Carlos E. R. wrote:
If IP v6 were in general use, all IPs could be fixed for the same price. ISPs could assign an IP to a client or to a phone number, and make identification easier. After all, fighting spam depends a lot on traceability.
I don't think that. Traceability is one part, but I think that money is the most important part. I will analyze money below, but I will first argue about IPv6 and privacy. There is a proposal RFC3041 (http://www.rfc-editor.org/rfc/rfc3041.txt) tries to bring privacy back to IPv6 world. It is still in phase of a "Proposed Standard" (IPv6 still does not use it) but I would prefer to consider it. I am not against dynamic addresses, which in some way, "protect" end user privacy. They are already (IPv4) extremely threatened with non-directed attacks and get hundreds of viruses/attacks every day. The people I know that connects their windows computers permanently to Internet have to reinstall them at least twice a year due to adware, worms, etc. Only with massive attacks "harvesting" vulnerabilities, but the risk of a "directed" attack might be much more serious. Don't think of a company that can spend money in services and professionals to get "secure" internet services. Think of end users exposed and traceable. I don't think that you would really like that your company's accountant personal home IP address is public to your competitors.... Internet security is not mature enough for this (will it ever be?). For my personal use, I prefer to have dynamic addresses than static ones, even though I have nothing to hide, I am not a spammer and there is no big secret in my home PC. I am pretty sure that if you explain the traceability risk to the accountant he will unplug the computer with sensitive information from Internet :-) Even if you are unable to hack his system, you can distributed-DoS-attack his address the day before the tax declaration and make the company get a nice fee ;-) Obviously that if the application used requires a M$ Window$ OS, then the situation might get even better... In the end, I think that we have spam because people need spam and spammers can get money out of sending spam! Lets forget about worms, sober and other threats and think ONLY in man-created spams (lets say selling trips, insurances, degrees, etc). They spend money and time building Internet sites, registerig domains, buying thousands of e-mail addresses and sending the spam because people READ spam and BUY from spam. Spam is the commercials of the communication industry "moved" into e-mail messages. It is the same as ads in magazines or TV. Take any computer magazine and think of the surface dedicated (spent/wasted up to you) to advertising..... you read more advertisements than information. We all have to see letters by the roads selling products.... visual pollution? hardware spam? Call it the way you like it, but it is the same thing. Scale, means and impact might not be the same but it happens. Why do I have to "show" (advertise) that my new T-shirt is from "Lacoste", "Nike", "Polo" or whatever? Why it is every day more and more difficult (impossible!?) to get clothes, nice ones, but without becoming a walking advertisement? Check your own clothes and see if even your own person is not used for selling and advertising.... Check any sport and you will see that there is no room for more brands! There are other nasty and "spammy" acts like the footers inserted by ISP on the bottom of e-mails. I have even seen some in this list too! I should be not legal that they alter the content of our e-mail, for whatever reason! I am not saying that about organizations that put footers to e-mails from people exchanging information outside, but for public ISP altering the content to put advertisements. We are discussing spam because spam allows any moron to send it and to get in the mirror of any F1 car costs millons. But I believe is the same thing. In the end, I think that the day people stop buying that, spam will desapair alone. In the mean time, it is a very challenging race betwen spam-creators and spam-fighters..... The fact is: spam sells and produces money.
In fact, in Spain, dynamic IPs can be traced to the phone that made the connection, but you probably need a court order to get that info.
Sure! And the good thing of that is that there are warranties! There is a legal process that assures privacy and if there is a real reason, then actions can be taken. I support that way of working, and not that someone, because he believes an IP is dynamic simply drops it. As some one very polite said "you have to count false positives".
And yes, the courts are acting against some spammers, but sometimes getting it all wrong: I read in the news paper about a businessman being sued because he sent an email to half a dozen people, and one of them said it was unsolicited email and sued him (the mail addresses were printed on business cards exchanged at a business fair). Weird.
I am hope that in the end of the legal process, the suer will have to pay all the expenses :-)