Project Honeypot aims to trap spammers

Found on New Scientist on Thursday, 03 February 2005
Browse Internet

After years developing anti-spam technology and drafting legislation to outlaw spammers, the delegates at MIT's annual Spam Conference in Boston were overjoyed to see the culprit nailed.

Jeremy Jaynes was found guilty last November by a state court in Leesburg, Virginia, of sending more than 10 million unsolicited emails a day. He was hawking pornography, work-at-home schemes and stock-picking software. The spams are estimated to have earned him around $750,000 a month. He is now on $1 million bail, forbidden from using the internet and will be sentenced this month. The jury has recommended he gets a nine-year jail term.

Jaynes's operation was run from a chaotic office in Raleigh, North Carolina. Cabling to 16 high-speed internet links snaked everywhere and there were CDs packed with spammed email addresses and servers holding spam emails. Even as the police arrived, spamming was in progress.

Project Honeypot, the brainchild of Chicago lawyer Matthew Prince, is taking advantage of a clause in the CAN-SPAM act that makes harvesting email addresses for spamming purposes illegal.

If I didn't mix up a few zeros, this means that spammers make 7.5 cent with every email. Not a bad income. No wonder spam keeps rising. As I said earlier, don't just try to block spam, also try to block their money.

Zombie trick expected to send spam sky-high

Found on CNet News on Wednesday, 02 February 2005
Browse Internet

According to the SpamHaus Project--a U.K.-based antispam compiler of blacklists that block 8 billion messages a day--a new piece of malicious software has been created that takes over a PC. This "zombie" computer is then used to send spam via the mail server of that PC's Internet service provider. This means the junk mail appears to come from the ISP, making it very hard for an antispam blacklist to block it.

ISPs in the United States may have already been hit. "We've seen a surge in spam coming from major ISPs. Now all of the ISPs are having large amounts of spam going out from their mail servers," Linford said.

Linford predicts that ISPs will see a growth in the volume of bulk mail they send and receive over the next two months, with spam levels rising from 75 percent of all e-mail to around 95 percent within a year.

It never ceases to amaze me that spam actually works. People always complain, yet enough buy the advertised crap. Obviously, trying to block the spam itself doesn't work, so other approaches should be tried. Banks could join too and track the money. With a little change of their TOS, it would be possible to freeze bank accounts of spammers and the advertising companies. This would hurt them more than a few blocked emails.

Can-Spam Increased Spam

Found on Slashdot on Monday, 31 January 2005
Browse Internet

According to New York Times, spam has actually gone up [Free registration required. You gave real info, right?] since the CAN-SPAM act went into effect. There is a graphic in the article that illustrates this increase. Before the CAN-SPAM act was passed, spam was about 60% of all e-mail traffic. Now it's 80%. In a we-told-you-so quote, Steve Linford, the founder of the Spamhaus Project, says CAN-SPAM legalized spam by giving bulk advertisers permission to send junk e-mail as long as they followed certain rules. Slashdot covered this story last year. For companies that offer offshore "bulk advertising" servers, business is booming. A survey from Stanford University estimates the global cost of spam in terms of lost productivity to be at 50 billion $ and 17 billion $ in the US alone. CAN-SPAM does give prosecutors some leverage to go after the merchants - but it must be proved that they knew, or should have known, that their wares were being fed into the illegal spam chain.

That's what happens when you let a bunch of clueless politicians try to rule the Internet (with emphasis on try). So many said that CAN-SPAM will change nothing; well, obviously they were wrong... CAN-SPAM did change the amount of spam, but just not like it was planned.

Congress proposes tax on all Net

Found on CNet News on Friday, 28 January 2005
Browse Internet

An influential congressional committee has dropped a political bombshell by suggesting that a tax originally created to pay for the Spanish American War could be extended to all Internet and data connections this year.

The congressional report comes not long after the Internal Revenue Service and Treasury Department said they were considering how the Spanish American War tax should be reinterpreted "to reflect changes in technology" used in "telephonic or telephonic quality communications."

Congress enacted the so-called "luxury" excise tax at 1 cent a phone call to pay for the Spanish American War back in 1898, when only a few thousand phone lines existed in the country. It was repealed in 1902, but was reimposed at 1 cent a call in 1914 to pay for World War I and eventually became permanent at a rate of 3 percent in 1990.

And this time it's to pay for the war in Iraq. You got to love a war-tax.

Thunderbird promises to fend off phishers

Found on CNet on Sunday, 23 January 2005
Browse Internet

Mozilla contributor Henrik Gemal wrote last week in a blog that a phishing detector has been added to Thunderbird. This feature is likely to be available in the next release of Thunderbird, version 1.1, according to the Mozilla bug report.

With the new Thunderbird feature, when a user clicks on a link in an e-mail that appears to be a phishing URL, the detector will prompt the user with a dialog box before the Web site is opened, Gemal wrote. The detector is triggered if the URL has a numeric Internet Protocol address rather than a domain name, or if the URL does not match the address displayed in the link text.

