If he told them
everything -- like where all the money went -- then restitution would be a better penalty. It gets to a certain point where the length of the sentence is just so long it's meaningless as a deterrent. Would Ralsky really be less likely to spam if the penalty were 20 years instead of 10 years? (And seriously -- how many people would you have to rape to get a 25 year sentence??)
The only thing that really influences their thinking is the likelihood of getting sent to prison at all. None of them think it would ever happen to themselves, and for the most part, they've been right. I'd rather see individual criminals get less time (with long periods of restriction on their computer access after release), but put more people like him in prison so there's a real expectation that they will be caught.
As we pointed out in our
open letter to the FTC chairman, the criminals are just dumping the evidence in our laps, because they don't see anyone actually acting on it.