to provide me and their ISP with a piece of paper claiming I’d been to some event in San Diego and showing an email address that looked vaguely like mine on a piece of paper, in handwriting that was nothing like mine.
I’m not sure if you or anyone else who’s credible is saying that what you say I should imagine happening actually happened. You say there’s “no reason to believe that he speaks for the domains’ owners or users.” However, if I try and opt out a domain I don’t own, at optoutbydomain.com, I find that it’s not possible.
This exactly matches what the site says:
I conclude from my testing that I can trust Mumma to run OptOutByDomain.com as it is documented to run more than I would trust someone who thinks that bulk mailers shouldn’t have to verify the email addresses to which they send bulk mail. I am aware of a concerted effort (coordinated spin) to make unverified opt-in respectable, e.g. see http://groups.google.com/group/...
So what would I do? I’d use the list.
So it seems you concede he did indeed unsubscribe, but his method is Wrong because his verifiably verified-opt-in list is somehow less trustworthy than an UNverified opt-in list. Well, I disagree.
I would think this would be obvious, but in the U.S., courts are charged with enforcing actual laws, rather than imaginary laws that we might wish had been passed instead.
The highly imperfect CAN SPAM act says that mailers have to provide a working opt-out process. It does not say that recipients can invent an opt-out process and demand that mailers use it. Mumma, for whatever reason, refused to do what the law said and instead did all sorts of other stuff. He has only himself to blame for losing this silly lawsuit.
Incidentally, it is so 1999 to insist that signup confirmation would solve the world’s spam problems. There are plenty of ways to end up with a dirty list even with every address legitimately confirmed, and there are plenty of unconfirmed lists with vanishingly low error rates, as low or lower than COI lists. (Do you know anyone else who gets mail from cruise.com without signing up for it? The only person I know in that position is Ken Magill, and him only when someone on a cable modem in Oklahoma City signed him up a few hours after his infamous interview with Mumma.)
As I keep saying, if our goal is to get rid of spam, we need to work on that, and not to get distracted with non-problems.
Yes, CAN SPAM act says that mailers have to provide a working opt-out process. CAN SPAM does not say that recipients can’t invent an opt-out process and demand that mailers use it. It is silent on that topic. IMO, Mummas opt-out process is quite reasonable and legal, but cruise.com didn’t follow it, AFAIK. You think it’s unreasonable. Does the law provide statutory penalties if it’s not followed? This case says no.
But there’s a lot we agree on: Irrespective of Right and Wrong, the law in part of the US is now clear: Only quite blatant spam is considered illegal by the court. The good news is that still only a small fraction of spam is now not blatantly illegal. The bad news is more of it will morph to be legal.