Spam is back with a vengeance

Found on Physorg on Wednesday, 06 December 2006
Browse Internet

A study released last month by the security firm Postini found that unwanted messages now account for 91 percent of all e-mail, and over the past 12 months the daily volume of spam rose by 120 percent.

A separate report by California-based IronPort Systems concluded that worldwide spam volumes increased from 31 billion messages daily in October 2005 to 61 billion messages per day in October 2006.

Image spam reached a new high of 25 percent of total spam volume in October 2006, an increase of 421 percent in a year, according to IronPort.

"Spammers are using advanced mathematical and graphical techniques like random modification of image pixels and dynamic construction of images from multiple components to bypass spam filtering tools," he said.

Somehow, it's amazing how many total idiots are out there, falling for spam. Everybody who lost money because of phoney stocks or thanks to a 419er deserves that. The image spam is, for me, fairly easy to stop. Simply reject all emails with an gif/jpg attachment below 100kB. Additionally, servers listed at one of the bigger blocklists are rejected too, even if now and then a legitimate email might be blocked that way. I rarely use emails anymore; instant messaging is more convenient.

Spam: now made in China

Found on The Register on Sunday, 03 December 2006
Browse Internet

The politics of unwanted email is changing with China set to overtake the US any day now as the originator of most Irish inbox clutter.

Figures for November from Irish email monitoring firm IE Internet show that although the US is still the world leader with 27 per cent of dodgy emails originating there, this is a huge drop on October's figure of 48 per cent.

China is now second in the monthly world rankings of spam-producing countries, followed by Britain (21 per cent), France (15 per cent), India (seven per cent), and Turkey (four per cent). South Korea doesn't figure in the top six global spam machines for the first time in several months.

Meanwhile, as the world's spam merchants have been getting ready for their Christmas onslaught, virus writers have been busy too.

Two new viruses made it into the top five this month: W32/Warezov and W32/Tricky-Malware. And both are spreading fast, according to IE Internet.

Actually, it would help a lot if spam comes from China. It's easier to block the whole country than scanning every incoming email.

Russia Agrees To Shut Down AllofMP3.com

Found on TechCrunch on Tuesday, 28 November 2006
Browse Internet

An official document posted to Digg today summarizes an agreement between the U.S. and Russia in which Russia has agreed to close down AllofMP3.com, and any sites that "permit illegal distribution of music and other copyright works."

"This agreement sets the stage for further progress on IPR issues in Russia through the next phase of multilateral negotiations, during which the United States and other WTO members will examine Russia's IPR regime," states the document.

The document specifically names AllofMP3.com as an example of the types of Web sites that they will shut down. We contacted AllofMP3.com and the company sent us an official statement stating their legality. It says that the company has offered to remove illegal music at the copyright holders' requests.

Just because the music industry doesn't want to come up with a cheaper service, they pressure governments to take part in their crusade. I really hope AllofMP3 decides to re-open in Antigua and deliver a one-finger salute.

Easy Throw-Away Email Addresses

Found on Slashdot on Monday, 27 November 2006
Browse Internet

A fellow teaching himself Seam has come up with a clever Web app called 10 Minute Mail. It gives you a valid e-mail address — instantly — for use in registering at Web sites. Ten minutes later (more if you ask), it's gone. You can read mail and reply to it from the page where you create the throw-away address. Limited utility, yes, but easy and free.

That's as new and clever as baked potatoes. I've been using SpamGourmet for over 3.5 years now without any problems; and if the site you're signing up with behaves, your (up to) 9 emails will last for years. Apart from that, most people probably have a bunch of several free email accounts too to keep off spam from your main account.

Study finds Web isn't teeming with sex

Found on Mercury News on Tuesday, 14 November 2006
Browse Internet

A confidential analysis of Internet search queries and a random sample of Web pages taken from Google and Micrsoft's giant Internet indexes showed that only about 1 percent of all Web pages contain sexually explicit material.

The ACLU said the analysis, by Philip B. Stark, a professor of statistics at the University of California-Berkeley, did not appear to substantially help the Justice Department in its effort to prove that criminal penalties are necessary to protect minors from exposure to sexually explicit information on the Internet.

One percent? I don't know where they got that number from, but the percentage is way higher on the Internet I am using.

ISPs 'should be responsible' for hacker attacks

Found on New Scientist on Wednesday, 08 November 2006
Browse Internet

Internet service providers (ISPs) should be made legally liable for the damage caused by "denial of service" (DoS) attacks carried out via their networks, a leading internet lawyer says.

