I think part of the problem is with the enforcement. The punishments may well be out of proportion to the crime that the conviction was for. The problem is that it's taking a huge amount of time and effort in order to make cases against only a small minority of spammers, and for a small proportion of the offenses they have committed. You mention that the spammer got convicted for a month's worth of spam - that may have been what they got him for but there's not much doubt that he's done that each and every month for a number of years.

9 years may well be excessive, but on the other hand it wouldn't be a good if spammers decide that they're prepared to risk spending a few months in jail if they are able to live free as millionaires before and after.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/columns/287/29706#29706