Firefox, the Mozilla Organization's browser software, and Mozilla Suite, its Internet application package, can already detect some phishing scams, according to a posting on the Mozilla news site, MozillaZine. These applications will warn people who try to visit a URL that includes an unnecessary username--a trick used by phishers to hide the true domain name of a site.

Nice to see that Mozilla pays attention to security. With the growing success of Thunderbird, hopefully less people will fall for scams.

Verizon faces lawsuit over email blocking

Found on The Register on Friday, 21 January 2005
Browse Internet

Aggrieved Verizon customers are invited to join a class action that seeks damages arising from the US ISP's enthusiastic email filtering policies. Philadelphia law firm Kohn, Swift & Graf, P.C. filed suit this week against Verizon on behalf of a DSL subscriber in a civil case that seeks class action status.

Since 22 December, mail servers at verizon.net have been configured to reject connections from Europe and other parts of the world including China and New Zealand by default, according to Reg readers and industry sources such as MessageLabs.

John Vincenzo, a spokesman for Verizon, told us that the "vast majority" of Verizon's 4m dial-up and DSL customers are happy with its "long standing" policy on spam and virus filtering. He conceded that some otherwise legitimate email has been blocked but gave no indication that Verizon has any plans to review its policy.

According to Vincenzo, spam complaints come from spammers themselves.

Perhaps the "vast majority" hasn't figured out why they don't receive some emails. Nevertheless, the primary goal is to eliminate spam, yes. But the important factor is to avoid false posivites. That's why the industry is working on good filters. If it was as simple as blocking countries, someone would have thought of that (well, someone at Verizon had an idea, yet the most stupid one ever).

Is IRC All Bad?

Found on Slashdot on Thursday, 20 January 2005
Browse Internet

"IRC is often portrayed by the media as a haven for illegal activity. The author of IRC Hacks set out to find whether or not this was true. His conclusions are quite alarming, suggesting that 99.9% of IRC usage is illegal although he backs up IRC by saying that it is also used for lots of constructive purposes and is used by open source software developers." Update: 01/21 05:17 GMT by P: The author claimed it was merely 99.9% of traffic "to the top 60 channels" that is illegal, not 99.9% of all IRC traffic.

Such "researches" aren't worth much at all. Someone could do a research on the 60 richest people of this world and conclude that 99.9% of all humans have no money problems. But I think most know the truth. Furthermore, the entertainment industry will abuse the headline; they are known for messing with statistics. It's too easy to say that IRC as a whole is illegal, instead of adding the details. Why not trying to push some laws into effect which ban IRC? Well, we might see this coming...

Verizon persists with European email blockade

Found on The Register on Sunday, 16 January 2005
Browse Internet

US ISP Verizon is persisting with a controversial policy of blocking email sent from Europe. Since 22 December, mail servers at verizon.net have been configured not to accept connections from Europe by default.

Verizon is blocking ranges of IP addresses belonging to British and European ISPs (the IP space from RIPE, APNIC, and more) in a misguided attempt to reduce spam. Domains are only unblocked following complaints, with Europeans effectively treated as guilty till proven innocent.

Verizon media relations manager Ells Edwards told Wired that he didn't know when the ISP would lift its blockade. "Normally these things abate in a matter of days," Edwards said.

Verizon three million DSL customers waiting for emails from Europe were advised to use alternative forms of communication. "If it's really important you might want to make a phone call," he said.

I got an even better idea: why not block all emails, and make users request whitelisting? Honestly, this is especially funny since most of the spam comes from the US. It would be more helpful if Verizon would block outgoing mail from their servers. But then, I guess it's pointless to talk with people who tell you to call someone if it's important.

Google's 20-Year Usenet Timeline

Found on Google on Sunday, 09 January 2005
Browse Internet

Google has fully integrated the past 20 years of Usenet archives into Google Groups, which now offers access to more than 800 million messages dating back to 1981. This is by far the most complete collection of Usenet articles ever assembled and a fascinating first-hand historical account.
We compiled some especially memorable articles and threads in the timeline below. For example, read Tim Berners-Lee's announcement of what became the World Wide Web or Linus Torvalds' post about his "pet project". You can find more in-depth information about the archive here.

Wow, it makes one feel really old if you go through the list and think: "Hey, I remember that". Quite a bunch of interesting posts.

What If Online Registration Is Voluntary?

Found on Techdirt on Saturday, 08 January 2005
Browse Internet

Plenty of people have been talking about just how silly it is for so many newspapers to force registration on users, seeing how it cuts down on the market size to which the paper can sell to advertisers, and drives users to other sites instead, since they don't want to go through the hurdle. It looks like at least one newspaper is looking for a much more reasonable middle-ground. They're asking for voluntary registrations. Basically, you can see the article just fine without registering. They just ask for registration info at the top of the page. You can even make that box go away, if you want. This way, they still get those people just passing-by who would never register, and when people do register, it's likely to be good, targeted data, rather than useless, dirty data.

While "member only" sites are pretty useful if you have unique content, it is, as stated above, quite stupid in some cases. News, something that goes around the world in no time, aren't that unique; if one site doesn't have them (or denies access to them), another one does make everything public. See gun. See foot. See gun shoot foot.