Unfortunately, authenticating the sender only solves part of the problem of junk mail.

Many commercial enterprises have web sites where interested customers can expressly request information by phone, e-mail, or US mail.

Unfortunately, these sites are easily exploited to generate spam by proxy, to mailbomb targetted recipients or to disrupt legitimate business enterprises.

It looks like there may already be hacker scripts in circulation to excercise this insidious exploit.

Recently, one such malicious hacker posted this boast on a public web forum:

"I looked up your phone number and address and signed up for hundreds of free offers in your name. You should be receiving a whole lot of junk email, early morning phone calls, and advertisements in the mail."

The commercial enterprises so exploited believed they were following up sincere inquiries in good faith.

In the above cited case, the hacker failed to conceal his identity and became the subject of multiple investigations by responsible authorities.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/articles/11388/33712#33712