The idea of requiring ISPs to guard against DoS attacks will be strongly resisted by the companies concerned, says Malcolm Hutty of the London Internet Exchange, an association of London-based internet providers. "That idea is guaranteed to fail," he says. "It's not the ISP's fault that DoS attacks happen - it is the computer's fault for allowing the bots to be planted."

"Recognising DoS attacks is not easy," Hutty says. He notes that the public blog of the Internet Governance Forum, an event in Athens, Greece, last week was so popular that its servers went down. "That was not a DoS attack," Hutty says, "but it looked like one. How is the ISP to know that it is not genuine site popularity, rather than some nefarious purpose?"

Ollie Whitehouse of antivirus firm Symantec in the UK says criminals could begin encrypting their attack commands if ISPs start inspecting every packet they handle. "That will make spotting a DoS attack a whole lot harder for an ISP," he says. Hutty agrees: "If we try to tell the good traffic from the bad, it'll only incentivise the bad guys to make it more indistinguishable."

Curing the symptoms isn't a solution here. Making ISPs reliable is just a try to hide the fact that legislation doesn't work; just look at the CANSPAM act. It has done nothing to stop spam, but it made some politicians feel better. If someone has to be blamed, it should be the owner of the compromised machine, or the creator of the OS for not making it secure enough.

The End of Net Anonymity In Brazil

Found on Slashdot on Sunday, 05 November 2006
Browse Internet

The Brazilian senate is considering a bill that will make it a crime to join a chat, blog, or download from the Internet without fully identifying oneself first. Privacy groups and Internet providers are very concerned, and are trying to lobby against the bill, but it seems they won't have much success.

If approved, it will be a crime, punishable with up to 4 years of jail time, to disseminate virus or trojans, unauthorizedly access data banks or networks and send e-mail, join chat, write a blog or download content anonymously.

Remember kids, never ever reveal any personal information online, except if you post somewhere on the Internet. Seriously, what are those politicians thinking? I see lots of traffic coming to TOR.

The Virus That Ate DHS

Found on Wired on Friday, 03 November 2006
Browse Internet

A Morocco-born computer virus that crashed the Department of Homeland Security's US-VISIT border screening system last year first passed though the backbone network of the Immigrations and Customs Enforcement bureau, according to newly released documents on the incident.

The workstations at the front end of US-VISIT run Windows 2000 Professional, so they were vulnerable to attack. Those computers are administered by the DHS' Bureau of Customs and Border Protection, which learned of the plug-and-play vulnerability Aug. 11, according to the new documents.

But as CBP started pushing the patch to its internal desktop machines Aug. 17, it made the fateful decision not to patch the 1,313 US-VISIT workstations.

On Aug. 18, Zotob finally hit the US-VISIT workstations, rapidly spreading from one to another. Phone logs offer a glimpse of the mayhem that ensued. Calls flooded the CBP help desk, with callers complaining that their workstations were rebooting every five minutes.

By then, Wired News had already filed a Freedom of Information Act request with CBP seeking documents about the incident. The request received a cool response. An agency representative phoned us and asked that we withdraw it, while refusing to answer any questions about the outage. When we declined, CBP misplaced the FOIA request. We refiled it, and it was officially denied, in total, a month later. After an administrative appeal went unanswered, we filed a federal lawsuit in U.S. District Court in San Francisco, represented by the Stanford Law School Cyberlaw Clinic.

How good is a security institution that can't even protect itself?

Allofmp3.com speaks out against US

Found on The Register on Thursday, 05 October 2006
Browse Internet

Allofmp3 sells music priced by file size at somewhere around a tenth of the cost per track of Western services like iTunes. America and record industry bodies say it does not pay any royalties and is illegal.

Allofmp3's owners maintain that as a Russian business it complies fully with local copyright law. It has achieved second position behind Apple in the UK digital music market, largely by word of mouth.

US trade representative Susan Schwab has been a prominent public critic of Allofmp3. Her office recently placed the company on a "notorious markets" list, and a speech last month blasted Russian authorities for allowing the site to operate freely.

An Allofmp3 spokesman local media: "Susan Schwab markets us so effectively - she could already be our press secretary."

First of all, as long as Allofmp3 complies with local law, everything is just fine. But the second point is much more disturbing: the fact that the media industry can oppress a whole country because one business there refuses to rip off its customers.

New Data Transmission Record - 14 Tbps

Found on Slashdot on Friday, 29 September 2006
Browse Internet

Nippon Telegraph and Telephone has announced data transmission at a rate of 14 terabits per second over a single optical fiber. The paper claims the previous record was "about 10 Tbps." In the new experiment, NTT sent data over 160 kilometers (nearly 100 miles) of optical fiber, in 140 channels of 111 Gbps each.

Now that would be nice for P2P.