http://en.wikipedia.org/wiki/Talk:Callback_verification

One does have to know how to do it right. I will agree that if you block ONLY on SAV you’ll get false positives. But when you combine SAV with other technologies it is a very strong indicator of spam.

“It is difficult to get a man to understand something when his salary depends upon his not understanding it.”

– Upton Sinclair

The fact is, spammers use the names and addresses on their ‘good-list’ to pose as the sender. There is no debate there, and to refute it would be silly. Updating the viral list is simple, because they don’t push the updates, the bots pull them as needed. As for the quality of their lists… well the market isn’t exactly tops on the regulations list, so yeah, there’s going to be a lot of bad addresses in their lists. There’s a whole industry around creating and updating these ‘good-lists’.

So, sorry, still wrong… :P

Although there are some sender addresses that are good the vast majority are not.

I’m sorry but you ruined your credibility by saying: “You also assert that spammers could use real email addresses to defeat SAV. If this were true then they would be doing it. But the reality is that they aren’t. One of the reasons they aren’t is because most spam comes from botnets and the overhead of managing and distributing such lists to virus botnets would make the botnet less effective. In reality, spammers don’t have lists of good recipients let alone good senders.”

Spammers definitely, without a shadow of a doubt, use their good-lists as sender addresses. Get a hotmail account and start registering it on every web site you find. Before long you’ll start to get email from real, valid addresses, and if you’re patient enough, you’ll eventually get one from yourself, or a bounce back as though you sent a spam message.

Just because you believe something, doesn’t make it true. In this case, you’re dead-wrong. Sorry…