Conversation

Notices

1. Embed this notice
   Royce Williams (tychotithonus@infosec.exchange)'s status on Saturday, 18-Jan-2025 11:24:20 JST Royce Williams

   • Bill
   • Ryan Castellucci :nonbinary_flag:

   @drscriptt

   I'm interested in minimizing ecosystem harm / impact, even if I'm not the direct / attributable source. In the worst case, if I know that an upstream hop is going to generate backscatter if I reject in my DATA phase, and I know with high confidence that the content is spam, and I know that that upstream hop is not likely to change their ways any time soon ... it's a net lessening of ecosystem harm if I silently discard, rather than indirectly "trigger" predictable backscatter.

   Yes, I know this is idealistic. :D

   @ryanc @Sempf

   • Embed this notice
     Ryan Castellucci :nonbinary_flag: (ryanc@infosec.exchange)'s status on Saturday, 18-Jan-2025 11:24:19 JST Ryan Castellucci :nonbinary_flag:

     in reply to

     • Bill

     @tychotithonus @drscriptt @Sempf I think we can agree this is a case of choosing amongst bad options, but don't think either of us are going to change our mind about which is worse.

     Besides, I'm the one who patched their mail server to allow for customized fake rejects.

   • Embed this notice
     cR0w :cascadia: (cr0w@infosec.exchange)'s status on Saturday, 18-Jan-2025 11:28:40 JST cR0w :cascadia:

     in reply to

     • Bill
     • Ryan Castellucci :nonbinary_flag:

     @ryanc @tychotithonus @drscriptt @Sempf

     Me: I run my own mail server. I know what I'm doing.

     Me later: reads this thread

     Me now: Okay, y'all are awesome and I'm a noob again. And that's so cool.

   • Embed this notice
     Royce Williams (tychotithonus@infosec.exchange)'s status on Saturday, 18-Jan-2025 12:19:23 JST Royce Williams

     in reply to

     • Bill
     • Ryan Castellucci :nonbinary_flag:

     @ryanc
     I think we agree more than we disagree! Especially when it it is probably better, but the ecosystem for the systems causing harm to be the explicit source of that harm, so that the ecosystem will start to respond to it appropriately. So I'm basically arguing myself out of silent discard even in my idealistic case!
     @drscriptt @Sempf