FBI clears terrorists of shining laser pointers

Found on The Register on Sunday, 02 January 2005
Browse Internet

Terrorists have not engaged in a nationwide plot to annoy pilots with laser pointers, according to the FBI.

The FBI investigated 8 incidents over the past two weeks in which pilots reported seeing laser beams in their cockpits. The lasers appeared most often during takeoff and landing and were seen in Texas, Oregon, New Jersey and Ohio. As it turns out, the laser attacks were likely the result of accidents or just horseplay.

Ever vigilant, the FBI is now investigating a new laser incident after United Airlines pilots reported seeing a green light when taking off from Nashville International Airport. The pilots were able to complete the flight and landed unharmed here in Chicago.

I'm not going to discuss if those were real threats or just pranks. But when I read this, I remembered a quote from Jim McDermott: "Fear does work, yes. You could make people do anything if they're afraid. Well you make them afraid by creating an aura of endless threat. They played us like an organ. They raised the level, the orange and up to red and then they dropped it back to orange. I mean, they, they give these mixed messages which were crazy making. (...) They will continue, in my view, as long as this administration's in charge. Every once in a while still leading everybody to be afraid, just in case you forgot. It's not gonna go down to green or blue. It's never gonna get there. There clearly is no way that anyone can live constantly on edge like that."

Is Verizon banning foreign email?

Found on The Inquirer on Sunday, 26 December 2004
Browse Internet

A report claimed that Verizon is dumping email sent to the USA from outside the country.

And, it continues, the practice started on Christmas Eve. The filing on the message board claims that a rep for Verizon couldn't understand why any US citizen would want email from abroad.

It continues that Verizon would need a list of email addresses so it could let them through.

Wow, now that's a stupid idea. If this is true and Verizon really doesn't understand that people want to receive mail from other countries, then they need a new management. That statement is pretty offending to the rest of the world. For those interested, there's a more detailled explanation at Neohapsis. Verizon proves that the default management rule is true: "Nobody of us is as dumb as all of us".

FTC Defines Spam

Found on Slashdot on Thursday, 16 December 2004
Browse Internet

The FTC has just issued its final report on how it will define Spam with regards to the federal CAN-SPAM act. According to the FTC, bulk e-mail is commercial if it includes advertising and promotion or if the subject line or beginning of the message would be reasonably considered to be advertising or promotion. This is very similar to the proposed rules that were announced back in August. The modified rules also deal with the issues of transactional messages (an e-mail regarding an order that also includes advertising) and relationship-based e-mail (messages about product updates, etc).

And this will affect spam at all?

Microsoft halted in phonetic domain crusade

Found on The Register on Tuesday, 14 December 2004
Browse Internet

Microsoft has been knocked back in its increasingly bizarre domain name grab by Spanish company Mocosoft.

Domain arbitrator WIPO, meeting in Spain, has decided that Microsoft is not entitled to the domain "mocosoft.com" despite the fact that some of the same letters appear in both companies' names. The site hosts a long list of downloadable applications.

The decision comes on the back off a year-long crusade by Microsoft to take ownership of all and any domains that even sound like its own name. Most famously, Microsoft lawyers descended on 17-year-old student Mike Rowe in January insisting he hand over his domain "mikerowesoft.com". The claim was clearly ludicrous but following heavy press interest, Microsoft went into PR mode and Mike Rowe was dazzled into handing over the domain by a plethora of gifts.

At least someone showed them their limits. It was ridiculous enough when they went after Mike Rowe.

Spammers hide behind the Great Wall

Found on Asia Times on Sunday, 12 December 2004
Browse Internet

The spam chain is complex. Basically, though, most people responsible for sending spam are based in the US, though a growing number are now organized criminals in Eastern Europe and Russia. China is the location of choice for the servers that host the spammers' websites and for buying and selling lists of spam zombies, or personal computers (PCs) deliberately infected with spam-enabling viruses.

Each spam message invariably contains a link to a site where the tiny minority that respond (perhaps 0.1% of the total) can complete their transactions. Most of these sites - some 68% of them, according to a report released by anti-spam firm Commtouch in October - are to be found on servers based in China. In addition, according to Steve Linford, president of Spamhaus, a London-based spam-blocking service, China also dominates the market for buying and selling lists of zombie PCs, which are peddled by virus writers on Internet forums also found on Chinese servers.

Why China? Quite simply, because it is the only major market where spammers can do just about anything they want. Spamming remains legal, and persuading police to act against those providing them services has proved next to impossible. As Linford says: "They choose China because of the website hosting. For proxies you can use Brazil, Argentina, Russia. But the Internet service providers in [these places] will kill their websites straight away. This is the crux of the problem."

