Hacker News Reader

Comment by eridius | Hacker News Reader

They may be much older, but if your Google address is @gmail then I guarantee you it gets far more spam, just from scattershot spammers.

As an anecdotal example, I have an email address that's been strewn about the internet for almost 2 decades. It's currently hosted on Google Apps, but it has a non-Google domain. I get a spam message in my inbox maybe once every couple of months.

I also have a gmail address. I never use the thing. But it gets inundated with spam, and every month or so when I go look at it I have to clean lots of junk out of the inbox.

Since they're both hosted by Google, I'm forced to conclude that the gmail one gets many orders of magnitude more spam merely by virtue of ending in @gmail.com.

View on HN

It's not an @gmail.com address.

And why do people keep making excuses for Google?

Google simply isn't very good at filtering spam, something most regular ISP's can handle perfectly well, and the lack of options in Gmail and Groups clearly show that they don't care very much about it either.

Fun fact, Google doesn't play nicely with ESPs either. Most mail providers (Yahoo, Hotmail, etc) use a feedback loop when you report spam. After you mash the spam button, the ESP that sent the mail is notified that a particular email was flagged as spam.

This allows the ESP to curtail spam problems on their end (for example, Mailchimp heavily throttles your emails or outright bans you if your spam rate creeps past a very low percentage). It's an all-around good thing for the ecosystem, with the exception perhaps of publishers that get the unlucky "spam instead of unsubscribe" user action.

But Gmail does not participate in this loop. They don't tell any ESP that a user has marked an email as spam...that data all stays in house. Why? Hell if I know - perhaps they don't want to tip off spammers to being detected. On the flipside, reputable ESPs get less leverage on spammers in their network.

because it would allow spam houses to train their software to avoid the Google spam filter. No feedback loop makes it harder to train (not impossible, just harder)

My experience has been the opposite. I get very few spams per month in gmail, but other mail providers I've used had done far worse spam filtering (walla mail, yahoo mail, netvision).

Every day I get hit by about 100k connections for email to my domain (0x58.com), the spammers hit <random>@0x58.com. So far they haven't hit a single actual email address that exists.

Out of those 100k connections, one or two emails come through to my valid email account. So yes, scattershot makes sense, but from looking at my logs, unless your account includes a lot of numbers you aren't going to get hit :P

Reply on news.ycombinator.com