-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Kelson wrote: > decoder wrote: >> basically, it is a per recipient hash generation that assures that a >> specific amount of time was required to compute this hash per >> recipient. Spammers don't have this time, they send thousands of mails >> per minute. > > A great solution... for 2002. > > These days, when most spam is sent through zombies, the spammer > isn't using their own CPU time, they're using some random person's > home CPU. They can send the same amount of spam in the same amount > of time *and* add the hashcash signatures just by using a bigger > botnet. > - From the hashcash FAQ:
"/But won't spammers steal CPU time?/ Spammers already compromise security on many users machines to make so-called "Zombie" armies to send spam from. However currently the rate at which spammers can send mail on a zombie machine is limited purely by the speed of those machine's internet links. A typical DSL user might be able to send 25 unique messages per second each of size 1KB (assumes 256kbit uplink). Or many more messages per second if the messages are delivered to multiple users at once (using multiple Cc or Bcc recipients). Even a 20-bit stamp takes 1/2 second per recipient on the highest end pc hardware at time of writing. This would slow spammers down by a factor of 10-100 or more per compromised machine (depending on whether the messages sent are sent individually or to many users at once)." Chris -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.5 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFE418RJQIKXnJyDxURAvMsAKCyydpUE6Nc6xhYeJQ7a8muIGb/LACgnsQ7 l6oV6FjcyLD4Nwld0QOJRdw= =syy5 -----END PGP SIGNATURE-----