Perhaps this only makes it easier. Before I switched to a open source spam scanner, I used some perl scripts to analyze each mail. One of them checked the mail for URLs and looked them up in a list of known spamsites. One could look for URLs in mails and run their IPs through GeoIP; if it points to China, treat it as spam.

Spam e-mails tempt net shoppers

Found on BBC News on Thursday, 09 December 2004
Browse Internet

Computer users across the world continue to ignore security warnings about spam e-mails and are being lured into buying goods, a report suggests.

More than a quarter have bought software through spam e-mails and 24% have bought clothes or jewellery.

The research, which covered 6,000 people in six countries and their attitudes towards junk e-mails, revealed that Brazilians were the most likely to read spam.

A third of them read unsolicited junk e-mail and 66% buy goods or services after receiving spam.

This was despite 38% of people in all countries being worried about their net security because of the amount of spam they get.

Some people need to be kicked hard; how can anyone expect a decrease in spam when so many morons buy their crap? If they want to have their mailboxes flooded, they should sign up to newsletters. Or they need something to do with their lives so they don't have time to read spam.

RSS: Show Me the Money

Found on Wired on Wednesday, 08 December 2004
Browse Internet

Lately there has been a lot of discussion on the net about how to make money off RSS, which, depending on whom you ask, stands for Really Simple Syndication or Rich Site Summary, but which many publishers and bloggers hope will turn into a Really Sweet (revenue) Stream.

Like e-mail alerts, RSS is highly targeted, because it serves headlines only to people who have signed up for them. (In this sense, it's more "pull" than "push.") The difference is that RSS can deliver up-to-the-second content. Not only that, but from the perspective of publishers, it could end up a pretty elegant solution to spam, since antispam filters often make it difficult for publishers to reach readers via e-mail.

As long as advertisments are marked a such, I'm ok with it (although ad-free RSS would be nicer of course). It then would be just a line more to my aggregator to drop all ads. At least you can drop the feed if it gets too spammy, unlike email spam. Those who want ads can read them, the rest can easily ignore them.

Freeze on anti-spam campaign

Found on BBC News on Friday, 03 December 2004
Browse Internet

A campaign by Lycos Europe to target spam-related websites appears to have been put on hold.

Earlier this week the company released a screensaver that bombarded the sites with data to try to bump up the running costs of the websites.

People were encouraged to download the screensaver which, when their PC was idle, would then send lots of data to sites that peddle the goods and services mentioned in spam messages.

Monitoring firm Netcraft analysed response times for some of the sites targeted by the screensaver and found that a number were completely knocked offline.

If only the spam websites would be hit, then I wouldn't have any problem with it. Spammers flood my mailbox with unwanted crap (that I don't even read), forcing me to use filters if I don't want to change my email address every month. The problem is that many websites are hosted on a single server, and if it goes down, so will innocent sites. That is the inacceptable problem. So there needs to be a different approach. Instead of dDoS'ing the site, the screensaver could simply fill out the order forms with bogus data. So, instead of sending millions of requests, just fill out a few thousand forms per day automatically and watch the spammers sit in front of huge useless order-lists.

Internet2 Speed Record: Four Times As Fast

Found on Extreme Tech on Tuesday, 30 November 2004
Browse Internet

Try a sustained transfer of 101 gigabits per second between Pittsburgh and Los Angeles on Internet2. That's the speed hit by an international team lead by Caltech last week, the second year in a row the "High Energy Physics" team has won the Supercomputer Bandwidth Challenge.

The heart of the new effort is the new FAST congestion control algorithm for high performance TCP, developed by the Caltech Netlab team. The effort also involved an powerful collection of hardware, including seven 10 Gbps links to Cisco 7600 and 6500 series routers, and four dedicated wavelengths of National LambdaRail. (The Caltech press release details all the hardware used in breaking the Internet2 Speed Record.

That should push P2P to a whole new level...

Lycos screensaver to blitz spam servers

Found on The Register on Thursday, 25 November 2004
Browse Internet

Lycos Europe has started to distribute a special screensaver in a controversial bid to battle spam. The program - titled Make Love Not Spam, and available for Windows and the Mac OS - sends a request to view a spam source site. When a large number of screensavers send their requests at the same time the spam web page becomes overloaded and slow.

The servers targeted by the screensaver have been manually selected from various sources, including Spamcop, and verified to be spam advertising sites, Lycos claims. Several tests are performed to make sure that no server stops working. Flooding a server with requests so that the server is unable to respond to the volume of requests made - a process known as a distributed denial of service (DDoS) attack - is considered to be illegal.

The idea itself is pretty neat. Spammers want visits? They can have them. It would be nice to know how much more they would have to pay. Let's see the progress in a few weeks.