I was quoted 'above the fold' in a recent Information Week article, talking about spam-distributed botnets being a vector for real-world terrorist attacks. A few minutes later a piece on the .ORG TLD being under attack crossed the wires.

In the interests of clarity, I do work for Return Path but like this consumer study quite well anyway - it basically says that consumers know what they are doing when they hit the 'This is Spam' button at freemail sites. For a long time there has been a faint hope held by marketers that their stuff isn't being regarded as spam, those hopes seem dashed now. Go consumers!

N.B. CAUCE Canada and CAUCE participated in the development of these documents.

Best Practices Suggestions Document

Building upon the Definitions and Risk Model documents, the Best Practices document aims to expand past defining what behaviors and consent factors will currently make software potentially unwanted and to focus upon making the marketplace better. This document highlights the sorts of technological behaviors that limit the negative impact of potentially unwanted technologies.

HTML or PDF

Comments can be made at http://www.antispywarecoalition.org/comments/ or by sending email to asc_comments@cdt.org.

I recently published a couple of personal and business blog entries that may be of interest to the CAUCE community:

Trench Warfare in the Age of The Laser-guided Missile - a clarion call to de-silo and take the offensive
and
How the Sender Community Can Help Fight Spam

I encourage people to take a look at the following article by fellow Federal Task Force on Spam member Michael Geist:

Privacy breaches expose flaws in law
January 22, 2007
MICHAEL GEIST
http://www.thestar.com/Business/article/173418
-or-
http://www.michaelgeist.ca/content/view/1626/159/

Privacy took centre stage in Canada late last week as TJX Cos., the parent company of retail giants Winners and HomeSense, disclosed that as many as 2 million Canadian credit cards may have been accessed by computer hackers. Fewer than 24 hours later, the CIBC revealed that account information for 470,000 customers of its subsidiary Talvest Mutual Funds had been lost when a computer file went missing while in transit between company offices.

These two incidents, which follow a steady stream of similar security breaches in the United States, highlight the fragility of sensitive, personal information that is entrusted to Canadian businesses as well as the inadequacy of current Canadian privacy legislation.

Business groups have cautioned against privacy law reforms, yet as the risk of identity theft grows, the calls for change are likely to become more vocal.

In reply to a request for support coming from the co-chairs of the Messaging Anti-abuse Working Group's Senders Subcommittee for their draft Best Practices document, CAUCE Canada issued the following statement:

To whom it may concern,

Having reviewed the document at http://www.maawg.org/about/MAAWG_Senders_BCP, our comments are as follows:

We feel this additional point under Section 1 b) would be appropriate;

iii. Additional consideration must be reviewed for the secondary use of personally identifiable information, when considering contact outside of the original scope of consent provided by the email user,
while remaining in line with item 1 a) for each level of consent.

Additionally, we would be interested in co-sponsoring the document, pending final review of the edits made during the public consultation process.

Congratulations on an excellent piece of work.

Yours truly,

Neil Schwartzman
Chair, Board of Directors
CAUCE Canada: The Canadian Coalition Against Unsolicited Commercial Email